Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: aGpayIiS9ljgm0yPbO0VTJJ2MXGLRI5UI43vntMe6Mg=
Subject key identifier: 75:C9:2B:2F:7A:E5:89:23:62:AC:D8:82:09:8B:A7:B7:E1:06:C2:77
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019D9773E2703E22370ED0EC668047516EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 17BD
Signing time: Thu 16 Apr 2026 18:00:47 +0000
Manifest this update: Thu 16 Apr 2026 18:00:47 +0000
Manifest next update: Fri 17 Apr 2026 18:00:47 +0000
Files and hashes: 1: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (hash: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=)
2: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: eW+pQQsvULPp1RScf8kIIop51PZwxt4JfE+4D8Yim6k=)
3: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (hash: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:e2:70:3e:22:37:0e:d0:ec:66:80:47:51:6e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Apr 16 18:00:47 2026 GMT
Not After : Apr 17 18:00:47 2026 GMT
Subject: CN=75c92b2f7ae5892362acd882098ba7b7e106c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:96:50:79:30:23:7f:82:91:41:54:47:69:
85:4f:f8:da:f1:70:87:b5:c1:54:0c:ca:ae:19:e4:
74:b2:bc:09:bc:35:03:ba:46:99:99:ae:a7:97:36:
67:21:93:b3:8e:24:10:17:0b:0f:e6:37:63:82:0f:
70:56:18:92:e5:5e:11:69:f8:12:c2:45:3f:a8:20:
9e:da:3b:cb:47:57:90:30:2a:3d:0a:20:7a:97:c7:
0e:95:00:8f:c0:e9:43:fb:79:40:bf:06:74:e4:b7:
5a:96:01:05:15:51:27:b1:81:1f:bd:a1:02:cf:63:
75:34:41:41:de:10:77:84:7c:8d:8b:75:d1:1d:69:
3c:e6:17:5e:8a:c1:3a:93:fb:a5:96:11:b3:ef:ba:
49:49:0b:fd:91:aa:1f:4a:15:83:52:f5:cf:bc:3e:
4d:4b:cd:82:b6:13:7e:0f:7e:0a:42:e3:35:23:02:
bc:ac:94:0f:62:21:d5:c8:11:f1:8a:7f:28:ee:b8:
bd:82:0c:74:90:34:48:22:32:d1:2b:ba:29:67:b5:
f7:fd:74:53:4d:b5:97:db:48:c2:3f:ee:fe:d0:dd:
b0:a9:78:2a:dc:81:47:d1:bd:1d:78:13:b4:e2:36:
28:c3:0d:ec:30:89:dc:69:99:42:01:81:2b:f3:0d:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:2B:2F:7A:E5:89:23:62:AC:D8:82:09:8B:A7:B7:E1:06:C2:77
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:06:7c:e3:1a:21:dd:af:d9:89:1f:ea:01:54:52:ad:43:
87:09:53:0a:d8:5a:a2:0b:67:b5:c5:61:16:27:e7:e5:43:69:
9e:7c:c3:94:26:7d:e5:0c:17:1d:89:86:3f:45:fe:62:04:9f:
8a:b1:b4:eb:0f:1c:a8:9b:82:bc:22:63:17:17:4d:74:30:88:
2d:81:52:6c:ab:7f:67:28:23:fd:46:47:ce:2a:66:b6:97:b8:
cd:93:c0:d2:08:61:20:11:d6:b3:13:09:c0:ec:9e:05:09:7a:
aa:e2:94:13:80:87:d2:e5:95:b8:23:73:4a:06:0b:5a:52:62:
b9:bc:32:0e:d0:da:1d:d4:78:52:d3:3d:df:99:0d:18:a6:90:
4c:dd:4c:0b:0f:38:0f:2a:c3:26:c7:9e:e0:60:d7:e0:4b:83:
4f:34:fe:07:68:5c:44:86:f3:24:16:f1:26:2b:2d:84:6b:88:
e6:a0:de:5a:1f:cf:a4:7a:5f:1b:99:c5:68:6d:c6:d8:e6:21:
b5:0a:72:6c:fb:76:2c:a5:b2:fe:ef:0e:69:c1:e5:5f:56:de:
f5:10:da:cf:9e:1b:16:09:03:bf:d1:9d:f2:1f:5e:ac:85:3f:
84:e2:c3:dc:18:39:84:a8:c1:ed:b6:d3:2b:e0:e1:7f:91:23:
ce:94:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:38 2026 by rpki-client