Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: xQgFImp55t2zAh73QZAPaMYVci545WsfwJTMUmiYrnM=
Subject key identifier: 54:60:C1:6E:53:AA:55:C5:3C:06:CC:97:42:76:F9:54:CE:62:9A:24
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019D265FCACB4024569FC80532489192F93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 02A9
Signing time: Wed 25 Mar 2026 19:01:45 +0000
Manifest this update: Wed 25 Mar 2026 19:01:45 +0000
Manifest next update: Thu 26 Mar 2026 19:01:45 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: lCV+B/ehITWOhIn04YM/ADkKlxDQSu7v4n6Z2B69Fjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ca:cb:40:24:56:9f:c8:05:32:48:91:92:f9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Mar 25 19:01:45 2026 GMT
Not After : Mar 26 19:01:45 2026 GMT
Subject: CN=5460c16e53aa55c53c06cc974276f954ce629a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:d5:40:61:c4:81:06:c8:84:05:03:90:f8:
d4:bc:be:35:d9:c1:22:5b:a4:b2:38:d9:6f:15:2f:
67:a2:b3:61:ef:e4:d8:5c:9e:4a:17:cb:ee:d8:f7:
15:82:cf:53:76:2f:4b:3f:61:21:d0:a2:dd:a9:4c:
5d:1a:c3:d4:05:09:e0:38:b5:31:b1:4a:7e:e3:06:
18:30:f4:0e:70:31:22:af:7e:3b:98:db:fb:5b:e0:
b1:61:d7:70:aa:2a:f9:f7:f7:a4:63:b2:5c:c2:b9:
78:29:65:a7:58:15:8c:9f:eb:44:48:f9:88:2c:1b:
3d:b7:f1:cd:d2:52:c3:ea:36:52:05:5b:43:28:54:
09:c0:fe:ba:ef:94:72:cb:6c:2a:fb:b0:95:01:3d:
06:24:aa:9c:8b:66:a1:b6:88:68:18:69:9c:f1:53:
89:ea:b3:1c:45:23:43:49:09:fd:27:2d:56:13:97:
d5:5b:4b:90:46:77:fe:01:21:c4:59:75:62:58:b0:
7f:11:a4:63:84:f1:28:a0:b5:20:b0:2a:4f:43:42:
23:15:86:3f:56:ae:89:3a:90:97:76:ec:3f:c9:e7:
5c:76:db:83:4f:5d:cd:3e:a5:77:67:5d:23:7b:0e:
4d:69:30:18:40:be:4b:e8:3f:ad:d3:43:f7:4f:ba:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:C1:6E:53:AA:55:C5:3C:06:CC:97:42:76:F9:54:CE:62:9A:24
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:c8:d4:b5:d6:49:fd:4c:8b:aa:e5:0e:87:8f:79:ee:9c:
e3:24:a9:ec:b3:c8:31:22:ed:d9:c6:80:87:ef:6e:82:c4:7d:
c3:38:73:e8:a5:9d:dc:13:f5:fc:fb:ad:19:bf:fc:91:e4:dc:
ad:16:4d:2e:1c:2a:67:de:76:aa:55:02:cc:2d:51:43:62:75:
7e:59:2c:02:c4:8c:b2:36:d2:ec:93:80:cc:fd:d6:0e:85:4d:
e0:12:d0:fc:6a:11:a7:04:45:e4:7b:4b:a6:ec:52:fd:4d:d5:
00:45:6c:5b:a3:69:d5:9a:84:fd:cb:c6:11:b7:f9:c9:78:e4:
cc:d1:70:6f:6b:d8:63:e1:b5:6e:1b:90:a2:64:76:47:c3:09:
81:e7:cb:0a:a5:ba:6c:bd:8e:1d:e6:e8:84:f4:14:13:f9:81:
92:15:1c:a2:bc:e2:8f:29:52:2d:2f:f9:65:63:e0:5d:fd:b1:
b4:77:79:9f:e2:23:b3:cb:cc:65:04:e4:f8:2a:c9:51:49:70:
b6:68:f9:8a:3f:ba:71:c4:55:3b:55:89:99:30:f1:5c:22:9e:
b3:28:dd:c8:4e:bb:55:5b:c5:40:04:25:a7:5f:17:74:79:48:
4f:3b:f5:42:f6:d9:50:32:34:e7:46:dd:bd:2a:9e:a5:ff:44:
04:0b:7c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:43 2026 by rpki-client