Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: h4TgqS16s2zPg9YtOFyCfjz6wjKpODe8jpErVQ5oxDc=
Subject key identifier: 4C:C8:23:7B:42:F6:E0:97:23:2E:D1:8B:AF:A8:12:48:2D:0D:87:1B
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 01A0D94D31C4EFF0B3E007767B0D035B80FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: 0309
Signing time: Fri 25 Sep 2026 16:01:49 +0000
Manifest this update: Fri 25 Sep 2026 16:01:49 +0000
Manifest next update: Sat 26 Sep 2026 16:01:49 +0000
Files and hashes: 1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: Erx55Y0ULY/ROB8h5CuD0JyA372wd8qYFDNrWaTZooU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:31:c4:ef:f0:b3:e0:07:76:7b:0d:03:5b:80:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Sep 25 16:01:49 2026 GMT
Not After : Sep 26 16:01:49 2026 GMT
Subject: CN=4cc8237b42f6e097232ed18bafa812482d0d871b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:17:9f:9a:6b:ee:fc:1d:f6:83:a7:22:c7:
e9:02:f8:8d:bb:e5:73:08:70:a2:23:6a:c2:63:fa:
12:59:bb:81:23:f3:47:19:6f:95:2c:26:2d:1f:50:
f8:4d:25:ef:03:45:cc:23:dd:4d:0f:e5:30:7f:de:
1e:11:0c:e5:0f:dd:0a:d0:ef:7b:88:32:de:7f:a2:
70:a2:aa:e4:b6:fc:38:0c:ee:67:0a:87:62:5d:6f:
12:23:9d:c1:0d:01:b6:98:ee:9f:50:ee:0f:3a:7f:
3d:7c:e0:f4:99:10:ec:c4:90:5d:82:c9:ac:71:36:
8c:89:2b:ed:67:4e:7e:43:04:fd:ae:22:0c:8b:15:
a0:c2:09:84:ab:31:43:89:e7:62:66:62:bf:78:3c:
a6:f4:76:45:df:c2:d7:87:7c:52:5f:ee:85:fc:8d:
ae:6f:4a:b6:93:f0:a7:04:25:a6:a0:f2:7b:c6:ff:
c5:ca:c3:94:ff:81:3b:44:bf:7d:9c:ad:73:59:53:
df:8a:f0:ae:20:d1:96:bd:26:47:2c:50:8e:66:22:
2f:6f:ae:13:30:67:8b:8a:36:45:20:e0:5f:82:8e:
80:26:04:eb:e0:20:79:4d:a1:0f:95:24:3c:6b:b5:
d2:df:e6:83:f2:a6:7a:1f:fd:a0:d6:ec:b4:92:33:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:23:7B:42:F6:E0:97:23:2E:D1:8B:AF:A8:12:48:2D:0D:87:1B
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b0:8f:73:6c:41:7d:a5:ef:99:5c:de:5d:9a:84:27:3b:6e:
fb:75:97:34:4c:f6:48:9e:a0:8b:83:ca:6f:cc:90:40:53:de:
3c:9c:4c:65:20:9b:78:01:cb:ac:a0:71:d6:e3:e5:c6:11:84:
1e:42:9b:da:96:e1:8b:98:b3:cf:00:6e:e4:de:18:1a:b7:58:
3a:3f:2e:94:87:0d:7c:23:bf:b2:e4:e6:b4:f8:33:53:32:08:
b6:74:7e:e5:91:65:0e:4c:68:b1:76:0d:d9:37:88:9b:2f:37:
2d:90:b0:f4:ae:1f:4a:26:73:e9:88:d7:be:8b:b4:52:6f:50:
e1:3f:c2:03:d5:52:9c:80:e7:55:25:bc:58:46:f3:83:0a:db:
14:a3:3c:a1:9e:18:f6:3a:40:6e:b6:95:8a:f1:88:34:44:d0:
38:7a:fc:6e:05:99:8c:7d:a2:b4:30:6e:0f:26:04:79:21:44:
44:bc:82:56:5f:53:5e:ed:16:7e:89:73:c1:9e:44:e8:6e:36:
b2:1f:13:8f:44:d8:c8:81:e7:8f:00:bc:80:a8:66:9b:cd:c5:
c1:ee:7f:9c:f6:e2:22:83:90:94:22:98:20:fc:8f:de:a5:7e:
d8:fb:34:18:69:a2:d1:56:9c:fd:32:38:8b:33:25:26:ab:15:
a1:f0:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:13:21 2026 by rpki-client