Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: WXO3UMpdQqI8SR/S8FOqN0pf3ZXUk5CedhPVGL7fC30=
Subject key identifier: 19:94:35:F4:78:D5:4E:19:DB:56:43:A8:92:EE:E2:61:80:DD:BC:C1
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019E216DF367AFF18FAF494EC66840359964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 032B
Signing time: Wed 13 May 2026 13:01:54 +0000
Manifest this update: Wed 13 May 2026 13:01:54 +0000
Manifest next update: Thu 14 May 2026 13:01:54 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: AlXD5UX1lh26YdQuikvx2blTpKAaCJ4XeEjdUD0pV0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:f3:67:af:f1:8f:af:49:4e:c6:68:40:35:99:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: May 13 13:01:54 2026 GMT
Not After : May 14 13:01:54 2026 GMT
Subject: CN=199435f478d54e19db5643a892eee26180ddbcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:5f:ec:c6:53:80:71:b5:2e:d7:a2:36:1f:
13:53:71:f3:a0:16:e5:08:27:f3:09:f3:b3:49:c8:
3e:f7:78:76:14:4d:d3:af:44:41:d9:2b:44:bb:cd:
8a:7d:51:c5:82:a5:18:a0:fb:a0:b7:51:84:c1:30:
e6:f9:de:da:09:6d:5a:04:65:dd:a2:46:d3:21:83:
b4:23:9f:0b:ac:58:70:2f:3b:b2:7f:62:3d:59:27:
19:a5:ef:a3:41:12:3b:a1:46:fc:3a:a0:7f:33:95:
b4:d2:6b:27:9b:5d:bd:1e:b4:9d:99:1e:d9:5b:ea:
c3:45:5b:81:21:43:f5:99:74:eb:01:e1:66:cb:71:
07:ee:0c:b9:da:11:cd:55:f4:d1:27:76:45:0b:41:
09:1f:7e:62:10:92:5d:df:d1:d6:98:b4:1b:d9:7d:
33:6d:8d:d8:4d:b6:22:4c:40:ec:96:53:eb:02:b4:
73:ec:4a:31:e0:eb:7b:2d:df:37:a9:06:c6:7a:4d:
b0:8c:59:45:b0:b8:4c:de:7d:a8:cd:54:f8:87:dd:
2c:b5:22:ec:6e:3c:86:e3:26:ca:d7:af:b6:da:3c:
33:78:6f:84:60:b3:b7:84:7c:62:4a:22:f6:b4:dc:
f3:62:2d:62:46:be:ee:69:63:73:9b:d2:fa:4f:eb:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:35:F4:78:D5:4E:19:DB:56:43:A8:92:EE:E2:61:80:DD:BC:C1
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:49:7f:39:f9:25:9f:ac:0f:0c:52:1e:e4:28:af:b0:2c:ea:
ba:19:f4:a7:82:1a:00:27:50:d6:b2:ba:53:54:24:e4:56:18:
b4:82:72:ce:c4:1e:3e:9a:45:2b:c2:47:89:8d:56:92:86:e7:
93:83:4c:56:37:25:3b:41:c0:fb:1a:cd:a9:ef:89:b1:e6:d7:
b1:74:53:53:ca:12:42:46:b5:b2:55:4d:c2:e8:c2:bf:b3:65:
82:a1:44:33:93:ea:33:c3:23:6d:f8:8e:3e:11:36:45:64:a7:
19:78:ea:2f:5f:b6:aa:12:66:9e:34:5d:00:84:3d:de:56:f4:
b7:63:8c:7a:c7:ee:dd:07:c9:5d:32:e0:e9:96:a6:2a:34:ec:
d0:0f:77:dd:50:e2:2b:68:a2:9e:51:f1:de:b1:4f:bd:73:ca:
36:c8:bd:98:be:aa:d7:a6:4e:d6:f7:40:da:da:55:69:99:c3:
7e:9e:6b:2b:cf:f1:43:7f:07:8a:b2:c6:97:c0:5c:49:fe:80:
69:11:41:37:5f:9b:71:e7:92:f0:01:2a:03:f0:e9:1a:b6:49:
2e:08:a4:83:82:c1:47:c9:85:45:4b:76:46:55:d1:0e:17:c8:
65:64:88:cd:6c:32:b7:03:c7:9c:de:26:f3:84:f7:14:1d:f5:
57:96:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:27:53 2026 by rpki-client