Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: bSm5ZKYIhpeKJsh5H/spiSwMTH5zF52qOkCBnrIkd/8=
Subject key identifier: B1:C8:C0:BA:F7:F0:4C:CE:AA:10:DE:28:AE:05:B4:84:10:0E:DF:55
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 019E1DFE008139749D22921D23D4C7BCA031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: 7-32Md7Q_fthPHDnPKRu6x3v5Vw.roa (hash: jKLcvLv2eQ3ck8qI0kEKdK//Dg+ioPx0eWUIN6VBJvE=)
2: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: J1pWGcXGopWEO0kxPWAIKwhphTrJUWSoLLt/ynRj+PE=)
3: hrCfuMVXLBCd5tVXj7Gmqzx0zMA.roa (hash: lBA8s9K0T2c9sC0fKCrfeOpYhHxaUfWtbc2uSEp45FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:00:81:39:74:9d:22:92:1d:23:d4:c7:bc:a0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=b1c8c0baf7f04cceaa10de28ae05b484100edf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:ab:c4:59:e4:56:d2:24:b1:ce:b4:15:6d:
d0:1d:a0:59:8d:35:7d:da:66:c9:5e:9a:71:c9:f8:
18:18:95:17:50:3c:94:aa:76:62:25:4d:3b:58:f0:
16:65:20:5f:68:28:be:50:b7:34:e4:06:70:29:c6:
ba:4c:8b:eb:00:6e:a0:da:3e:f4:92:be:7d:b5:63:
d3:02:8b:97:f3:12:37:eb:d5:0b:99:9d:ed:8c:5d:
eb:5f:28:c1:1e:ac:3e:f0:44:8d:32:f4:f3:19:85:
2c:58:89:30:b9:9b:87:22:e6:74:f1:4f:c1:5a:c3:
3d:66:d9:6d:01:3c:c7:34:39:bc:56:6b:aa:84:e5:
76:5b:1f:68:97:63:16:5c:27:c1:4d:6c:d0:ab:e1:
a4:ba:1a:53:74:e8:81:3a:e8:c6:3e:65:5f:ef:f1:
fd:3a:a4:63:77:78:b3:2f:c6:9a:16:08:0b:9f:0f:
a6:ec:dc:cf:1d:c8:17:8c:f9:18:8d:93:c3:87:d5:
3c:a2:52:bf:2d:54:e7:08:35:e9:1e:40:67:bd:f2:
ad:54:66:41:18:d1:2f:05:5e:b5:96:b8:58:f4:eb:
a3:6a:ad:e5:09:36:1a:42:e3:d9:4d:03:5a:ec:c9:
95:bc:2d:da:32:c4:43:8c:ad:e1:66:3d:bd:85:c0:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:C0:BA:F7:F0:4C:CE:AA:10:DE:28:AE:05:B4:84:10:0E:DF:55
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:44:2e:a3:f7:67:10:9e:43:44:f4:7a:e4:0f:30:d7:c7:b4:
de:9f:a0:a1:43:0e:ca:6d:bd:30:a4:ba:16:a2:04:c9:c7:c0:
f5:ed:5d:cf:3e:09:16:c9:6b:4a:dc:88:05:70:2f:cb:2d:b4:
62:c0:d3:ad:1b:7c:44:76:98:32:4c:a2:fc:03:7b:88:e1:63:
56:13:df:40:a5:ff:5a:fc:56:65:78:ae:64:2f:79:d6:11:70:
c6:63:31:ac:92:d2:00:69:54:b1:da:04:4d:64:d5:39:83:e7:
d2:f8:b5:c5:08:dd:de:74:cb:0e:ef:42:4c:03:ee:1c:d6:06:
59:6e:8a:f4:c1:80:2c:6b:fb:a1:81:f7:ab:c2:43:ee:38:bf:
d7:90:4e:fc:f5:cb:7a:9d:a7:f5:ae:43:9c:c8:43:b6:cb:0d:
e3:07:90:dd:a9:0b:aa:c8:0c:b6:8f:ca:42:1d:4d:1b:1f:b3:
a3:a7:59:56:63:50:9b:b0:28:40:4b:f3:6a:6c:54:04:22:7c:
ea:64:94:cd:eb:3e:61:4b:03:66:99:cf:86:9b:17:0a:6a:c5:
64:ba:73:b4:f9:59:f8:b8:6f:f5:6c:f5:ba:fb:5f:81:be:73:
e4:ec:aa:da:94:e3:3e:f8:dc:bb:6f:44:51:b5:f3:d2:4f:bc:
af:60:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:26 2026 by rpki-client