Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: siLpz2ZKBA68C0TkkdrOrmrEuR6sAhc+ztF2YZ870h4=
Subject key identifier: 4C:D6:A0:D0:FD:41:B6:1E:2C:72:C9:B0:3E:77:BF:20:0B:0F:6C:47
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 019CAAC6B2F28170D465A9C139C38D0AB1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:14 +0000
Manifest this update: Sun 01 Mar 2026 19:01:14 +0000
Manifest next update: Mon 02 Mar 2026 19:01:14 +0000
Files and hashes: 1: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: A3u+x7QVQhG9Q2PHxNgtSNTDdXmJcRCEURrESY9bd0w=)
2: yAETyxqCIBgHtRNroe6hgJM7AvA.roa (hash: /0cKih93DWtvFY7DowMlTChYQqnFT+3gH96BNNkgjiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b2:f2:81:70:d4:65:a9:c1:39:c3:8d:0a:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Mar 1 19:01:14 2026 GMT
Not After : Mar 2 19:01:14 2026 GMT
Subject: CN=4cd6a0d0fd41b61e2c72c9b03e77bf200b0f6c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:84:18:d8:14:f7:fd:20:2d:fe:e2:1c:c4:
6a:44:57:fa:82:c9:7c:44:30:0b:05:6c:23:bc:82:
49:18:04:d1:f7:5b:5e:78:e6:42:66:28:13:d8:9b:
5f:11:41:f1:dc:76:f7:fd:2a:37:6c:e2:0c:d4:a9:
59:9c:fb:9e:01:e2:63:ba:a1:0f:08:e1:8a:81:6f:
4c:bd:36:d4:10:3c:ff:96:e1:5f:ba:f8:d2:2f:80:
a3:32:86:32:a4:94:d0:92:4c:fc:30:c1:3f:4b:5a:
a3:ef:75:a9:c4:50:a1:53:0d:9e:18:05:3f:81:00:
f5:b1:ea:a5:b8:a4:f3:b2:70:84:62:24:e1:68:ca:
f7:a8:74:11:c1:7c:07:64:bc:ed:69:e8:ac:d6:9a:
58:ff:bf:be:39:19:b3:22:79:ce:b7:d6:a0:3f:a9:
99:09:51:58:b9:b6:f6:0e:83:70:5e:7b:8e:fa:df:
b4:df:88:4b:1b:b1:7c:dc:14:b1:8f:f4:8f:7c:20:
bc:3a:17:15:bf:bb:2c:ac:52:8d:ad:41:82:67:0c:
8a:e4:d2:94:02:57:d0:a7:19:af:69:1e:6c:0f:78:
67:6b:90:40:61:f6:cf:51:e3:b3:4d:df:c5:1e:23:
f2:e9:67:7a:99:d5:79:86:94:93:69:65:73:af:23:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:A0:D0:FD:41:B6:1E:2C:72:C9:B0:3E:77:BF:20:0B:0F:6C:47
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ff:98:56:5b:37:da:f1:7b:bc:cf:b8:bb:74:93:45:ff:72:
eb:99:ca:e3:58:73:3a:cb:cc:bb:eb:07:10:fa:f3:65:9e:6b:
b4:a6:10:6c:3b:6b:fe:1a:12:97:be:7b:0d:d2:e0:f8:57:47:
87:68:66:5c:e5:2b:4a:ce:6a:f4:50:fb:5f:a4:a4:69:0c:1d:
95:d9:30:40:c6:59:c9:19:b8:11:17:14:d2:d2:e4:0d:61:42:
1d:d7:0d:59:6f:6f:8f:ab:06:33:55:65:55:29:cf:30:e7:9a:
3f:04:49:20:db:99:f9:93:be:a9:e6:0b:ea:66:4b:9f:4b:fe:
51:05:a1:9e:6c:67:3b:a5:20:d6:94:55:12:62:18:70:7d:82:
83:51:8a:dd:f7:2c:b1:af:4c:a7:1d:6c:2c:8a:67:6a:b2:91:
37:17:db:b3:cd:b1:60:62:bd:40:8a:64:80:6b:9d:1d:86:f4:
d5:aa:a3:93:63:33:49:e9:e3:38:2c:21:a7:0e:2c:ed:ed:fc:
c3:8b:89:78:46:37:51:2f:cb:59:3d:23:03:bf:4d:39:cf:4e:
eb:7b:ef:da:32:73:1a:ed:d5:ec:f4:5a:88:8f:64:5b:24:ad:
55:9d:15:62:14:8f:7b:9f:15:3b:a1:6b:ef:b9:a5:96:e3:7d:
79:99:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:42 2026 by rpki-client