Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: q5UDWC3BNxvefOxr2WkGEtt1buMNbFF29GX4IBxRYtg=
Subject key identifier: 2C:C6:24:D4:35:FC:C2:F0:5E:1F:96:01:02:EC:97:68:8D:8C:09:72
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 019D984FF3A094748317F6A0297FEBA2949F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:09 +0000
Manifest this update: Thu 16 Apr 2026 22:01:09 +0000
Manifest next update: Fri 17 Apr 2026 22:01:09 +0000
Files and hashes: 1: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: zzh9Ise3+AOrmnVXCjUbmIq2Etko1PDnI+xWblWdg7E=)
2: yAETyxqCIBgHtRNroe6hgJM7AvA.roa (hash: /0cKih93DWtvFY7DowMlTChYQqnFT+3gH96BNNkgjiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f3:a0:94:74:83:17:f6:a0:29:7f:eb:a2:94:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Apr 16 22:01:09 2026 GMT
Not After : Apr 17 22:01:09 2026 GMT
Subject: CN=2cc624d435fcc2f05e1f960102ec97688d8c0972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:06:31:b9:35:e8:2c:08:5d:f0:29:95:c1:
60:7c:90:87:e8:db:5b:94:2e:40:c5:54:f7:b3:36:
04:39:97:8a:c0:8c:95:b9:a8:11:5b:2b:b9:3a:e0:
f4:7e:51:7c:1c:38:0b:e1:54:88:8d:a5:2b:ef:2a:
0e:50:de:d2:6f:fd:c9:ac:a8:8f:33:6d:bf:20:15:
8e:5c:cd:4b:24:2b:70:8d:67:a0:bc:80:88:e6:aa:
12:9e:82:47:0b:cc:ef:2c:db:57:cf:49:de:d8:a1:
c3:f7:6c:ea:c3:72:ef:3a:73:3a:83:89:46:26:42:
8a:17:6b:b3:0b:1d:f8:91:04:e4:4e:b8:9a:08:60:
c7:bf:26:cf:90:82:98:4e:4c:f4:88:d3:fc:f1:d3:
bc:6f:7b:be:f1:05:e8:8c:74:3a:36:88:53:3a:94:
84:3c:ae:07:86:1d:8a:1e:9a:4d:2a:65:b9:e1:f1:
3c:e2:97:a1:e9:22:52:db:7f:f8:36:f7:5a:a9:3e:
5e:a1:a5:23:e8:dd:06:50:53:c5:c5:d8:dd:a9:32:
20:85:3e:8d:32:8c:57:4f:27:6b:12:97:b8:9c:1c:
d8:55:23:0f:b2:04:0d:ea:c3:61:f0:74:4d:40:99:
f7:d2:88:24:3c:6b:c0:07:2d:c1:fb:4d:c8:f0:83:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:24:D4:35:FC:C2:F0:5E:1F:96:01:02:EC:97:68:8D:8C:09:72
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ab:b2:ee:81:d5:96:93:cb:cf:22:88:69:a6:68:82:1d:06:
0d:14:25:f0:47:26:3a:45:c5:ab:bf:31:21:7b:78:82:ea:75:
56:d8:ee:ae:12:1b:04:ab:fe:2b:2a:4a:1c:52:d1:77:c4:4c:
ba:dc:df:62:f0:3a:11:c6:5c:2c:ae:8d:aa:55:2c:da:9b:3f:
af:13:39:55:51:a1:34:77:fa:6e:59:2d:fc:01:72:42:8b:21:
44:d0:c3:d0:2d:c3:f8:30:7b:a4:16:ea:af:99:97:66:b2:dd:
a7:46:5b:14:a1:c9:b7:f7:26:96:7a:87:88:8d:54:df:c4:b9:
56:72:e4:78:3f:f7:62:af:72:15:a3:75:7b:05:15:20:d8:02:
9a:eb:fb:22:25:6c:33:eb:95:64:ed:bd:72:61:d7:3c:f2:f7:
c2:47:11:4c:6c:5b:41:e5:b1:1a:45:01:73:68:e1:24:5e:6e:
03:d5:1a:b3:c6:41:4c:1a:f4:31:0f:d8:0a:60:b2:f3:a2:c0:
59:2e:3e:64:9a:14:5a:58:ac:57:ba:79:0b:fa:1b:cf:2f:e6:
a6:83:37:e8:61:aa:d4:34:df:b7:03:1b:bb:9c:d7:8e:af:7d:
3d:78:74:bb:85:11:ea:14:2f:3d:7b:65:5c:32:31:55:f9:41:
0e:d2:ed:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT/OglHSDF/agKX/ropSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1
Y2E0YmYwHhcNMjYwNDE2MjIwMTA5WhcNMjYwNDE3MjIwMTA5WjAzMTEwLwYDVQQD
EygyY2M2MjRkNDM1ZmNjMmYwNWUxZjk2MDEwMmVjOTc2ODhkOGMwOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX4GMbk16CwIXfAplcFgfJCH6Ntb
lC5AxVT3szYEOZeKwIyVuagRWyu5OuD0flF8HDgL4VSIjaUr7yoOUN7Sb/3JrKiP
M22/IBWOXM1LJCtwjWegvICI5qoSnoJHC8zvLNtXz0ne2KHD92zqw3LvOnM6g4lG
JkKKF2uzCx34kQTkTriaCGDHvybPkIKYTkz0iNP88dO8b3u+8QXojHQ6NohTOpSE
PK4Hhh2KHppNKmW54fE84peh6SJS23/4NvdaqT5eoaUj6N0GUFPFxdjdqTIghT6N
MoxXTydrEpe4nBzYVSMPsgQN6sNh8HRNQJn30ogkPGvABy3B+03I8IOMPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzGJNQ1/MLwXh+WAQLsl2iNjAlyMB8GA1UdIwQY
MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt
MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3
LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASauy7oHV
lpPLzyKIaaZogh0GDRQl8EcmOkXFq78xIXt4gup1VtjurhIbBKv+KypKHFLRd8RM
utzfYvA6EcZcLK6NqlUs2ps/rxM5VVGhNHf6blkt/AFyQoshRNDD0C3D+DB7pBbq
r5mXZrLdp0ZbFKHJt/cmlnqHiI1U38S5VnLkeD/3Yq9yFaN1ewUVINgCmuv7IiVs
M+uVZO29cmHXPPL3wkcRTGxbQeWxGkUBc2jhJF5uA9Uas8ZBTBr0MQ/YCmCy86LA
WS4+ZJoUWlisV7p5C/obzy/mpoM36GGq1DTftwMbu5zXjq99PXh0u4UR6hQvPXtl
XDIxVflBDtLthQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:26 2026 by rpki-client