Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: 5fcXjsX5SXt3VuF+zIUqvGtTI4EnTwZtVtI2W2fhn/I=
Subject key identifier: 39:C3:D6:35:A9:EE:D1:1A:35:9C:58:AD:42:11:49:5E:D8:D0:0E:B8
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 019D28BB728B8E93549DF7EBC584025B497E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: 7-32Md7Q_fthPHDnPKRu6x3v5Vw.roa (hash: jKLcvLv2eQ3ck8qI0kEKdK//Dg+ioPx0eWUIN6VBJvE=)
2: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: 2i9haKgf575gMQ9hhH0BvJhzD6YnbsdD57k1EqcJV6w=)
3: hrCfuMVXLBCd5tVXj7Gmqzx0zMA.roa (hash: lBA8s9K0T2c9sC0fKCrfeOpYhHxaUfWtbc2uSEp45FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:72:8b:8e:93:54:9d:f7:eb:c5:84:02:5b:49:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=39c3d635a9eed11a359c58ad4211495ed8d00eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:37:dc:2c:5a:92:1e:9b:32:60:89:9c:c4:
a5:6c:de:92:bf:cb:88:fd:a3:2c:4e:50:cf:a3:bf:
54:c6:00:0b:46:0f:ec:25:24:97:0c:65:5b:e2:51:
43:03:8a:0c:a6:b8:9d:24:8f:6f:4e:db:2e:04:a9:
a7:57:50:09:cc:df:70:34:c9:ae:23:df:5c:46:c3:
50:41:86:e9:a2:d4:d9:8c:49:6f:16:ab:33:2c:6c:
4f:29:e7:8c:6f:1e:95:85:fc:dd:40:b6:79:7d:78:
cc:9e:e4:d4:41:94:f4:f2:60:a5:94:5f:2d:25:dc:
45:46:dc:25:10:82:ca:06:21:48:f0:7f:04:55:03:
25:41:49:1c:5c:52:4e:27:1c:25:e9:e5:2f:ae:3f:
d8:f7:35:f5:0d:71:7e:38:84:ea:0c:f2:4d:a9:24:
92:d0:28:7d:d0:13:7e:c2:c3:c1:d6:5d:62:63:59:
ea:3b:99:42:99:7f:5a:2f:9b:ec:f6:dc:a9:c6:4b:
64:43:1f:b4:e2:36:9d:c3:a5:57:ef:2c:48:91:b7:
56:3d:64:65:ac:61:bb:bb:c3:4c:14:d1:54:58:c3:
f9:f7:f7:82:10:5b:b7:fd:ab:fd:b5:5c:3e:0a:29:
19:41:97:27:83:14:c5:62:90:b6:06:0b:e9:fb:1a:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:D6:35:A9:EE:D1:1A:35:9C:58:AD:42:11:49:5E:D8:D0:0E:B8
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a7:94:41:be:e6:ca:aa:48:16:0f:00:72:79:43:a5:6c:5e:
5d:71:8e:0f:ef:48:22:ae:4a:c1:c2:14:06:d2:27:de:fb:93:
5e:5c:97:25:55:be:2d:4b:36:57:a8:e5:cd:f8:b3:1c:0f:e0:
d8:76:47:5c:fe:cf:fc:36:d9:18:7c:9a:85:57:7e:60:e3:da:
55:2c:da:64:a6:77:3c:aa:c2:c8:65:82:53:38:0d:e5:d7:ed:
5f:5b:05:84:2c:cc:54:81:57:d8:54:1b:24:8b:4d:60:bf:f9:
6f:38:b8:ef:cb:db:62:f8:88:bd:0e:43:b9:68:78:ca:2d:4b:
83:97:88:4f:ae:08:1c:75:fd:d8:62:20:8a:da:b2:41:60:14:
b5:c0:75:c3:ca:63:3e:56:7c:03:9e:b7:df:4f:fa:ce:9c:c0:
37:82:18:4d:dd:96:c9:46:b4:fe:e8:7a:dd:78:28:2f:b3:15:
e2:d6:09:22:6b:0e:e5:78:96:7e:86:c2:08:03:da:7b:97:bb:
11:83:f1:b3:da:be:ba:b0:25:97:48:12:33:34:62:11:4f:50:
0e:8b:e0:ac:e7:a0:16:03:e1:b4:bf:d9:e5:cb:a5:24:b0:db:
b9:45:4a:5d:d0:c0:09:33:0a:24:dc:3d:45:e1:f6:3a:72:76:
10:f1:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:51 2026 by rpki-client