Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier: sNawxgcWcKwz5MaMSIRdfoTVoNFVgrq+9EyPsylJPWc=
Subject key identifier: D7:D0:21:A1:E8:38:11:4F:ED:38:51:40:AE:E6:D5:BE:7C:F3:46:BC
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial: 01A0CB90E5BEDDC36D7DDEA98C77AFF7B5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number: 033F
Signing time: Wed 23 Sep 2026 00:01:05 +0000
Manifest this update: Wed 23 Sep 2026 00:01:05 +0000
Manifest next update: Thu 24 Sep 2026 00:01:05 +0000
Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: dP1zcQWoTUgZ3ndFKfV4fAUx+P/+N8NLrJPhusy/frA=)
2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:e5:be:dd:c3:6d:7d:de:a9:8c:77:af:f7:b5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
Validity
Not Before: Sep 23 00:01:05 2026 GMT
Not After : Sep 24 00:01:05 2026 GMT
Subject: CN=d7d021a1e838114fed385140aee6d5be7cf346bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:53:0b:d4:b5:95:a9:35:4e:50:a9:05:60:
10:3e:ee:b8:f1:0c:f6:20:6e:72:9a:7a:dc:aa:e9:
4a:d3:88:02:be:23:b8:2e:05:bf:ba:07:ff:81:22:
b5:b0:20:39:d4:3e:89:e0:4c:3f:42:07:6c:9c:ce:
4f:66:48:9f:32:a3:ce:08:fe:ac:80:0e:21:fa:d3:
65:e6:92:93:f6:49:78:05:45:e9:92:16:92:b4:ba:
54:d3:a9:f2:fd:f6:89:a9:45:0c:e9:d3:63:88:b1:
d4:25:cc:f5:f4:60:8b:b5:a7:be:79:34:6f:0c:f2:
bc:02:2f:72:7f:eb:e1:1b:7c:fb:89:1f:b8:be:9f:
ff:b1:26:59:84:e7:dd:f3:50:ad:37:6f:dc:0c:46:
ad:c0:d3:36:2c:6d:08:dc:30:13:d0:e8:6f:c7:16:
a9:fe:2a:02:a2:ab:49:c0:7f:f8:e5:65:2b:24:ca:
41:ac:51:b3:96:ae:72:9f:80:0c:99:bc:cb:e0:5b:
a8:f0:d2:0d:4f:07:cf:b2:a5:2c:47:49:89:85:64:
08:5b:2b:31:d9:2a:ed:99:fe:d7:87:e6:eb:1c:8d:
74:62:34:d9:82:93:e3:c7:f8:06:7f:18:47:9e:74:
ea:64:71:46:a7:b0:9a:4b:8d:c6:07:f5:16:58:b5:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:21:A1:E8:38:11:4F:ED:38:51:40:AE:E6:D5:BE:7C:F3:46:BC
X509v3 Authority Key Identifier:
keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9e:fb:76:7f:41:d4:0c:e5:0b:ef:41:3c:28:2f:a4:69:be:
97:67:bc:ef:df:f6:d8:41:93:71:45:83:c8:d2:05:85:2a:12:
e8:00:67:6e:0b:8f:71:b2:53:58:d1:6c:9d:f5:58:26:58:e4:
02:b9:dc:5d:ca:7a:2c:2a:cc:7f:36:21:49:0f:cc:37:a0:d7:
17:8c:b5:7e:4b:a9:e5:e1:38:be:8a:8f:f5:da:74:1e:c7:89:
bb:15:55:a8:f8:82:7f:c4:c2:51:5c:e8:12:50:83:34:46:ed:
b6:e5:c8:b7:13:9a:52:51:5d:02:46:13:9a:5e:7c:18:e1:12:
4e:e5:bf:4b:6c:5b:9b:dd:3f:ad:56:40:1a:6b:45:02:f3:19:
6a:a1:8b:f2:28:f1:68:be:cb:23:c0:ab:47:7e:e7:00:44:38:
e5:f1:bf:8b:64:38:4b:17:02:52:22:72:ad:5d:7a:1e:af:e0:
25:24:ef:79:3d:e7:da:8d:38:98:ab:06:4d:61:92:38:9d:3f:
0c:98:27:25:5e:c8:81:f0:f2:31:fa:6e:fa:de:02:89:87:88:
bf:48:19:f6:a8:e4:88:38:ef:f7:d6:39:9f:73:ee:23:51:62:
0e:3e:ca:84:2d:0b:20:f4:dc:49:f3:0b:bf:7f:20:66:df:b9:
9c:ff:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:23:21 2026 by rpki-client