Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: /BXaraXiuvvDaHuxRCn3p7Cek4Zidm8WerFxV3rcbAg=
Subject key identifier: FE:76:65:36:29:82:6E:64:4F:4D:2F:6E:8B:DC:42:24:27:C0:87:F8
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 019E216CC6B6620F1668687E01A035DD279F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0F17
Signing time: Wed 13 May 2026 13:00:37 +0000
Manifest this update: Wed 13 May 2026 13:00:37 +0000
Manifest next update: Thu 14 May 2026 13:00:37 +0000
Files and hashes: 1: ATXg03GR8zoML1xy7L80ZPtMT8M.roa (hash: nheIXMj5AVfyPJ0H/Ys4b1d8hSHkVKCMyhmzU1gBfCw=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: OPRIC/YdIPbaSxU5wyimeX27PTmuS4ZR0rGU1Bv5GE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6c:c6:b6:62:0f:16:68:68:7e:01:a0:35:dd:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: May 13 13:00:37 2026 GMT
Not After : May 14 13:00:37 2026 GMT
Subject: CN=fe76653629826e644f4d2f6e8bdc422427c087f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:a3:53:b3:46:46:b1:20:11:70:16:7d:be:
2e:5a:40:45:c5:fa:17:c6:68:39:6e:95:cb:89:6b:
ed:12:e3:cb:ab:9a:9a:32:f8:72:26:c6:87:73:59:
78:6f:71:4d:92:60:aa:79:8b:86:b4:0b:4f:0e:7d:
e5:27:be:f4:ad:65:92:9d:38:32:8d:78:4d:98:f4:
77:6b:1b:fc:fc:97:66:c2:d1:20:2b:00:0a:91:3f:
68:e0:d8:11:34:ea:f0:48:ca:51:af:f5:68:2e:c4:
0c:12:c3:0a:c7:d3:ef:0b:31:8e:83:03:7a:ee:af:
46:77:4b:e2:35:ff:e7:ef:9b:f8:63:5d:27:f6:77:
88:c4:58:c4:e3:b3:2f:6e:5f:9b:ca:c2:a4:eb:36:
45:0a:70:34:8b:b9:4f:3b:62:aa:f8:e3:9b:94:d8:
ae:7f:ea:1a:58:ac:4a:28:51:b4:65:90:e3:e9:42:
2c:eb:4d:31:75:3e:6d:95:62:ee:f8:72:83:5c:8b:
87:72:4b:f0:6e:12:86:79:4a:da:6d:eb:d2:4d:9a:
99:05:11:5b:2d:34:4e:42:4c:8d:b1:82:c3:66:1f:
08:fa:8d:f5:68:e6:cc:7d:8a:36:1f:18:a7:5e:1a:
68:76:dc:94:31:26:68:5d:05:30:ff:d2:af:52:78:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:65:36:29:82:6E:64:4F:4D:2F:6E:8B:DC:42:24:27:C0:87:F8
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:65:2d:ff:98:2f:71:e1:b6:0f:31:0b:a8:c9:45:0f:fa:da:
99:5b:6e:19:83:5b:26:10:a5:63:80:46:4f:2f:1d:c3:b4:35:
db:cc:d5:f0:de:92:23:39:43:56:e6:51:c9:4a:c5:1c:57:87:
11:2c:26:de:85:69:1e:5b:0b:76:f9:be:78:7f:d8:9f:33:b2:
6e:09:73:03:3b:52:a1:4e:be:ab:e5:d0:f9:74:ab:25:fb:50:
31:b6:60:cb:4d:9f:97:b8:64:80:a5:8c:2e:71:11:cd:cd:06:
a3:13:5d:2d:d5:d0:e4:f3:fa:69:ce:18:72:ee:1d:60:97:15:
3c:82:6a:9a:bb:06:09:c9:89:9a:8a:f4:29:f8:15:62:ca:30:
1f:35:4c:0b:79:2f:8b:7b:37:9d:db:85:b0:70:ab:9f:db:5a:
32:e3:2e:36:64:2d:f8:ff:82:0d:a9:74:11:dd:e2:7e:69:0d:
4f:db:92:f3:44:b7:c1:e5:4d:05:88:70:56:3b:cc:2c:a6:6e:
96:97:15:0a:c3:26:c2:6b:24:0d:eb:4d:61:86:30:af:78:5c:
54:17:e8:0d:6f:56:0b:d7:cc:f2:94:ef:15:59:6f:df:d4:9c:
b9:25:d3:d9:32:de:1d:e1:a7:e4:79:57:c8:de:0e:09:3c:03:
7d:b8:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:37 2026 by rpki-client