Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: 15KW3rTVQORdyylHdlZ3JxVyfwOGi8LrCZjbV2vb6Fo=
Subject key identifier: E2:24:07:19:5F:BE:EF:41:A1:54:D1:99:89:25:E9:1C:B7:AA:7D:CC
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019EBEED237637CBA900953EDDA1BC6AAEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0AFF
Signing time: Sat 13 Jun 2026 03:01:12 +0000
Manifest this update: Sat 13 Jun 2026 03:01:12 +0000
Manifest next update: Sun 14 Jun 2026 03:01:12 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: r+W5tywzPgYhvX/gtbSehTI8ZUO76rRjqf7FjajIe84=)
3: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (hash: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:23:76:37:cb:a9:00:95:3e:dd:a1:bc:6a:ae:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Jun 13 03:01:12 2026 GMT
Not After : Jun 14 03:01:12 2026 GMT
Subject: CN=e22407195fbeef41a154d1998925e91cb7aa7dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:7b:11:5b:a8:5d:99:2a:45:fb:50:4a:5e:
02:98:3a:1c:94:ac:b4:41:9f:96:3e:e5:f8:b7:c2:
7b:c1:d3:f0:0d:5a:82:99:7b:47:ab:7a:15:f0:d1:
16:8e:3c:24:14:a9:7b:a6:87:f2:73:8a:8d:0a:e9:
40:0e:c9:7d:32:13:67:0f:79:29:52:c6:76:f7:ea:
00:67:25:ae:22:8a:7d:d9:82:c4:fb:a9:f9:8e:15:
d9:fe:4f:d5:8d:44:c4:57:9e:c5:30:a1:9c:53:6c:
bc:ce:55:33:c8:dc:27:7b:53:2e:ce:82:18:d8:64:
f0:a6:bf:07:75:78:62:26:2b:01:63:90:b8:f3:d9:
89:1b:8a:a4:8a:ed:4f:f9:4a:10:82:f3:4c:d1:5f:
08:0b:a9:51:d8:d9:5a:fb:0a:42:be:5e:40:51:92:
a6:33:1a:0c:3a:a2:02:b4:1d:8d:3b:ec:41:b6:02:
65:dc:35:74:4e:ba:08:ed:2d:91:44:2b:7e:ed:05:
95:c2:56:a5:11:ca:ee:89:2b:e3:86:b6:6f:08:b2:
2c:62:8c:2a:3c:ca:0e:0a:ef:c1:f8:04:af:5a:d7:
d1:48:f7:fc:18:88:de:25:cd:67:1f:9f:b7:df:f6:
2d:a5:c7:81:d5:87:b3:3b:ba:4e:b1:d1:16:75:3f:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:24:07:19:5F:BE:EF:41:A1:54:D1:99:89:25:E9:1C:B7:AA:7D:CC
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1d:b1:e5:67:27:36:ae:d9:1a:bf:ba:a8:e5:83:b9:77:97:
75:59:5e:f8:24:81:6a:bb:92:46:0a:01:66:22:bd:24:3a:f8:
ab:73:7d:d4:da:ca:8f:f6:04:4e:36:22:6e:92:e5:e4:4d:02:
3c:0b:98:b6:e9:e1:a7:f8:34:d2:93:4f:6a:18:1c:72:c2:d2:
27:9e:12:59:32:96:42:81:23:d5:64:c0:77:77:f3:8a:e4:32:
14:b0:dc:4c:72:18:1d:97:07:69:94:91:3f:3e:a9:26:45:3f:
5c:b9:0f:ca:f7:3d:59:4d:ee:77:7d:d3:d3:1a:c6:b9:31:5e:
04:30:46:70:bd:08:4b:13:c8:d9:f8:9d:55:34:52:19:67:95:
8a:29:15:c7:77:2a:d7:36:d4:a5:b3:2c:5f:0f:28:1d:4c:da:
87:76:09:6f:fd:ff:86:bc:2b:3f:1e:4f:3c:e0:21:49:2c:09:
ca:fe:1d:56:61:8a:33:d0:57:44:c9:70:2b:66:6a:ab:eb:c3:
77:72:ea:f0:5a:5e:7a:3e:63:59:5a:66:9e:29:36:2a:29:f9:
43:1c:3a:e6:86:6c:b1:82:45:a3:f2:aa:11:5a:1a:1e:23:01:
b3:d0:6e:92:29:62:d8:76:59:72:27:bf:a1:ee:de:41:37:55:
48:54:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:39 2026 by rpki-client