Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: 5y3Ny4PBQUdJ/xfONuvccTWd7xATnUItC47PQ63dBzI=
Subject key identifier: 0E:0D:9E:45:DF:E0:B0:84:E4:E4:98:6E:10:90:AC:8B:B6:8D:12:C1
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019DA41CDDE1CAEA1237F482D684A9C66751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0A6C
Signing time: Sun 19 Apr 2026 05:00:48 +0000
Manifest this update: Sun 19 Apr 2026 05:00:48 +0000
Manifest next update: Mon 20 Apr 2026 05:00:48 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: LDpZPnSgpQmFXteVmAtoDbwEFks5Do7AyPAA7yfk+iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:dd:e1:ca:ea:12:37:f4:82:d6:84:a9:c6:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Apr 19 05:00:48 2026 GMT
Not After : Apr 20 05:00:48 2026 GMT
Subject: CN=0e0d9e45dfe0b084e4e4986e1090ac8bb68d12c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:0d:62:f2:04:1a:35:41:44:73:7c:88:af:
07:22:64:49:a8:b2:d6:35:b4:0b:84:1d:fa:b3:d4:
5e:cb:32:09:2f:a0:ff:b3:6b:92:9e:d9:55:42:84:
b6:8f:f5:e3:17:c2:f8:fa:54:5f:10:15:30:6b:92:
de:57:94:6c:8d:f9:94:af:26:06:5e:f5:1f:d3:da:
c7:2a:b9:d3:f1:b3:58:3f:8b:da:1f:53:11:c1:80:
71:5d:51:4a:d9:62:be:53:fc:40:42:47:75:3b:a9:
8b:74:38:8d:e1:76:9e:23:5f:65:80:ed:98:e6:4e:
a6:84:fa:dd:e7:ed:05:33:3d:13:fc:e8:99:b8:cb:
f1:86:06:67:44:73:46:2a:46:f2:70:1e:1f:19:d0:
4b:dc:ee:4e:42:77:d4:62:7b:c9:34:99:e7:3c:1a:
41:24:68:b4:ae:6f:4d:f1:a2:c0:2b:c9:9b:87:5d:
c1:76:33:4e:f4:34:84:59:6c:be:f4:95:eb:51:44:
7b:65:cd:f3:d5:b1:30:ec:8c:14:f5:ec:fa:7e:29:
f7:db:ca:38:5f:08:80:99:4b:32:5a:7e:23:95:f7:
a5:2d:9a:43:a5:7b:67:c8:ef:52:af:53:93:67:4a:
5b:13:30:c5:07:5b:e4:30:e0:a5:d5:9a:1f:a4:64:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0D:9E:45:DF:E0:B0:84:E4:E4:98:6E:10:90:AC:8B:B6:8D:12:C1
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:26:4c:9a:6a:67:2a:c1:d2:a8:d1:20:cf:a3:f2:76:30:18:
8b:77:1f:3e:be:be:d3:97:b1:30:a1:2a:40:f3:a0:7d:f9:64:
90:1f:40:8c:6d:bc:4b:04:a0:f2:8b:e4:9c:53:5a:a2:52:6a:
df:dc:a3:c3:86:81:e9:8c:b6:98:bb:a7:64:d1:be:a4:69:65:
55:52:44:bd:3a:57:58:12:43:80:60:f3:33:cf:de:4e:2c:03:
62:be:8b:dd:bd:8f:ef:ef:0b:54:6b:78:ed:72:40:23:bf:46:
83:e5:26:b9:85:86:82:46:37:a0:b9:75:fa:9a:14:42:6c:20:
31:eb:bc:a7:9c:82:22:b6:c0:1e:d6:90:7c:48:62:8a:79:c6:
03:c2:41:25:f4:a2:5e:ef:be:6d:7f:d8:9c:7e:b3:f6:0d:47:
cd:1d:22:77:d5:3e:0a:09:b3:c6:94:5d:34:e7:f1:de:cc:26:
79:7d:7c:5b:f8:0e:da:3e:79:c5:3b:b3:c9:4b:f5:4e:d0:0b:
95:85:84:91:d5:20:31:26:86:e7:fb:d6:b3:cf:c9:87:11:01:
87:be:a5:01:16:8b:eb:9e:e0:10:b8:53:14:86:6c:f3:50:9a:
9d:af:23:93:1d:a5:67:0e:a9:6a:b0:3c:44:e9:f6:88:aa:c6:
d1:58:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:39 2026 by rpki-client