
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier: lljYW/cb0tK29p2KNlgJy3M8YvnzEcMlEAXUkMmGMHo=
Subject key identifier: C4:FE:4F:FD:A6:F1:FF:0B:21:5C:DE:57:92:27:78:10:E9:85:D1:01
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial: 019F92B650AAB9BCACF8BE8F1C0681CCD90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number: 029D
Signing time: Fri 24 Jul 2026 06:00:49 +0000
Manifest this update: Fri 24 Jul 2026 06:00:49 +0000
Manifest next update: Sat 25 Jul 2026 06:00:49 +0000
Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: ODaDMnZjw01m0aU89KVU4nrQ3ykIsGKA5Em2U1Epyng=)
2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:50:aa:b9:bc:ac:f8:be:8f:1c:06:81:cc:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
Validity
Not Before: Jul 24 06:00:49 2026 GMT
Not After : Jul 25 06:00:49 2026 GMT
Subject: CN=c4fe4ffda6f1ff0b215cde5792277810e985d101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:0e:5d:08:9a:cb:5a:c5:a9:9c:f0:c8:33:
17:52:5b:62:10:85:79:03:de:15:af:9b:fa:27:ce:
82:83:28:b8:b9:27:72:2f:b5:29:cf:84:f9:3e:85:
52:84:b0:2d:31:d9:93:d6:29:8d:77:b9:d9:4a:40:
87:1e:a4:bf:51:d2:85:25:ab:37:00:05:6a:b6:0f:
7f:ff:a5:19:c3:f7:02:31:3c:65:62:dd:b0:f9:49:
9a:cd:35:c5:46:9d:fd:99:ba:bc:33:21:f9:dd:2b:
b9:c9:af:0c:6e:08:c8:d6:93:d0:96:69:2c:26:07:
07:3c:90:73:7b:ff:f3:a4:f4:dd:6e:9c:ef:cb:3d:
0f:f7:b7:93:24:df:e9:0a:93:b2:ca:08:b5:7c:b6:
d1:44:86:25:13:0e:8f:55:b0:23:72:07:b8:1c:a8:
1e:ed:78:b9:d4:aa:2a:18:9a:9e:f6:a6:88:65:98:
bd:17:34:49:ea:1d:ec:1c:4f:17:13:4a:6b:28:1d:
12:09:00:98:6d:b9:11:6a:1d:c2:ce:b2:37:c8:42:
8e:f9:03:5f:60:0f:20:a9:70:6f:11:52:d9:38:c5:
34:a1:17:1e:ef:44:81:26:58:8a:6f:63:86:81:87:
be:91:21:f6:ed:0d:b0:d4:4b:29:0f:8a:a8:aa:0f:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:4F:FD:A6:F1:FF:0B:21:5C:DE:57:92:27:78:10:E9:85:D1:01
X509v3 Authority Key Identifier:
keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:6d:26:fe:2c:b4:3e:05:8c:b6:32:ac:d1:44:79:db:5c:
a0:b6:a3:7e:70:ab:d2:f0:bc:00:1e:9d:dd:ec:a1:0f:aa:3c:
dc:b9:ab:e4:da:1f:4b:b8:62:c9:8f:ba:1a:e8:eb:aa:2d:5f:
63:2c:47:e9:de:69:e7:61:71:12:42:21:9e:f8:4f:50:b7:66:
47:03:3a:bb:6f:31:a8:12:2b:5c:66:ce:99:fc:6a:ce:6b:a4:
13:39:60:36:3a:4b:af:59:76:ca:3b:51:77:dd:e0:5a:ff:1d:
c2:ec:20:35:17:50:4d:83:c7:10:4b:9e:16:70:21:b1:2a:9f:
41:2b:df:ca:ef:50:88:97:f7:e5:73:ec:62:3e:49:f6:6c:18:
84:54:2f:67:bf:09:5b:f1:c9:7f:25:27:9f:2c:d8:e9:5b:df:
38:bb:cd:c0:c4:3c:27:f3:68:47:5e:f4:6b:47:f6:85:48:0f:
fc:5c:c5:d9:5f:69:69:07:27:e7:eb:8e:5b:cb:2c:b6:3f:b6:
f1:07:57:c3:59:21:55:d7:d7:95:0a:69:51:b8:14:d6:06:64:
fa:bc:28:1a:bc:cc:89:48:15:c7:cb:46:ca:3d:f6:ee:9a:df:
01:e8:df:73:3c:6e:fa:84:18:b5:82:c0:d9:ac:ef:5e:d6:4b:
42:43:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:21 2026 by rpki-client