Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: frsu9he6h1KLMAwkiawLvxNTl02S3HBO6cybvwtqsvI=
Subject key identifier: CF:38:99:04:1A:E4:58:B8:4A:B7:D2:F4:A2:67:EB:EC:B9:AB:96:37
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019FA89906BAD4DDEE4C682F59780A5D54CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0B78
Signing time: Tue 28 Jul 2026 12:00:28 +0000
Manifest this update: Tue 28 Jul 2026 12:00:28 +0000
Manifest next update: Wed 29 Jul 2026 12:00:28 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: YC9JPiwUu+SekKsABLrXSE7s1hUrdyBAG0Mw8urgLtA=)
3: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (hash: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:06:ba:d4:dd:ee:4c:68:2f:59:78:0a:5d:54:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Jul 28 12:00:28 2026 GMT
Not After : Jul 29 12:00:28 2026 GMT
Subject: CN=cf3899041ae458b84ab7d2f4a267ebecb9ab9637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:03:3d:64:ba:cb:e6:0b:a2:b5:24:ba:a1:
38:34:51:62:6b:89:df:23:0f:2b:64:c2:92:2b:34:
a9:28:94:64:27:47:cd:57:3f:a6:f3:fb:c7:12:f8:
2b:b7:6a:f1:fb:b1:86:e9:05:5e:ba:fd:3b:22:7d:
f6:14:b4:16:b4:b1:9d:1c:29:c3:14:de:a9:cc:28:
23:e0:6d:bd:cd:63:ef:80:ca:2f:b4:8c:24:c5:0e:
e1:28:36:7e:e3:d6:ea:eb:9d:1f:c3:41:c6:65:18:
56:f7:c8:41:be:c1:7a:6b:66:34:50:84:cd:83:fc:
5a:e6:f9:f4:0c:37:05:d3:fb:2b:47:dc:19:7b:11:
25:a6:d6:28:a9:b0:6a:cb:97:bf:2b:ed:f0:48:a2:
c0:dc:bb:8e:79:4d:02:5e:9c:bb:78:3d:55:02:53:
9f:29:b4:58:34:bd:54:43:56:8f:5b:35:23:bc:03:
c1:8d:1e:4d:e3:f8:43:a8:5f:ea:b6:8a:60:b5:58:
ef:be:67:f2:49:bb:6e:f6:9e:7e:33:da:8a:1d:ba:
60:f6:c3:fa:a7:95:45:b2:d3:38:16:cb:db:b5:29:
6c:3e:64:ac:96:cd:62:3b:9a:14:0e:21:4e:53:9a:
37:71:20:01:6e:6b:ae:91:eb:33:48:52:2d:14:28:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:38:99:04:1A:E4:58:B8:4A:B7:D2:F4:A2:67:EB:EC:B9:AB:96:37
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f0:08:96:e1:f5:b6:6a:33:c5:6d:da:6e:55:61:3e:10:79:
76:f4:8f:52:90:11:78:b2:b1:87:58:0f:15:f2:35:f3:c6:eb:
bf:c7:07:28:f1:3d:3b:58:62:ae:31:58:38:57:70:40:3f:76:
71:e4:56:54:18:62:b6:61:a9:99:f3:12:24:6d:a4:36:cf:92:
4a:20:2c:08:b7:38:62:99:25:6c:38:dc:96:8c:20:e9:bc:9a:
eb:0b:b3:0f:6e:c2:02:6e:05:63:86:73:72:aa:d0:f1:1c:6c:
86:fb:e1:5f:7c:f1:7a:49:0b:cb:03:62:49:b8:4b:ce:a3:8b:
59:fb:c7:30:aa:b5:26:25:4a:cc:4d:e2:a6:b0:53:2f:f9:b0:
a8:99:c2:7e:c8:28:b2:15:19:81:b9:a1:c8:36:42:59:82:07:
2a:28:55:bf:db:5d:0b:57:f9:c9:8c:37:bd:83:c4:53:14:53:
d7:55:f9:13:1a:56:0d:9f:be:1d:af:a5:81:7b:ec:11:a7:4d:
44:21:00:29:84:1c:a4:8d:dd:3d:d1:a8:1a:50:54:5e:5b:cb:
97:48:a4:29:b7:bf:ed:3e:9d:50:e6:cc:2d:79:1f:2d:8c:72:
20:97:56:48:11:4c:00:32:66:00:9d:fa:4a:49:d3:c1:ba:c0:
74:16:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:20 2026 by rpki-client