Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: Ix69bYv1HbENDcc7gr8Y0YQ8idbFcik0ykMdAnRFzlw=
Subject key identifier: 74:E1:67:0B:19:17:7C:DD:89:12:13:64:3D:12:62:14:4A:27:EF:7A
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019CAC46FE5EF56C3717BB245296474D472B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: vNedeO4UvNRLkLwWu/jsQn3616bKXozjZ460aJO2UKA=)
2: ZIfLwvSvOdji3MtHcGgMuSoqhAQ.roa (hash: JIFRgTtvZClZWs/BH3CyPh0KvLINAkB1ip40YGPLcQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fe:5e:f5:6c:37:17:bb:24:52:96:47:4d:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=74e1670b19177cdd891213643d1262144a27ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:53:1b:bb:00:81:17:21:87:bb:22:f8:bc:
86:d6:04:84:f8:11:8e:aa:c7:fb:87:fe:8f:70:3b:
99:fb:0d:86:35:6c:cd:3c:08:6d:a4:99:6f:b9:4f:
23:af:f5:1c:9c:59:10:ca:0d:7c:c9:6a:5f:3f:29:
a5:47:68:58:3c:61:a9:e2:1d:13:55:e0:23:c5:da:
0b:25:60:58:26:6e:0f:41:16:99:79:3f:27:42:b4:
d8:1a:dc:8d:92:8b:de:43:4c:36:43:b6:62:c8:05:
d4:22:e9:d0:23:b6:49:8e:5d:09:e7:5d:d5:11:70:
53:a4:f9:7b:61:a2:5d:96:91:34:56:7f:c4:ef:8d:
11:cb:c1:b0:b1:94:76:a5:cf:3d:34:4d:e2:ac:43:
03:60:5b:b9:a8:ab:f2:2b:24:f5:87:4e:ab:10:28:
f6:16:96:78:b0:10:cb:ea:97:6f:9e:0d:89:b4:9f:
56:fd:a1:a8:58:b8:a2:ab:37:70:5c:6b:56:fa:e8:
9d:12:37:80:47:72:88:1a:3e:6d:60:83:ee:e3:1c:
f8:26:ac:a6:1c:18:1d:c6:5d:8a:0e:eb:ce:d9:14:
09:7c:e9:bb:ef:3a:15:43:7f:e4:11:bf:f8:e8:8d:
59:2d:d0:69:e6:d7:9d:64:93:51:81:8d:c2:b6:84:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:67:0B:19:17:7C:DD:89:12:13:64:3D:12:62:14:4A:27:EF:7A
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:55:9b:18:84:79:50:96:08:ba:0a:9f:16:1e:98:7c:16:4e:
8a:97:ec:75:cc:e9:83:0d:40:a4:35:b7:58:2c:21:cb:f0:f1:
25:56:4c:5a:75:25:54:2e:ec:e5:d1:ca:04:6d:91:1b:59:44:
e7:0e:eb:e4:58:25:4c:80:40:6a:0c:97:c5:83:05:0d:5c:29:
f0:d5:6e:87:30:68:62:b4:35:fa:01:c5:95:4b:9a:f8:c6:14:
ad:d6:23:36:bf:83:10:12:28:36:55:0a:29:42:45:9b:cd:a2:
e3:b0:eb:06:71:38:f3:cf:31:d1:a6:b0:a7:16:18:9d:c2:f4:
a7:e0:bf:dd:c1:d8:5f:e4:44:2a:1b:13:ff:23:76:b5:04:23:
2a:a3:12:6d:1c:0b:15:71:69:d1:cc:b9:c2:13:1c:61:e6:cd:
08:b8:92:54:f0:6b:08:66:4f:65:41:ba:0d:55:4f:b5:00:e3:
62:3b:46:43:b1:84:cf:b7:3b:f8:b1:82:78:f1:7b:16:42:7a:
df:49:c0:0e:38:67:6d:c4:d9:28:f6:33:4a:a6:a5:d8:a5:2b:
7d:be:b4:5e:78:eb:9d:fd:23:79:7f:0b:14:47:28:67:c9:fd:
63:87:09:62:0a:27:18:06:4a:5c:2f:20:cc:a1:f1:cf:b4:e9:
f4:ae:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:36 2026 by rpki-client