Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: wgO/dzRGAiEdNzQXBjd0BWKEJgfpmBPc9Ux+Ry1Ci3Y=
Subject key identifier: 20:C1:25:97:13:9F:CF:BC:A4:35:88:8C:52:AB:3A:97:00:48:F5:A8
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 01A10701C6B54D0CEA9979C576FDE9290BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 088D
Signing time: Sun 04 Oct 2026 13:01:59 +0000
Manifest this update: Sun 04 Oct 2026 13:01:59 +0000
Manifest next update: Mon 05 Oct 2026 13:01:59 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: 6vCvVltjj9GO/GahrH852fn5B3Kdai9AETfBURhIfGI=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:c6:b5:4d:0c:ea:99:79:c5:76:fd:e9:29:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Oct 4 13:01:59 2026 GMT
Not After : Oct 5 13:01:59 2026 GMT
Subject: CN=20c12597139fcfbca435888c52ab3a970048f5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:35:a0:1f:13:25:fb:d4:e3:06:17:2c:8e:31:
4a:a0:da:b9:1b:58:9b:6a:3b:57:87:1b:e0:95:9f:
fc:c2:de:d0:e9:24:fe:5a:70:a6:2d:da:8c:ab:62:
8c:bd:73:ef:db:31:01:6b:a1:f0:ae:f9:6e:69:95:
c7:ab:3c:f1:70:ea:4d:36:76:eb:13:61:b1:b0:78:
c2:5e:15:0d:57:4c:30:16:92:b6:39:14:54:ab:06:
4a:99:5b:85:b8:2c:02:d4:e3:46:55:2d:c2:db:27:
cd:28:26:d9:ca:e7:70:06:3b:17:57:d9:7a:5f:bc:
76:68:e9:09:d7:a0:22:1b:77:fa:41:12:af:d8:46:
eb:dc:f5:9c:b7:b1:d4:c9:37:8d:a3:85:0d:17:43:
71:97:0e:12:7d:15:51:e5:dc:81:32:c5:55:f0:1f:
0e:5c:58:c4:e9:4b:33:2f:fb:fb:05:7f:6f:fe:c5:
80:33:46:34:e4:e7:66:46:9e:7e:71:3a:a4:5e:dd:
09:6d:d3:c3:1f:e3:cd:a6:f4:33:f0:19:d0:87:6a:
f5:af:4a:45:34:cc:7c:d5:2c:28:02:20:55:ea:69:
03:b0:bb:47:3c:70:ec:3f:8e:c0:4a:25:9f:ba:98:
35:2c:92:a9:fe:a7:4b:d9:c4:52:02:52:22:7d:11:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:25:97:13:9F:CF:BC:A4:35:88:8C:52:AB:3A:97:00:48:F5:A8
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5c:6f:35:39:83:d2:ae:05:10:02:17:3b:f2:07:06:43:27:
64:8d:af:7e:5e:40:d1:9a:d5:98:b9:0f:5b:62:04:97:03:ea:
91:2e:2a:86:2f:31:c2:2e:a0:f5:55:f7:15:4b:11:20:cf:c2:
97:e4:76:1c:e8:1b:be:c7:5e:3f:1b:b0:2a:ae:c1:9d:91:39:
62:b5:a6:04:f5:59:73:8a:50:15:a8:67:dc:c2:91:17:79:47:
0b:6f:53:94:52:c2:61:20:11:26:f7:f5:ac:74:03:2e:84:4a:
e2:62:60:25:c0:df:85:d6:0d:67:d0:6d:8c:25:4d:73:5b:73:
5c:3a:76:c8:45:b2:d8:b1:e3:41:0c:9b:77:16:3d:33:6a:a5:
79:48:d1:09:ca:e6:9a:a3:54:62:f9:f9:9b:b5:91:ac:8e:9b:
c4:ae:7f:17:ea:91:ba:cb:f6:1a:4a:25:be:87:e4:0a:5b:c3:
7d:40:3c:5a:c7:7e:9b:56:f9:6f:3c:14:28:1b:6d:34:6f:7c:
a0:b8:d1:cd:8c:42:13:ac:9c:f3:1f:28:5f:ae:98:b5:e2:c2:
ee:90:11:11:94:22:1b:ee:5d:fe:a3:bf:76:a2:57:ec:27:fe:
1a:85:5f:24:d2:f3:f0:7b:70:ea:9b:7f:b7:36:bc:7f:1f:db:
8f:a7:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:55:13 2026 by rpki-client