Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: TDHiKBodo5tCiqAffCP2XDjaARY+674ju8I38NdcqhQ=
Subject key identifier: 3C:19:2F:B2:ED:14:61:B5:8C:67:B2:BF:00:66:53:2C:C3:39:AF:62
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 019CACB4B22DDE24C1F78A53BAB78106FAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 064C
Signing time: Mon 02 Mar 2026 04:00:49 +0000
Manifest this update: Mon 02 Mar 2026 04:00:49 +0000
Manifest next update: Tue 03 Mar 2026 04:00:49 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: FncvsFpzZW9laI/gHziZb49QDgY93gCBRW0OFhxBgKc=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b2:2d:de:24:c1:f7:8a:53:ba:b7:81:06:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Mar 2 04:00:49 2026 GMT
Not After : Mar 3 04:00:49 2026 GMT
Subject: CN=3c192fb2ed1461b58c67b2bf0066532cc339af62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:46:8e:16:1b:0d:fe:ff:c9:5b:df:f0:e2:
e9:2c:50:91:f7:51:96:d8:e6:82:c0:58:8d:cd:26:
60:d0:66:c2:59:c0:09:15:72:8e:56:a2:d4:96:a2:
a1:f7:a9:c5:25:af:39:c9:49:6d:be:c4:69:38:7d:
c2:4f:8c:a7:b4:43:cf:d0:10:ca:f3:6c:35:30:f8:
4d:48:68:f0:eb:23:da:df:cd:25:21:8f:4b:0a:ea:
33:da:6f:02:3e:03:88:dd:34:07:37:4e:35:6b:30:
eb:c6:60:14:42:c9:c1:57:37:e8:e5:7c:68:13:8e:
31:6c:74:85:4b:91:10:21:ab:30:35:42:72:12:b8:
fa:04:c6:6a:87:e7:f2:35:d9:65:b9:a1:d3:d2:a8:
35:4b:0a:7b:1f:16:e4:63:1a:17:f5:6e:7d:e8:cf:
52:28:ab:c5:0d:07:6e:de:07:22:4c:38:f4:c2:f4:
97:79:a9:8f:11:e5:26:a0:2a:bb:0f:1f:a7:9f:6e:
77:4b:49:ec:18:8c:03:27:09:10:d6:1c:d3:03:14:
6c:44:cc:51:22:bc:cd:04:97:b7:e7:e3:22:1f:9a:
d4:14:0f:6e:b8:d8:96:3d:35:de:fd:c0:67:d2:30:
d7:25:46:da:5b:a1:7e:4e:ff:c8:e0:83:5e:08:89:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:2F:B2:ED:14:61:B5:8C:67:B2:BF:00:66:53:2C:C3:39:AF:62
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fa:2e:43:2f:c7:bf:6e:28:eb:38:92:64:b1:63:f7:93:9e:
53:76:c4:3a:e9:a2:c5:1a:67:91:84:1c:56:26:7f:5f:b9:4b:
a6:58:bb:d9:0d:88:57:2f:74:d6:42:45:5b:88:64:14:ef:79:
ce:49:bc:d2:c6:25:dc:43:b3:22:6b:bf:97:98:ed:b7:61:59:
1a:71:a2:02:83:c2:ea:6a:dd:ec:ce:fb:89:81:b0:5c:d3:ea:
f4:ca:50:ca:b9:01:26:2e:81:6e:f5:3a:f7:47:ec:4f:99:93:
4f:83:62:fd:ac:50:18:3b:8c:12:d4:2f:ec:b6:fd:e9:05:ef:
c0:c1:36:3e:49:5f:81:3e:4f:7e:9e:46:7a:e3:14:42:76:6a:
a7:91:42:31:49:75:33:aa:9b:cb:b1:b8:72:25:7a:65:3d:73:
fe:a1:49:fa:3d:73:f8:9d:77:f1:0f:af:f0:ae:b3:65:46:b7:
68:4e:75:f0:07:db:de:a4:9d:f1:5f:73:c7:a9:b8:df:b2:ab:
26:33:df:39:92:af:40:c3:1d:08:d5:b8:16:7f:90:28:5e:6e:
45:77:91:63:69:e4:a5:c2:ba:57:5b:02:50:cd:92:93:23:37:
e8:17:e5:66:ab:c0:06:36:4c:97:cb:fa:9d:cf:21:fe:1c:d3:
92:04:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:23 2026 by rpki-client