Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: oz+FOKI+7tfWLmgv8WATlOhyh4XMVgzMe7kETgncnPs=
Subject key identifier: 51:FF:AA:87:3A:52:81:E8:BE:8E:9B:61:95:A7:F7:1E:A1:A5:26:A8
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 01A0C09ED75E80C80A80B9056D133B378146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0C09
Signing time: Sun 20 Sep 2026 21:00:30 +0000
Manifest this update: Sun 20 Sep 2026 21:00:30 +0000
Manifest next update: Mon 21 Sep 2026 21:00:30 +0000
Files and hashes: 1: 6s7VJQ13Euo-HJYqzPD9JI6QUXk.roa (hash: c+rLw+JU62jWbBeFYHNNvYoEQUH8aS1cBJs7Rsqiv5Y=)
2: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: iqxxUdM2i8k3aSjDqPuFOW5kcY05Ufy5JEzm83/uoCE=)
3: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (hash: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:d7:5e:80:c8:0a:80:b9:05:6d:13:3b:37:81:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Sep 20 21:00:30 2026 GMT
Not After : Sep 21 21:00:30 2026 GMT
Subject: CN=51ffaa873a5281e8be8e9b6195a7f71ea1a526a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:61:c6:9f:19:41:b0:f7:c8:26:b8:d3:f7:
94:85:c3:cc:5b:84:ac:cd:72:e4:ed:96:e8:58:c2:
e1:49:5e:85:d2:76:2b:76:53:f2:ab:44:2b:3d:d8:
5c:e5:18:11:f7:c5:38:f1:7e:98:83:80:16:49:77:
26:4b:fa:70:61:31:7b:c9:58:f3:1c:d0:e1:42:ad:
78:64:11:5f:06:d6:99:bc:00:0e:e5:77:a8:fa:c2:
a9:3c:f2:a6:e2:63:b7:3f:da:f7:64:58:ae:38:41:
33:74:83:64:fc:7d:6b:95:b5:29:4f:f5:b0:b1:b3:
20:2b:35:23:aa:50:35:ab:23:45:b4:22:d8:b5:53:
d9:21:96:54:3e:1b:f3:67:95:de:11:c5:9d:4b:77:
03:50:13:e4:f6:2b:f9:7e:f9:33:33:b2:5a:b3:c8:
c4:36:f0:42:c5:21:2e:39:b3:e7:74:36:4a:9a:2b:
8d:5f:be:a7:55:dd:f4:67:b0:42:c2:40:5a:96:69:
7b:ab:af:b2:4e:36:5e:ed:91:b3:0d:1a:79:70:d9:
b4:46:b0:2a:ed:8f:4a:c4:2f:db:b2:94:d1:2c:1d:
fb:a0:d9:19:1c:9c:0e:cd:d9:e7:01:00:8c:2b:7d:
bc:f0:d0:ea:57:02:b9:0b:05:08:14:c4:95:d0:89:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:AA:87:3A:52:81:E8:BE:8E:9B:61:95:A7:F7:1E:A1:A5:26:A8
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:41:da:70:f5:54:62:ac:90:63:40:f3:c4:93:40:0c:f2:d3:
ff:28:42:69:f5:96:9e:f0:1e:71:ec:8c:b1:be:13:a2:6a:8c:
13:52:9a:b2:98:e9:80:47:72:6c:e3:71:14:ff:e4:a0:bb:28:
77:1d:47:80:45:89:be:8c:f7:dc:ec:a9:96:bb:68:b0:a3:f6:
91:b2:b7:c9:ff:39:d3:bc:b9:ba:d3:6e:83:6d:f7:40:f0:9e:
6a:d9:d3:d9:31:c1:b6:52:ec:de:22:e2:91:09:48:cb:23:73:
37:47:bc:ff:55:c9:b1:d2:37:31:a7:f4:a5:b3:aa:e2:7d:3b:
5e:ea:09:4c:92:f8:33:81:87:8d:6e:ad:ba:37:bf:75:a7:19:
53:85:3f:6a:87:d4:0b:c0:5a:67:ed:9a:24:2d:55:10:52:1f:
13:26:6f:08:19:1b:d9:a0:2d:50:14:ea:85:c3:6a:44:7b:99:
78:0e:11:e0:7d:51:1d:0c:1b:e5:36:a4:eb:33:11:17:5b:57:
00:82:69:c6:94:74:e4:ae:a9:59:04:e3:60:48:ab:94:71:0c:
37:9a:e0:02:22:5e:93:94:71:f1:f8:6f:4e:08:6a:0e:1f:20:
ce:49:52:50:19:c7:a0:92:e9:d3:98:ae:fc:e7:6f:4b:9a:42:
f2:73:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:37:52 2026 by rpki-client