Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: 6QTiFMwLaOWXQsQBKx+fyfHrozTUvshSCzaM1BnNVJ8=
Subject key identifier: 0A:20:CE:85:4B:02:3D:FC:2C:45:87:BE:B5:19:AC:14:85:63:3B:EA
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 019F8F10A847804BA20B87025FF30625C07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: 025E
Signing time: Thu 23 Jul 2026 13:01:01 +0000
Manifest this update: Thu 23 Jul 2026 13:01:01 +0000
Manifest next update: Fri 24 Jul 2026 13:01:01 +0000
Files and hashes: 1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: 7G4l17Zv5OBLqcLWfizyjmUkQvCLCEWVwr+wwXgfnDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:a8:47:80:4b:a2:0b:87:02:5f:f3:06:25:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Jul 23 13:01:01 2026 GMT
Not After : Jul 24 13:01:01 2026 GMT
Subject: CN=0a20ce854b023dfc2c4587beb519ac1485633bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:a6:3d:5d:c7:32:7f:5e:77:ac:ba:b9:82:
62:8a:76:4d:77:b7:ea:2a:c8:a8:ae:a6:66:37:b2:
1b:7a:09:64:17:48:7d:f8:36:1f:cf:65:e0:37:3f:
e9:d5:8e:56:52:a4:b8:23:16:d7:43:72:c2:b3:64:
3a:c1:33:27:af:99:f6:28:10:aa:70:38:88:2b:b9:
ef:cd:49:c9:a5:38:2d:8e:67:c8:41:84:63:20:8c:
61:f0:ef:1d:b5:02:47:1d:2b:2c:11:6a:50:03:20:
51:8d:8d:28:94:3c:23:b1:bf:cc:34:94:e4:b1:45:
f4:14:76:d9:4e:3b:ff:34:e9:aa:c5:c1:78:97:c2:
55:aa:37:75:5e:3b:a0:e5:bd:25:18:1a:e7:9b:03:
ec:69:d2:35:f6:b5:f4:b3:96:5a:01:c6:b4:a4:94:
3d:b5:50:5a:a2:ed:a9:95:d9:3e:60:ef:21:1f:92:
10:d6:60:0a:f8:8b:4e:54:69:fe:33:7c:63:2f:86:
86:42:bf:ec:8e:d3:81:2f:55:0a:40:02:98:be:4c:
4d:2e:15:e4:ee:82:06:5f:5b:2d:0c:47:f2:1b:03:
05:fd:83:f3:80:c2:dd:c8:5f:9e:03:21:bd:d7:be:
cf:fe:15:b9:ab:3a:ca:b8:b3:0d:92:d7:4c:43:0e:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:CE:85:4B:02:3D:FC:2C:45:87:BE:B5:19:AC:14:85:63:3B:EA
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:13:75:11:6e:8e:45:09:a4:30:fb:9b:02:6c:6b:69:20:f6:
e1:77:7d:1e:50:01:c8:ed:77:ef:6b:a6:e5:c5:7f:b8:a2:df:
7e:dd:b4:b0:91:a0:8f:9b:3f:85:2b:e7:26:18:40:c1:22:cb:
51:97:5a:c6:9d:a8:19:b9:4a:3d:68:9a:05:26:48:f5:1f:51:
e3:8f:88:1f:4b:c3:40:0e:7f:1c:83:f9:f7:e4:4d:84:56:1f:
da:98:dc:30:b1:4f:d3:ae:ab:77:c8:a9:c6:2b:51:94:4d:e1:
6d:c7:8c:c8:db:5e:3b:07:30:f6:1c:f0:95:11:24:a8:38:00:
8f:70:4e:3b:ac:9f:ca:5e:e5:f3:d9:6c:23:52:70:ca:dd:4d:
78:34:4a:aa:89:aa:d3:bc:28:79:5a:75:5f:ce:f9:5f:e6:68:
92:37:d6:73:a1:7e:ba:95:53:b2:a0:71:9a:d8:79:a9:30:e7:
a5:27:6c:32:fa:25:ed:07:cb:13:2f:41:17:50:73:7c:fd:76:
b9:42:cb:be:63:6e:18:36:44:1f:ff:ae:a3:fd:e5:50:94:85:
c5:4a:bf:54:19:58:f7:2e:38:44:fe:da:05:90:a0:d6:9c:24:
31:54:45:75:b0:ff:c1:6a:1b:18:b2:e4:c8:e3:16:62:cc:17:
0e:9b:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:50 2026 by rpki-client