Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier: DSx8C41pidfrJWXbaeHj92+08KJ9fkWogiNuTtlobu8=
Subject key identifier: E9:96:66:FD:2B:DB:BA:6E:09:2C:29:91:19:02:FA:B4:2E:F6:C7:92
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial: 019D26CCE8FAC4899CB951BE7CC457496458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number: 015C
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: EMZ5a/+ph2DNiSDHh/EafjN1tfiQ3Sad9CsIcqzQCVA=)
2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e8:fa:c4:89:9c:b9:51:be:7c:c4:57:49:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=e99666fd2bdbba6e092c29911902fab42ef6c792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:5e:82:1f:86:90:9b:26:fa:cb:b4:aa:8e:
c6:78:1a:7f:8a:a1:32:4e:22:f1:a6:62:c7:6e:9e:
1d:65:71:61:21:74:63:f7:03:fb:2d:0c:bd:51:cd:
d3:c6:dc:6f:2b:2c:02:0f:4f:3d:1f:39:5b:57:c3:
87:29:bc:e5:e6:58:c9:35:f1:40:e0:b6:1b:38:44:
a3:93:7d:19:1f:b2:41:2f:9d:39:f1:a0:13:31:58:
23:c6:97:71:10:bb:b0:8a:12:ee:2a:12:df:d2:1e:
15:cc:3f:ff:b3:81:e3:6a:f6:45:2c:df:a4:84:ec:
48:af:a3:d8:89:1b:50:d5:7c:e2:95:b6:a3:9f:4d:
94:d3:e4:99:d2:64:61:bd:12:49:54:aa:95:bd:af:
3e:8a:24:0f:de:b5:11:b5:87:e3:6a:89:b0:b5:c4:
bd:35:21:2e:b6:fa:73:84:90:5a:94:0a:86:66:bd:
ff:3e:eb:e9:a0:e1:31:b1:8e:27:97:a9:3c:60:81:
55:d1:aa:ca:e9:8f:8f:26:e9:72:7c:3e:65:81:af:
2e:21:f8:9e:20:01:3d:f4:8c:4b:c8:4b:e9:d0:ab:
6f:10:3d:a1:a9:28:4d:46:05:fb:50:61:94:dd:f0:
d5:58:55:ea:9a:26:e3:12:1e:5a:cc:8a:c1:4d:52:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:66:FD:2B:DB:BA:6E:09:2C:29:91:19:02:FA:B4:2E:F6:C7:92
X509v3 Authority Key Identifier:
keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:99:59:20:99:1f:00:46:7b:17:37:16:fb:c6:4d:4f:fd:0a:
5c:fd:f1:e2:0a:05:25:d1:3a:ca:dd:57:2a:ca:8d:01:64:6f:
a6:86:66:11:13:05:f6:49:74:8f:a8:63:86:f8:a0:c3:10:b0:
87:a2:e0:56:4c:31:39:ff:16:1f:55:b4:b1:98:d5:a3:4c:e4:
29:2b:d5:36:94:dc:a5:a5:2d:31:64:2a:1f:b9:34:1b:4a:a0:
52:da:0c:8f:f9:8a:8c:8d:a1:81:cd:c9:e1:4e:fd:c5:07:42:
78:aa:36:dc:10:28:ed:8f:04:29:ff:6b:45:c0:fe:5a:ec:81:
d8:89:c2:2f:f7:34:80:67:20:95:70:03:6d:b5:b9:29:13:da:
61:5e:bd:f2:cb:e6:d3:a9:82:0d:f8:d9:08:37:78:45:ff:7d:
88:dc:e2:6d:d3:73:1a:9d:18:3f:ba:63:d7:4d:64:70:f2:75:
e2:c5:31:06:93:e4:46:86:d2:d9:ba:93:52:bb:29:29:9f:55:
9c:ac:55:40:b3:5a:6b:69:42:9a:cb:eb:d8:c4:7f:55:b7:6a:
12:9e:46:bb:e4:36:9e:1e:f6:30:d2:79:32:26:40:56:11:b7:
ce:4c:2d:c3:22:aa:52:9d:54:ec:94:cb:5a:2b:9a:8d:a0:07:
56:b4:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:32 2026 by rpki-client