Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: XdjNG8o4fsfHY2rQDaWPxlUww5Q0mg0fl8dlQHeLiIw=
Subject key identifier: 8B:96:38:B2:02:7E:BA:0E:10:40:14:71:0B:65:54:14:50:AD:6B:91
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 019FAB63BA988A0AD97BD1DF32BCD5BF76FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 07D9
Signing time: Wed 29 Jul 2026 01:01:07 +0000
Manifest this update: Wed 29 Jul 2026 01:01:07 +0000
Manifest next update: Thu 30 Jul 2026 01:01:07 +0000
Files and hashes: 1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: qystmDMHq2aaJg6nZPquq5wEpezwD2OttWNXMPR2AHo=)
2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ba:98:8a:0a:d9:7b:d1:df:32:bc:d5:bf:76:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Jul 29 01:01:07 2026 GMT
Not After : Jul 30 01:01:07 2026 GMT
Subject: CN=8b9638b2027eba0e104014710b65541450ad6b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:63:18:0a:28:93:43:2f:c6:fe:bf:09:ed:
aa:cc:88:6b:35:f5:66:09:d6:2f:ab:13:7a:ac:7e:
b4:5f:b2:29:8c:9d:7d:51:35:d9:c0:c3:e9:1b:3e:
1b:82:de:19:97:26:a5:c5:dd:e0:94:c1:fd:2d:e9:
44:29:a8:b2:84:1e:a5:73:6e:4d:2a:56:c6:a2:d0:
e6:06:11:d8:ce:e6:99:40:86:7b:f3:b5:4e:28:99:
8c:69:c5:4e:59:00:f5:2e:ae:8d:b2:bd:55:fa:3f:
94:77:90:28:01:b7:d1:56:d5:38:e9:64:73:99:29:
9c:f9:7f:35:f7:14:d5:86:18:57:b6:95:a8:0c:14:
bc:82:66:19:f6:c3:3d:17:96:d1:f5:1c:2c:42:06:
a2:ef:9d:74:b1:fe:76:4f:8a:04:99:c3:f5:65:f1:
88:51:b3:6a:83:88:a9:aa:ee:82:d8:ec:4a:99:a2:
d3:83:00:5b:0c:11:87:d3:88:2e:7c:c7:46:59:67:
ec:92:01:8e:e7:7d:f6:af:bb:f3:21:52:01:26:97:
01:26:4f:4a:5e:1c:bf:31:b7:aa:29:5f:51:a7:31:
9a:60:96:e2:4d:00:32:da:b1:8a:13:7c:62:c6:48:
8c:d7:25:6f:5d:87:99:1a:50:c4:cc:f3:29:aa:1c:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:38:B2:02:7E:BA:0E:10:40:14:71:0B:65:54:14:50:AD:6B:91
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:32:88:ef:20:73:50:eb:dd:96:8d:42:38:47:1f:40:60:6b:
bf:5f:c1:24:55:49:19:84:fb:a2:a9:45:74:a5:13:b3:19:d2:
03:89:79:76:aa:cc:2c:71:cf:5b:f6:4c:41:34:43:2c:3a:cb:
07:f7:71:a2:31:bc:e2:0e:d0:d3:bf:54:9e:8d:bc:3d:01:c5:
28:3a:7f:d6:23:f8:da:9d:49:10:7c:54:b7:cb:06:11:c7:7e:
e9:8c:53:ac:78:b1:14:30:08:31:ff:1b:c2:04:f0:e5:70:47:
5d:27:b5:fb:64:74:df:1b:48:5f:d1:ce:7b:f3:cf:8f:50:9d:
be:f8:74:91:df:ca:0d:ba:a4:8f:aa:bf:3f:65:3b:10:b7:b4:
a6:23:6b:90:ae:62:61:75:96:e6:26:31:d7:41:fc:7e:03:d8:
1c:a1:57:d7:0f:35:d2:0d:6a:b1:be:a2:42:6e:93:f0:ac:a3:
1c:0e:f6:db:59:e2:14:1c:69:e9:8f:8f:47:4f:fc:9c:ce:0e:
23:28:9b:4d:8c:88:9c:58:c2:4a:70:e1:12:e5:00:e7:52:1a:
46:11:5e:82:84:a4:d6:18:6a:6a:0a:5b:6d:b3:49:1a:f1:25:
42:96:08:6a:a5:85:eb:e9:ba:b5:bb:c7:36:00:85:ec:22:17:
d1:36:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:36:38 2026 by rpki-client