Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: IqrWR1nnLFVu9bZ4rCvF8ssAXN/PVokQ/JRLqsLH5kc=
Subject key identifier: 4E:3D:CB:B4:8C:27:8E:FA:ED:1B:6D:0E:1C:60:EF:1F:69:1E:82:2D
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 01A0D012BA6FE540D60E07E75B27B15A49A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 1968
Signing time: Wed 23 Sep 2026 21:01:23 +0000
Manifest this update: Wed 23 Sep 2026 21:01:23 +0000
Manifest next update: Thu 24 Sep 2026 21:01:23 +0000
Files and hashes: 1: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (hash: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=)
2: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: 7GzMIjWTdgN2wdxQNLTbOMsjAscco5/rc5YBrP0IMP4=)
3: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (hash: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:ba:6f:e5:40:d6:0e:07:e7:5b:27:b1:5a:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Sep 23 21:01:23 2026 GMT
Not After : Sep 24 21:01:23 2026 GMT
Subject: CN=4e3dcbb48c278efaed1b6d0e1c60ef1f691e822d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:4b:dc:17:ae:bb:2c:21:be:ba:09:2d:39:
1e:71:6c:4d:54:bc:a5:28:a9:a8:37:b6:b6:43:21:
fd:dc:0e:95:55:9c:25:1e:ed:08:b4:8a:fe:2a:63:
6d:36:be:77:5d:43:01:2a:ae:07:97:6e:09:4f:9b:
40:8b:b1:5f:2e:d8:a9:fa:79:50:8c:59:ba:e3:50:
cb:2a:38:41:cf:5e:a1:f2:32:69:a0:ca:03:07:ca:
81:39:b5:4f:59:c0:45:55:40:c1:64:10:7c:84:f0:
a0:4d:07:fc:ee:4e:13:91:0c:df:12:97:a9:98:4b:
fa:c3:3a:55:86:57:68:61:cf:15:13:aa:ce:f6:b5:
74:c8:6e:87:ce:55:3b:73:2b:10:9a:1a:6a:54:1d:
3f:0c:b2:4e:71:7a:cf:4c:00:b5:02:57:0e:74:4a:
29:bd:15:dd:13:ce:f4:d3:cb:c0:b4:fb:ec:e8:42:
89:08:e0:5c:90:bb:58:8c:76:ac:85:e6:cf:07:1e:
ba:00:9e:30:f7:61:60:05:8e:46:d1:bb:56:42:ea:
81:50:fb:2e:c6:64:a3:08:50:47:00:de:82:0a:a5:
b4:ea:a7:ce:02:0f:ac:a4:c2:31:73:dd:31:15:b1:
d0:e3:ee:d4:73:aa:e3:03:9d:39:93:08:17:57:1f:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:CB:B4:8C:27:8E:FA:ED:1B:6D:0E:1C:60:EF:1F:69:1E:82:2D
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:e2:cd:d5:98:b5:4f:01:ea:e9:6a:e6:a6:45:59:d8:18:
59:96:64:7c:de:5f:05:9e:13:a0:91:47:db:55:3f:96:f4:35:
00:51:74:d1:47:31:89:02:93:d4:d4:d8:03:79:bd:21:2f:48:
65:31:cf:f7:30:65:67:97:f0:bd:d2:ef:5f:60:af:f7:1e:36:
d4:af:08:b9:e5:7f:52:dd:99:a8:49:cc:69:58:0d:14:7c:72:
e7:ff:39:ad:5a:0f:d3:09:d3:da:ca:e7:67:b8:f7:b6:ac:48:
3a:32:43:d2:a7:d2:71:19:b0:36:9a:2a:73:c7:dc:4e:b6:17:
39:06:e5:1b:d1:1a:1f:3f:74:4c:15:5d:6d:e8:44:e9:7e:6d:
c2:71:95:bc:5c:7d:3c:a5:6f:12:91:f7:c4:5f:43:2b:02:84:
d0:16:31:b0:d7:6c:e2:a1:2f:da:2f:5d:ac:ba:47:a3:aa:f9:
1e:a0:d8:75:bf:c5:b3:98:9a:07:d4:d3:9c:cf:87:a7:89:87:
56:0f:11:93:92:36:aa:8c:e7:12:ca:43:e5:50:58:bc:29:d7:
66:14:57:e5:8d:0e:d6:16:e2:2d:a5:ac:ea:db:6f:78:44:02:
ce:7e:6c:95:1d:c2:54:f2:41:0d:2c:d5:27:08:dc:a7:28:51:
66:f8:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:54 2026 by rpki-client