Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier: 26fyW0tG31Fxb9fy8Z9mVx3sIOFwo5imTqeaw+pbOu0=
Subject key identifier: A2:20:6A:DE:18:4A:CD:35:68:08:2D:9F:4E:1E:82:6A:4F:37:1B:6B
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial: 019CAB3410A806410EC0577E9B9DB1726C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number: 011C
Signing time: Sun 01 Mar 2026 21:00:41 +0000
Manifest this update: Sun 01 Mar 2026 21:00:41 +0000
Manifest next update: Mon 02 Mar 2026 21:00:41 +0000
Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: M8unwqFvIiFzafXBIjEGWjNalR/CgiZDN7mhA+PdRs0=)
2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:10:a8:06:41:0e:c0:57:7e:9b:9d:b1:72:6c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
Validity
Not Before: Mar 1 21:00:41 2026 GMT
Not After : Mar 2 21:00:41 2026 GMT
Subject: CN=a2206ade184acd3568082d9f4e1e826a4f371b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:73:f0:9c:57:d7:ca:8f:03:a8:33:4c:2d:
45:d4:bb:5e:cc:9b:03:64:4d:c4:65:96:54:ed:61:
3a:cd:7a:c4:cc:93:43:c4:d5:1b:a0:f3:11:31:f4:
73:48:67:da:97:86:48:b3:b8:af:c6:b2:4e:e9:cc:
62:f0:a9:b9:82:82:49:e1:74:7d:21:45:c9:26:ae:
8f:11:27:df:c4:e4:3c:cd:34:56:e7:bc:e7:a8:0b:
74:99:35:69:58:ea:41:7b:ed:17:52:b8:c7:6c:3c:
94:c5:35:88:81:9f:93:96:fe:92:40:f1:b9:e4:d5:
7a:9a:e4:b3:75:d3:29:92:3b:5e:9d:78:e3:d4:73:
00:d6:e3:05:98:85:fe:10:5f:06:93:39:61:fa:9f:
4a:1e:14:24:68:c9:5c:b1:7b:81:99:65:5b:80:d0:
f8:21:18:3d:3b:da:1a:89:36:6d:3f:53:16:53:d0:
46:fe:1a:45:77:41:a0:80:ee:1f:61:1c:58:36:09:
7e:f0:20:a1:f0:14:f5:3d:5b:a7:38:e2:65:d4:0f:
4c:9b:8f:c5:d7:5d:6d:57:ef:20:c8:e8:d8:23:a1:
76:cb:6a:c6:3b:68:df:e5:ba:3d:8e:e4:2d:bf:b0:
fc:db:43:1d:77:ec:24:30:68:59:4c:11:42:6c:cf:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:6A:DE:18:4A:CD:35:68:08:2D:9F:4E:1E:82:6A:4F:37:1B:6B
X509v3 Authority Key Identifier:
keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:0a:a3:cd:94:cc:39:72:cd:15:b9:21:32:86:5a:75:59:
d9:0f:3a:b8:b0:29:e2:c0:cc:10:86:ed:0e:b0:60:6a:51:90:
16:a2:bf:7e:63:17:0f:12:50:ec:a2:9b:40:c2:ca:2c:23:68:
fe:7a:0a:c9:d7:99:2d:56:ff:a2:7b:1e:0c:ce:1b:ba:68:22:
ce:42:21:fc:26:e8:a9:6a:16:5a:3b:93:a3:10:bc:8a:23:44:
1a:e1:96:7b:e4:e8:a7:6e:e8:ba:c6:9d:10:39:11:a3:4f:8f:
b7:d5:01:78:c1:e8:31:13:6e:10:21:f5:e8:43:57:79:92:24:
be:32:90:b7:33:0c:a8:89:af:8a:d1:b2:da:d4:8b:34:a2:a7:
6d:24:6c:3c:88:4a:1f:14:5d:ca:95:87:1b:9f:8f:8c:bc:04:
c8:91:a9:35:c4:8a:a2:ea:69:bb:ed:29:da:8a:0f:fe:db:0e:
c7:75:fb:4d:1c:59:bb:c6:95:60:71:9e:04:bb:66:e4:bc:1a:
f3:03:68:45:a2:1c:99:7e:9c:95:9f:49:29:0a:6b:95:c2:07:
a7:41:ce:60:c1:50:bf:34:da:62:35:e1:31:bc:f7:8c:a4:0e:
19:22:4d:2d:1e:5d:fd:7e:95:e5:cd:78:0d:34:dd:81:6a:72:
f2:7e:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:52 2026 by rpki-client