Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: etA5H/HMscDOrwJMmrONqSktEfCGxnF5MgKugEwkS9Q=
Subject key identifier: E9:0C:57:3B:28:AF:B1:AE:64:5C:AC:D5:0B:EF:9B:28:36:C0:C2:02
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 01A13B24E1BD4B5EF0EC7470F054DFC985B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 04C6
Signing time: Wed 14 Oct 2026 16:00:34 +0000
Manifest this update: Wed 14 Oct 2026 16:00:34 +0000
Manifest next update: Thu 15 Oct 2026 16:00:34 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: e1xXqoQlZ64axF8E2pg15BqedtvFYghump8txeeuupU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:24:e1:bd:4b:5e:f0:ec:74:70:f0:54:df:c9:85:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Oct 14 16:00:34 2026 GMT
Not After : Oct 15 16:00:34 2026 GMT
Subject: CN=e90c573b28afb1ae645cacd50bef9b2836c0c202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:5c:b9:79:f0:3c:aa:4d:bb:a5:c9:c2:54:
2c:af:87:78:94:8e:3c:9a:61:e9:ce:1c:8c:2f:33:
1b:f7:95:6f:b7:1b:9f:65:22:3e:5b:40:af:41:e2:
66:2b:62:8c:81:fb:fd:51:b5:08:46:ac:47:2c:ff:
48:3b:a6:e1:47:f5:88:ca:92:1a:7c:64:91:83:4a:
5f:09:a1:7a:9a:16:3a:34:22:c4:9c:03:a1:89:3d:
22:be:f6:5e:64:7d:81:6c:66:3a:d4:84:3e:32:08:
d2:03:bd:f2:b0:de:b4:2c:8d:cb:80:f7:67:76:af:
4e:60:e1:d0:4d:ee:09:cc:99:27:05:1c:6d:7f:29:
87:ff:e8:3f:24:0c:a4:55:47:18:fc:c7:89:66:3d:
f8:41:48:ea:ae:21:cb:9b:af:e2:6a:70:e0:08:4d:
d9:12:c3:50:5f:09:95:cc:f1:89:29:db:c8:22:9c:
4f:1e:06:fe:f6:6e:7c:d6:af:9d:58:5e:87:fc:84:
c8:48:98:fc:5e:ee:90:38:50:54:06:d9:b3:fe:ed:
fd:38:4a:9d:eb:cf:c4:3a:ca:16:5c:af:43:72:5b:
c1:d4:dd:79:ab:c9:f5:e8:ba:0d:f2:36:f3:ff:be:
1a:40:ff:c8:31:39:bf:c0:9b:b2:c2:9d:fa:12:24:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0C:57:3B:28:AF:B1:AE:64:5C:AC:D5:0B:EF:9B:28:36:C0:C2:02
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c6:83:59:55:cb:1d:ce:88:74:c2:81:5f:e0:55:00:81:ac:
fa:90:f1:60:06:41:63:bb:f5:55:9e:4d:90:95:a8:39:83:d8:
d8:df:f5:72:83:f5:89:c2:39:62:fc:ce:72:1c:57:a4:7d:54:
db:35:f7:6e:cb:df:d4:56:a8:b4:9e:d1:47:87:bd:ed:1e:20:
6c:8b:48:45:af:ca:f4:e5:96:17:b9:1b:d8:72:1b:93:f4:27:
47:6c:5e:32:34:02:b0:65:47:9c:33:ea:98:c0:b3:2d:23:32:
80:96:06:33:13:b5:46:22:3b:e1:13:84:eb:d2:df:22:99:60:
7d:14:4e:ab:10:ab:bd:75:64:ed:e2:8d:15:c4:b0:a5:b6:12:
7d:7f:7f:b9:41:a3:e2:f9:6e:a3:d0:28:41:4d:b1:ea:df:31:
70:de:33:78:90:7e:8b:6d:27:1c:1a:be:50:88:e8:30:36:7a:
95:45:7f:04:54:2e:23:23:77:0d:53:c9:90:69:75:79:a3:ec:
3c:65:9f:d2:4a:e5:63:45:bf:3c:51:1b:93:1a:bd:84:b5:e1:
4a:6b:8f:b2:fa:d1:f9:fe:32:d5:51:00:32:c5:08:c2:5c:63:
94:97:40:ee:0c:e6:64:7f:2c:0e:1d:a0:91:65:c6:b9:aa:fe:
ce:10:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:48:54 2026 by rpki-client