Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: 0xzuX5UCBNDSYBhOFoy8KbCZps8GgevJM6Fh3f18Nzw=
Subject key identifier: B3:23:BF:20:2F:23:BF:93:4C:55:AE:C7:0A:58:40:13:A7:79:48:86
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 019F9624EDD80A3A2C8FBEDAF493791A6495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0FD8
Signing time: Fri 24 Jul 2026 22:00:30 +0000
Manifest this update: Fri 24 Jul 2026 22:00:30 +0000
Manifest next update: Sat 25 Jul 2026 22:00:30 +0000
Files and hashes: 1: ATXg03GR8zoML1xy7L80ZPtMT8M.roa (hash: nheIXMj5AVfyPJ0H/Ys4b1d8hSHkVKCMyhmzU1gBfCw=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: 9kHLuDhG95HBp8NPobmVIW7n3fCMTOVINKtG1tdYYcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:ed:d8:0a:3a:2c:8f:be:da:f4:93:79:1a:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Jul 24 22:00:30 2026 GMT
Not After : Jul 25 22:00:30 2026 GMT
Subject: CN=b323bf202f23bf934c55aec70a584013a7794886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:62:0a:b5:4b:a8:18:4a:53:2d:85:68:bf:
04:b4:ef:03:e6:f1:46:c3:0d:dd:be:0e:1e:aa:00:
74:8a:35:6a:25:76:7e:fe:54:c3:15:2d:1b:ed:a0:
29:d4:ec:af:26:be:0d:5d:1b:25:6f:4d:e0:6c:4c:
f2:c1:49:0d:da:53:15:c3:c5:7f:1a:9a:b0:43:3e:
81:10:08:68:8a:e4:bd:77:7b:75:ee:e5:03:ad:be:
24:53:20:e6:d8:b7:14:8d:77:1a:50:9d:ed:92:aa:
af:bc:b7:de:c0:fc:73:41:b6:41:d1:a6:e7:7d:4d:
28:93:7c:a7:a8:a4:1a:07:d8:a2:a5:f1:28:c5:02:
99:e9:bb:ac:5d:16:a9:f5:64:e7:88:a2:72:88:d2:
9c:73:aa:f4:56:e1:15:15:bf:6f:9c:a4:b0:58:21:
5c:e0:61:11:ab:44:f5:d8:2a:12:4d:74:00:18:d9:
e3:58:af:9a:bc:62:cb:be:24:94:6b:54:2b:3e:96:
6a:3e:c4:2e:bb:07:d6:a3:3b:f1:88:04:f0:ee:d5:
e5:c7:0f:8c:76:6d:c8:3e:4a:16:b1:f4:2f:4a:cf:
46:32:2f:32:99:1a:98:b5:55:c6:5f:ba:5b:03:4b:
8d:38:28:3b:6f:3d:42:12:66:34:2b:46:f6:90:3b:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:23:BF:20:2F:23:BF:93:4C:55:AE:C7:0A:58:40:13:A7:79:48:86
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3d:c7:fb:c6:ce:32:07:5d:9f:55:c2:cb:9e:bf:39:2a:e9:
65:0c:78:c7:12:1c:60:f1:d1:b3:22:da:73:e1:39:d7:88:43:
30:56:b2:0e:1e:d7:99:30:ad:c6:53:8a:dc:cb:00:a7:d3:95:
33:8f:ce:5f:29:f2:f5:9a:bd:06:76:44:57:4a:d1:60:24:35:
56:13:86:21:6c:93:9d:dc:8e:ec:da:7c:23:bb:66:0a:bb:c7:
bf:e4:fa:f2:91:84:ba:04:1e:44:f0:b0:d5:a3:2e:3b:05:db:
20:65:53:76:04:26:4c:be:2c:cb:78:d0:0f:f3:66:c1:82:f7:
86:00:e0:6b:73:5a:7d:e1:3e:0d:42:a5:7d:12:00:da:5f:f3:
56:e2:96:fb:9d:a1:e7:89:48:4a:63:65:d2:58:98:22:1e:77:
85:67:5b:f5:49:f3:9e:e3:8b:23:a2:c2:08:36:ff:62:53:af:
6f:f3:77:01:df:44:50:1a:79:8b:a1:5e:a7:08:f6:42:e6:17:
de:a4:7e:b8:51:7f:3f:0a:b1:d9:09:40:56:65:2d:59:0a:ab:
0c:6c:ec:d2:e1:51:d6:b9:69:e5:1d:2b:1b:24:03:86:b2:47:
2c:e4:18:3a:2b:06:91:c5:c6:63:74:2f:3f:fb:fb:4c:32:08:
c1:37:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:17 2026 by rpki-client