
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: 9Dw32B/LgST0JEUuf93bhjVM2aWq44gp8vFBbX3pn2g=
Subject key identifier: F4:2A:97:DE:D1:1A:53:4F:CB:73:37:DC:6E:0F:18:9B:EC:BE:5C:F4
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019EC0DB8B9BAD4648252AEE2754382AC5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 1857
Signing time: Sat 13 Jun 2026 12:01:13 +0000
Manifest this update: Sat 13 Jun 2026 12:01:13 +0000
Manifest next update: Sun 14 Jun 2026 12:01:13 +0000
Files and hashes: 1: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (hash: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=)
2: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: hmUr/zYpouKC7yqPdG3InD7Fk7XewcbpZLHHQTQp7mQ=)
3: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (hash: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:8b:9b:ad:46:48:25:2a:ee:27:54:38:2a:c5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jun 13 12:01:13 2026 GMT
Not After : Jun 14 12:01:13 2026 GMT
Subject: CN=f42a97ded11a534fcb7337dc6e0f189becbe5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:f6:92:30:00:38:e1:2d:a9:68:88:2d:91:
b4:e5:04:05:58:d9:48:90:3b:63:ca:a4:67:2b:e1:
7f:05:95:0e:18:27:5a:ef:e8:c6:60:cb:14:5d:1a:
99:92:d2:02:ab:94:a9:97:c2:2d:22:e2:02:b0:a0:
51:8a:d8:10:be:f0:e5:31:f6:7b:dc:ba:9a:55:fd:
57:67:91:65:70:08:4c:58:a6:60:c7:ad:18:9a:e4:
8c:94:f8:e9:0d:14:bb:9c:c8:2d:c6:79:a5:be:7f:
55:f6:74:b5:40:34:ac:11:40:3f:60:b1:a6:b8:4d:
bd:16:a7:60:d2:e7:21:d5:7b:5c:90:07:8d:76:77:
a5:99:97:68:78:6d:aa:ba:1f:01:da:40:84:98:e7:
4b:6d:e9:32:63:26:71:c9:f0:e2:07:01:11:9a:b3:
f5:53:bd:66:95:8f:56:7c:c7:d6:44:5c:21:04:0e:
0e:d8:79:8d:cd:c4:c7:c8:f8:57:6b:0c:fd:3c:42:
cb:26:2b:ba:2f:2d:0b:09:73:2d:f5:14:4d:4e:48:
ff:26:64:99:ee:e1:61:e3:36:0f:3b:8d:8c:48:8a:
ce:a4:20:3f:65:40:63:7f:70:51:df:3d:11:f1:a7:
36:e1:a5:d2:de:91:df:5d:4c:79:0b:93:04:f8:b2:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2A:97:DE:D1:1A:53:4F:CB:73:37:DC:6E:0F:18:9B:EC:BE:5C:F4
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:98:76:4e:83:f6:39:85:5f:44:dd:91:a9:ce:11:ba:16:
83:d0:7c:1e:00:80:e3:50:12:47:c9:d4:a7:65:d2:2d:1e:f9:
3c:6f:30:ad:6c:90:0d:47:b4:a0:7d:0c:e3:32:54:c9:c5:0e:
4f:e1:b7:aa:6f:32:46:91:fe:ba:45:0f:32:ae:cc:34:19:00:
07:21:88:aa:83:2e:ec:a6:44:a4:33:f1:43:a7:ca:24:8b:ba:
51:42:d5:0f:29:6e:d0:3c:b7:3c:b5:5b:6a:e3:88:d9:1d:24:
47:ed:fc:47:bc:1a:42:45:80:51:b3:67:d2:a8:d3:38:8c:c2:
78:ac:e8:3a:d0:09:b0:a1:c2:48:b3:83:d0:8f:9e:a5:2a:e2:
86:1c:bd:8e:9d:21:e1:1d:6a:cb:26:5c:5b:87:ec:2e:a4:79:
c3:ac:55:3a:d4:3f:bd:1c:87:72:3d:79:7c:46:e5:82:bd:f5:
44:0b:a5:91:78:25:e3:bc:70:26:60:ba:37:c0:8e:63:1e:cd:
d2:e9:cd:cf:3b:b9:6b:a7:b9:45:38:46:04:11:c7:d6:35:0a:
46:95:1e:f3:eb:3a:84:cb:3b:6b:96:d4:a1:3d:e1:e1:2e:24:
d3:87:70:b1:1a:06:c8:5b:4e:53:f1:f2:e8:e3:c3:9d:34:56:
9b:4b:e1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:52 2026 by rpki-client