Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: OTmA7LUhOLPe5Hf6Kh44OSzTFHRF+7crMOpCo5ycy+g=
Subject key identifier: 8C:03:61:33:C9:FA:2D:55:84:F8:B3:5C:02:CE:81:AE:D0:48:D3:6B
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 019D9C2D613C8BFEF386C86F807C4DE3CD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 06C8
Signing time: Fri 17 Apr 2026 16:01:52 +0000
Manifest this update: Fri 17 Apr 2026 16:01:52 +0000
Manifest next update: Sat 18 Apr 2026 16:01:52 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: Lc7M4bkTTAjki/p5kQhjHAJDANL9JQ05IlxkvfzSMTA=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:61:3c:8b:fe:f3:86:c8:6f:80:7c:4d:e3:cd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Apr 17 16:01:52 2026 GMT
Not After : Apr 18 16:01:52 2026 GMT
Subject: CN=8c036133c9fa2d5584f8b35c02ce81aed048d36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:4c:56:70:86:bc:8d:76:5b:64:52:6c:3b:
a5:3a:37:e2:3e:58:7c:5a:a8:7b:8c:41:76:d2:48:
25:4c:01:2b:a3:ce:1c:f3:38:0a:cc:03:2e:ea:d7:
ee:46:36:30:94:35:e9:b7:1b:1e:44:3e:be:f6:82:
1a:bd:7a:fc:bb:9b:38:b8:0c:25:d0:75:0c:f5:14:
31:55:35:9c:f4:34:11:60:94:29:00:d9:bf:f5:1b:
94:c8:c5:37:59:47:61:02:2f:c0:09:23:ad:bd:d7:
97:13:97:2d:7f:83:e4:2f:5a:e5:97:38:c2:7d:b8:
fb:06:35:01:39:e6:1e:38:f1:34:ec:78:dc:83:e1:
d8:4e:48:e1:31:dd:05:47:5b:af:34:3f:c2:a8:97:
ff:be:44:ee:08:19:28:10:42:e6:9f:a3:06:1b:14:
f7:e5:45:88:18:1a:45:57:db:12:8c:4b:e7:70:fd:
93:71:e6:6e:d5:00:e9:7d:70:b3:0c:66:af:01:50:
3c:fb:18:64:40:b8:97:10:7f:3a:69:e4:e3:34:67:
0a:43:20:0a:44:00:ea:0e:19:f4:02:27:f6:df:9d:
9e:12:a3:84:b0:45:fe:46:06:d7:5a:3b:fc:6b:f6:
09:a1:71:a1:c0:7a:a2:a8:b2:c2:41:d1:ab:a4:f8:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:61:33:C9:FA:2D:55:84:F8:B3:5C:02:CE:81:AE:D0:48:D3:6B
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a2:82:d8:81:a3:ee:c8:78:73:d4:ae:a2:f3:35:88:2c:0e:
45:0e:1f:27:a3:ca:09:85:d3:a7:44:8c:9f:dc:54:7d:8f:2e:
92:33:eb:2e:f3:7b:6c:5c:88:2b:7c:78:52:fa:36:2e:15:75:
fa:5a:6c:13:ae:a0:f9:cd:5e:ab:9c:d3:55:59:b4:e0:a5:8b:
c0:cc:0c:27:bf:0b:17:89:8c:80:06:dd:9e:37:49:d0:d5:bd:
5f:43:b5:0c:38:de:b6:18:e4:4c:28:3c:93:4a:d7:cf:33:15:
ff:f9:cc:d2:ac:06:8c:32:d8:da:2d:7c:1e:dd:b6:3b:d2:37:
0c:a9:c0:6d:13:c7:5e:38:65:da:fa:46:ec:14:4b:a7:59:a6:
38:59:b2:fc:25:e7:cf:23:82:9a:db:44:65:37:72:43:57:26:
2b:b8:94:81:e3:95:ab:0b:74:20:a9:2e:82:e2:3e:c6:2c:22:
7a:dd:34:16:0c:a8:b4:79:1c:63:8c:0e:6b:cb:6c:f5:54:fe:
ce:ef:9f:5a:72:5e:59:44:57:fe:56:e9:72:d7:de:41:fd:68:
57:c6:da:8c:14:14:3b:dc:00:f2:fb:70:89:71:1b:7e:2f:6b:
72:7c:a0:0a:bb:02:ff:7f:22:0c:35:a5:c7:c2:d7:ba:32:8c:
57:7b:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:24 2026 by rpki-client