Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: 4ziNIMuq0to+uLBJwouUYBdCRE/Lwi6v3K+HGDYnkWw=
Subject key identifier: 7C:6E:30:9B:A5:37:E4:48:28:53:FF:0F:80:45:B6:06:22:EA:A0:A0
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019D99D0C8A215058DFB28A7F047B508D0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:30 +0000
Manifest this update: Fri 17 Apr 2026 05:01:30 +0000
Manifest next update: Sat 18 Apr 2026 05:01:30 +0000
Files and hashes: 1: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: kM47VM6jAhzzRSsFjBGLEh5vNQDQRHu7YtXtHmQZDIA=)
2: ZIfLwvSvOdji3MtHcGgMuSoqhAQ.roa (hash: JIFRgTtvZClZWs/BH3CyPh0KvLINAkB1ip40YGPLcQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c8:a2:15:05:8d:fb:28:a7:f0:47:b5:08:d0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Apr 17 05:01:30 2026 GMT
Not After : Apr 18 05:01:30 2026 GMT
Subject: CN=7c6e309ba537e4482853ff0f8045b60622eaa0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:88:29:69:44:fd:70:d5:f2:bb:b3:5d:94:
23:52:a8:82:11:95:29:3b:91:91:03:9d:1f:7c:f4:
1a:44:c9:67:c5:dd:4d:41:91:8e:c2:2e:2b:1c:d3:
c4:1d:8d:70:9d:07:10:32:64:51:38:a2:ab:df:10:
f0:36:40:80:df:b5:e4:d0:ff:da:ea:a0:32:95:44:
01:b8:04:c1:bc:d3:c8:06:7b:e9:ea:07:36:aa:8e:
75:b6:27:90:db:56:4b:25:53:7e:68:19:2c:04:84:
3d:30:2c:d9:5a:00:3e:12:98:ff:89:df:34:a9:9d:
ef:96:f9:65:3d:72:d5:97:ef:4c:c2:86:e7:ff:d7:
d0:e7:cd:19:19:dd:14:04:11:4d:35:a8:cb:6f:a3:
68:57:45:e9:2b:c4:71:6a:8f:f6:dc:6c:b6:4c:e3:
f8:f8:7b:19:67:cb:ce:b5:08:20:3e:05:17:ab:3b:
29:7c:52:2c:69:28:a1:35:31:4e:c4:91:bb:33:64:
7a:55:8a:76:1a:6a:d5:0b:54:b7:85:74:71:86:0e:
5c:5a:3e:44:e7:de:46:bf:74:4d:95:a2:77:85:92:
f2:28:32:df:93:85:c0:02:f8:04:76:e8:ed:5c:91:
e7:f4:dc:fa:af:3c:0a:bc:2d:58:fa:1f:b1:58:e5:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6E:30:9B:A5:37:E4:48:28:53:FF:0F:80:45:B6:06:22:EA:A0:A0
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:79:48:f5:7a:4a:ed:2d:bb:39:a3:5b:ba:a3:f6:00:3f:
3d:a5:90:29:53:59:a2:57:39:04:b7:5c:0a:b8:9c:f7:b5:a5:
b6:cd:34:43:d9:06:4e:a7:c7:05:ed:63:92:19:52:c0:07:3a:
16:60:24:cd:4b:31:bf:54:0c:0f:fa:b7:8a:5d:18:5f:1c:75:
87:10:23:06:84:d2:92:36:3e:cd:9f:ae:34:ef:43:f8:75:4e:
ef:3e:14:9e:29:d1:6c:b1:90:48:ac:05:aa:06:fb:6a:22:73:
2c:7d:b5:6c:85:5c:91:f5:51:47:24:cf:be:a1:c8:72:0f:e2:
13:a3:80:e1:f9:bc:f4:90:25:b4:b9:26:13:d3:46:fc:66:6c:
23:e6:57:d6:7f:39:86:57:1d:6b:f8:78:f7:50:c7:24:5c:ad:
cf:d2:e5:17:d1:ee:fe:31:2b:80:85:8c:e2:4e:9e:ef:5c:b2:
ca:ae:32:94:51:f1:48:ed:a2:ca:88:53:c6:88:f4:8c:b3:c0:
8e:a2:17:9a:36:15:e1:6a:04:6e:f6:ed:cd:a4:81:ad:f6:c3:
08:38:4e:d9:27:9b:a5:a4:7f:22:70:b4:d9:6a:8d:8a:95:e9:
da:76:a0:38:85:11:6f:21:6b:95:e4:fc:0c:9b:73:38:88:ec:
28:2d:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:09 2026 by rpki-client