Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: CJKQAZ/Xr+JkxmAaIrUVtSys5/M7tQ3XEUOmiTr4XUI=
Subject key identifier: 54:04:56:1E:F9:16:A3:B5:B9:9F:DE:94:DD:E2:D2:9F:46:D9:54:7E
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 01A0D3F0123D3DDF9DF9D743F776FF95B808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 196A
Signing time: Thu 24 Sep 2026 15:02:00 +0000
Manifest this update: Thu 24 Sep 2026 15:02:00 +0000
Manifest next update: Fri 25 Sep 2026 15:02:00 +0000
Files and hashes: 1: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (hash: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=)
2: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: A9jyC7Z2IztgObYRP86CUGV+ff+vfaOON95KBcyd8eY=)
3: eahgufCfOHHAIx8MFOHNTLtP6M4.roa (hash: kkQvc1W1aYM6K9ernxdLo8LTVXVyQLjFAFQYaCBKHkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:12:3d:3d:df:9d:f9:d7:43:f7:76:ff:95:b8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Sep 24 15:02:00 2026 GMT
Not After : Sep 25 15:02:00 2026 GMT
Subject: CN=5404561ef916a3b5b99fde94dde2d29f46d9547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:69:02:b6:91:42:fe:62:0c:68:89:30:d1:
ff:22:dd:ff:5d:57:68:77:f6:f2:0d:35:42:bc:b2:
80:c0:c4:78:35:2b:4f:d4:e9:f5:43:cd:6d:2b:3b:
05:0a:72:50:b4:f9:1d:20:0d:7e:5a:65:1d:10:66:
b6:08:32:a2:11:11:02:fd:41:77:4b:14:ef:45:7d:
46:3f:3f:6c:4e:63:d5:b9:9b:fb:a5:07:d6:9b:d3:
f5:75:a1:85:e7:f2:45:85:61:c0:d2:c6:56:96:41:
9a:27:31:88:28:ef:e2:3d:f7:f4:93:4e:d4:62:7b:
03:be:8a:c6:a8:eb:c6:2b:65:bb:d2:83:56:60:8e:
a9:d3:e0:55:93:49:06:57:6c:14:91:6c:67:f3:4c:
69:20:e9:91:32:e7:af:5d:b6:fc:6b:72:a2:b6:a0:
a6:52:a2:5c:00:37:9f:0a:77:82:ce:ec:aa:8a:44:
cf:98:0b:04:79:12:86:b4:35:c1:35:3d:0d:51:9f:
25:1c:bb:ba:5c:62:51:e7:c1:a7:63:c9:26:44:e5:
15:00:43:c7:17:30:41:4c:6b:4c:61:a9:f2:19:1c:
49:13:aa:78:79:2f:2f:d7:cd:3e:e3:57:5a:fe:22:
aa:2d:81:17:eb:3b:27:2b:a0:e7:f4:be:08:7c:27:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:04:56:1E:F9:16:A3:B5:B9:9F:DE:94:DD:E2:D2:9F:46:D9:54:7E
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ca:12:d9:f6:82:e6:87:7f:e1:7c:4c:6c:24:ef:22:6b:ee:
c5:c4:2c:d7:92:52:58:49:90:62:fb:5d:98:56:50:ad:a3:d1:
2a:f2:cb:ed:69:8c:b7:e2:66:ad:5e:20:86:e5:e6:d8:9b:67:
55:46:1f:a5:f7:3c:aa:d2:5a:c8:68:5b:93:c8:a7:cc:4b:f6:
11:02:68:eb:95:b7:e4:99:2d:65:65:3f:6c:13:f2:4f:fb:90:
3f:e6:74:b0:90:6d:14:8c:17:a9:5d:6d:ff:5e:27:70:1b:d5:
46:a8:9f:a6:39:2b:39:11:f9:a3:b5:f6:8c:28:f2:1e:f4:00:
8a:8d:69:16:15:36:ac:28:93:b7:0d:29:87:bf:a9:22:5b:e8:
28:92:c2:22:85:c5:46:4a:e4:85:b1:76:df:39:7e:15:2f:f1:
c0:c1:23:8b:47:60:14:3b:96:c7:7a:72:54:42:e5:62:4e:07:
5b:f4:c7:3b:b4:70:cc:de:0f:3a:f5:a1:b3:a5:9c:ab:15:cc:
00:1e:2c:df:57:17:b6:5e:9f:0a:9d:ac:17:08:0f:05:6b:fe:
ce:33:81:9e:87:8b:bc:d1:ca:7f:ca:3e:e2:79:42:3c:13:af:
02:c8:da:31:e2:e2:b6:ba:fd:48:d1:a4:79:07:39:87:2f:a1:
64:df:01:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8BI9Pd+d+ddD93b/lbgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNjU1NjRhODk1NGQ2YWU5NTJmOGExZjdhZjZjMWNmYmE3
ODA5NGEwHhcNMjYwOTI0MTUwMjAwWhcNMjYwOTI1MTUwMjAwWjAzMTEwLwYDVQQD
Eyg1NDA0NTYxZWY5MTZhM2I1Yjk5ZmRlOTRkZGUyZDI5ZjQ2ZDk1NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTRpAraRQv5iDGiJMNH/It3/XVdo
d/byDTVCvLKAwMR4NStP1On1Q81tKzsFCnJQtPkdIA1+WmUdEGa2CDKiEREC/UF3
SxTvRX1GPz9sTmPVuZv7pQfWm9P1daGF5/JFhWHA0sZWlkGaJzGIKO/iPff0k07U
YnsDvorGqOvGK2W70oNWYI6p0+BVk0kGV2wUkWxn80xpIOmRMuevXbb8a3KitqCm
UqJcADefCneCzuyqikTPmAsEeRKGtDXBNT0NUZ8lHLu6XGJR58GnY8kmROUVAEPH
FzBBTGtMYanyGRxJE6p4eS8v180+41da/iKqLYEX6zsnK6Dn9L4IfCfKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQEVh75FqO1uZ/elN3i0p9G2VR+MB8GA1UdIwQY
MBaAFD1lVkqJVNaulS+KH3r2wc+6eAlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFdWV1NvbFUxcTZWTDRvZmV2YkJ6N3A0Q1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MTE4NzctYjUxYS00NjRhLWFkOWUt
MTA0YjE0ZjViMGY4LzEvUFdWV1NvbFUxcTZWTDRvZmV2YkJ6N3A0Q1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80MTE4NzctYjUxYS00NjRhLWFkOWUtMTA0YjE0ZjViMGY4
LzEvUFdWV1NvbFUxcTZWTDRvZmV2YkJ6N3A0Q1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsoS2faC
5od/4XxMbCTvImvuxcQs15JSWEmQYvtdmFZQraPRKvLL7WmMt+JmrV4ghuXm2Jtn
VUYfpfc8qtJayGhbk8inzEv2EQJo65W35JktZWU/bBPyT/uQP+Z0sJBtFIwXqV1t
/14ncBvVRqifpjkrORH5o7X2jCjyHvQAio1pFhU2rCiTtw0ph7+pIlvoKJLCIoXF
RkrkhbF23zl+FS/xwMEji0dgFDuWx3pyVELlYk4HW/THO7RwzN4POvWhs6WcqxXM
AB4s31cXtl6fCp2sFwgPBWv+zjOBnoeLvNHKf8o+4nlCPBOvAsjaMeLitrr9SNGk
eQc5hy+hZN8Bwg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:15:16 2026 by rpki-client