Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier: zpsUOr7SolIdjto1sAt8XNkKXl31Eo67EaHoS7JjWps=
Subject key identifier: BC:49:E5:68:19:10:0E:E4:02:00:D2:93:C7:20:76:50:F1:C1:38:25
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial: 01A0D917AAC00AF14D5F2B6AC3D85386F914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number: 0346
Signing time: Fri 25 Sep 2026 15:03:21 +0000
Manifest this update: Fri 25 Sep 2026 15:03:21 +0000
Manifest next update: Sat 26 Sep 2026 15:03:21 +0000
Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: Ybkuh9F57SdLtsWBpbJaGQMq/aBfShXC+0ZZpOYDDvE=)
2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:aa:c0:0a:f1:4d:5f:2b:6a:c3:d8:53:86:f9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
Validity
Not Before: Sep 25 15:03:21 2026 GMT
Not After : Sep 26 15:03:21 2026 GMT
Subject: CN=bc49e56819100ee40200d293c7207650f1c13825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:22:d1:48:12:41:c4:b3:7f:2c:d3:29:db:
3f:39:88:07:aa:71:f7:f6:30:e3:97:19:01:1d:0d:
e6:24:26:24:d3:b8:ca:46:60:29:3a:4e:bb:0b:4c:
ec:8f:d5:bd:e7:d1:75:03:67:45:80:df:dc:2d:e5:
64:00:ed:c8:8b:ce:b4:f0:3d:0f:92:1c:1b:da:bf:
fb:65:fd:92:e8:36:68:5e:51:73:78:21:eb:08:f1:
8e:da:2e:24:c2:fe:1a:f9:c0:e2:e3:7c:ef:2e:66:
16:41:13:f4:dc:df:f8:f9:2d:38:20:a8:9f:6e:7c:
4f:3d:dc:aa:1a:20:d6:5a:a0:69:37:72:fd:dd:9c:
bd:d9:53:25:16:7f:25:0f:56:9e:27:e6:d8:98:2f:
5b:60:07:4e:1b:4a:d9:f3:1c:18:2c:7f:a6:6a:79:
73:1c:a9:1e:68:f5:7c:71:7d:2a:99:47:aa:e5:77:
60:c3:48:0e:0e:b6:61:f3:49:49:41:b8:27:f4:c6:
fa:64:4b:4e:23:65:78:ab:79:8b:0b:25:99:17:58:
cc:a3:55:84:b4:80:c3:6c:e1:a8:23:f9:c2:03:d9:
32:74:39:82:ff:eb:d3:5e:c0:18:7a:96:80:24:94:
42:ca:d0:d4:fb:37:c4:3d:d3:af:7e:94:2f:16:a4:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:E5:68:19:10:0E:E4:02:00:D2:93:C7:20:76:50:F1:C1:38:25
X509v3 Authority Key Identifier:
keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ab:3f:43:69:ab:2b:13:b1:d7:de:72:98:f5:ce:10:d2:3a:
4b:32:07:ed:52:e3:9c:54:6b:a3:30:b5:38:92:b2:d5:56:46:
ad:fb:7a:e6:30:c2:a7:56:aa:bd:2a:e1:ce:89:02:22:63:0b:
47:84:38:cb:58:1c:d2:8a:18:29:a1:bd:fd:6e:c8:3b:35:ec:
1a:f4:ab:9c:9d:d3:79:b4:4c:45:e2:f4:ff:b9:e4:f1:16:9c:
c5:eb:3b:f5:93:9c:e2:b7:95:d4:9c:60:c9:a6:ab:69:ad:cd:
70:3e:49:b2:39:19:13:5a:54:3d:75:ad:ce:aa:6f:ca:45:e9:
e5:f2:90:af:c4:60:31:4b:bd:7b:7f:0d:5c:a8:7b:9e:1f:6e:
56:af:c9:68:e0:cf:5a:4c:1a:61:a2:e9:cf:19:b0:eb:84:36:
80:e8:03:be:11:21:0e:22:41:58:0f:41:b9:27:a4:8c:bc:6e:
82:c9:ed:3b:ad:68:49:89:92:a8:2e:af:b6:d5:05:e2:b3:60:
0b:ec:00:a0:48:80:29:bf:f8:bf:08:9f:9d:cc:cb:73:be:53:
77:19:be:aa:01:ce:de:6a:e5:dd:4a:31:3e:46:4e:a7:8f:24:
d9:26:71:1f:95:46:62:83:58:77:ec:40:58:07:01:8e:c6:4b:
f9:2e:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:17 2026 by rpki-client