Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: o+kW79bEhWk1rg1itfAgGuA2n1MpZYCG9i9jMRtp0PY=
Subject key identifier: E5:6F:A6:46:AF:60:3F:A7:82:65:D9:35:B9:A6:00:19:69:7D:EE:1A
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 019D984FF47D90BD6E7846F94C75161D7E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 082B
Signing time: Thu 16 Apr 2026 22:01:09 +0000
Manifest this update: Thu 16 Apr 2026 22:01:09 +0000
Manifest next update: Fri 17 Apr 2026 22:01:09 +0000
Files and hashes: 1: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: XPdWZdZuzM0eb8ThZKUp8Rq88MugnLbGdW7MyvKvirs=)
2: Su7rQOIkS9nuJmSNvRRs1QN_-fM.roa (hash: ns1D9a29tK85IxYV+qzmWGr1+lxPzL7JzPcniXnFQUc=)
3: _YAH5Wjs-niYXnxJmDCsUre1NZc.roa (hash: WWh98cgoSKm41Ou+TSNKw8LXpWW2F2WWcQFTdfkxPLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f4:7d:90:bd:6e:78:46:f9:4c:75:16:1d:7e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Apr 16 22:01:09 2026 GMT
Not After : Apr 17 22:01:09 2026 GMT
Subject: CN=e56fa646af603fa78265d935b9a60019697dee1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:c7:0a:df:41:42:66:cb:b8:e1:86:21:5a:
a8:e6:31:1b:42:80:6b:88:e1:9b:36:c5:3b:66:29:
8f:5d:f1:0b:29:36:f5:a7:0a:64:2a:c0:b5:d9:88:
8a:84:8a:b9:58:31:1b:2f:84:50:37:ed:e9:b7:cd:
ce:bc:43:ec:03:fb:c5:dc:0b:a5:a9:dc:b6:29:33:
aa:fd:72:f2:d1:f3:02:23:f1:95:4d:f5:74:c3:52:
76:d8:02:fd:7b:f0:5d:78:0e:71:7e:8d:bf:fc:cf:
3f:d7:97:6d:1e:63:8c:5b:52:1d:97:6f:84:e9:c4:
86:ca:20:d7:88:f7:0d:04:83:b2:45:9a:41:16:50:
25:3d:0f:62:fb:92:30:ba:06:cd:96:c7:80:72:24:
13:78:c9:8d:72:83:55:48:38:8e:9f:a3:dc:2b:e9:
7a:6e:fc:6a:07:77:3a:3e:32:c5:75:3d:14:ce:ac:
5c:58:74:d0:5c:ec:e2:a7:ab:49:dc:e2:99:b2:c4:
62:fb:3a:be:5f:52:12:86:80:fe:af:72:13:aa:d3:
73:67:56:18:81:3b:00:15:9b:b1:2a:98:82:ee:37:
b9:c2:b6:47:e0:2e:16:ac:8b:6f:61:86:0c:28:1d:
be:ab:ab:42:66:e1:00:bf:0b:c0:23:a7:17:27:c5:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6F:A6:46:AF:60:3F:A7:82:65:D9:35:B9:A6:00:19:69:7D:EE:1A
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:17:c6:c2:29:51:d3:1f:9c:09:01:e0:14:88:ad:08:6b:16:
4b:b3:e6:2a:1f:08:ea:20:a3:6c:54:a0:89:95:f5:d0:c0:f1:
aa:64:74:b4:dc:da:80:d3:da:96:6d:ce:10:c2:74:4d:0a:95:
3d:9f:d2:2e:8b:ff:b6:06:ba:64:14:cb:54:d9:f5:50:5f:d3:
3a:ec:16:63:d9:bd:8b:5f:9f:77:e6:52:5b:0f:06:82:ee:09:
cc:83:16:c7:63:68:93:7a:30:ce:d2:9d:a8:05:ae:5b:44:d2:
3a:80:53:77:1d:d7:11:9a:0c:d3:ea:cd:b0:1e:7e:c3:3c:b2:
5a:4e:f0:72:db:45:82:42:6c:14:c0:a1:a7:d4:71:55:d0:4b:
6f:07:f3:49:71:94:a6:78:58:41:77:81:c2:0c:5f:ea:42:13:
94:ba:58:d3:b0:14:b7:6d:54:ac:81:c2:23:d6:db:c9:d0:d8:
a3:6c:03:fe:81:34:3d:f9:61:4b:c7:ff:16:fb:a6:4e:34:26:
31:a8:29:a2:cc:eb:f6:17:71:68:f7:29:1c:aa:c5:68:85:04:
de:bb:0d:7b:4d:c7:1b:7c:95:64:8e:71:71:c1:f2:9a:5f:38:
84:ce:3a:c9:17:14:b6:0d:a5:a5:ae:06:23:a1:d3:74:95:12:
16:ed:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:35 2026 by rpki-client