Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: cuvZIOHsXgim7fiWiIwkEandehvA6R1scELvtAWg4eo=
Subject key identifier: 9E:54:22:13:BF:8C:D1:24:1E:28:EA:9D:97:2F:27:54:15:82:46:05
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 01A12BB2AB1BBFCF195A1D66ADE6DF9B6256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 10AA
Signing time: Sun 11 Oct 2026 16:01:31 +0000
Manifest this update: Sun 11 Oct 2026 16:01:31 +0000
Manifest next update: Mon 12 Oct 2026 16:01:31 +0000
Files and hashes: 1: ATXg03GR8zoML1xy7L80ZPtMT8M.roa (hash: nheIXMj5AVfyPJ0H/Ys4b1d8hSHkVKCMyhmzU1gBfCw=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: CztY2RxwhK56mF3YY4OCC7eS3Z2fC2f9qxwEgk7YVV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:ab:1b:bf:cf:19:5a:1d:66:ad:e6:df:9b:62:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Oct 11 16:01:31 2026 GMT
Not After : Oct 12 16:01:31 2026 GMT
Subject: CN=9e542213bf8cd1241e28ea9d972f275415824605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:55:32:a2:ed:a7:f1:b6:5f:a0:86:83:6c:
ea:cc:65:e1:e2:11:31:9e:79:d2:c2:4d:fb:09:84:
bd:c2:ec:7e:94:81:d9:dd:db:e7:fb:e0:09:2f:10:
e9:e9:38:ea:56:23:7a:96:c5:6d:1d:02:d9:64:92:
45:91:14:75:5d:39:66:75:d2:b8:7b:07:2e:54:ed:
f3:cf:f8:63:ed:77:3e:cf:83:bb:cf:3e:f2:cc:47:
a2:ec:3e:21:51:a7:07:e1:e5:47:68:47:2f:55:5f:
e9:11:60:ec:f7:64:b3:9f:aa:25:f6:8c:25:c4:ac:
58:e6:02:ea:59:90:ed:bb:bd:0c:14:b0:7b:6b:eb:
c4:fb:79:89:49:ca:2a:f0:b0:8e:9f:64:a7:8f:e1:
ad:5a:67:4a:d7:1f:7c:c7:df:7e:7c:14:98:11:b0:
9c:95:b0:eb:1f:ab:9a:0d:ae:47:ff:ef:df:5f:74:
83:f8:77:76:13:3c:ec:7b:6d:69:27:c9:60:05:9a:
62:17:a9:eb:6e:37:d6:17:da:84:2f:62:f8:33:a5:
15:83:c7:22:3a:cb:70:e2:d3:92:3c:7b:51:1c:56:
a6:a0:7e:b2:24:9f:3a:cb:ef:c5:3c:c3:76:40:49:
a7:2a:54:6b:62:37:fe:82:cd:77:ce:2b:e7:80:92:
58:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:22:13:BF:8C:D1:24:1E:28:EA:9D:97:2F:27:54:15:82:46:05
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1d:21:e6:24:f1:19:bd:3a:16:14:99:31:ff:fd:f1:4d:65:
e1:7e:98:c5:5d:1e:4a:61:a8:13:4d:60:92:ae:4c:0f:ab:ec:
fe:74:f6:21:47:39:94:cc:c1:03:45:55:76:d0:ca:c8:73:98:
32:36:91:53:08:b3:4e:6d:ad:9d:e6:4c:d0:03:96:88:53:c7:
bb:0f:e6:3c:cd:93:fa:92:69:e5:64:51:1c:0e:ed:63:f3:9d:
1c:a2:87:43:a1:ca:ac:70:a0:84:9a:0f:f3:79:39:2b:bf:c6:
86:76:a6:16:0e:8a:30:4a:4e:d8:55:78:33:59:5b:76:83:0b:
f4:b7:ac:47:50:a7:7d:a5:b0:0f:9a:01:ab:04:fb:9f:eb:a6:
33:4a:9c:f9:cd:e4:12:9e:b0:83:ee:76:f9:44:25:b7:cb:b7:
8c:2b:8a:a5:c9:95:55:b3:61:49:ed:48:2c:bf:84:a6:14:1f:
1d:b2:69:21:c7:bc:c4:a6:9b:ea:18:b1:cd:45:18:0b:4f:74:
f4:71:fb:d6:c1:b8:f2:c8:d7:80:13:f0:3a:ab:40:82:92:e5:
93:4f:9a:39:a4:7c:45:59:2e:d6:c0:56:45:d3:68:ca:99:7c:
7d:e2:f2:6e:c2:c5:3f:6b:24:2f:50:81:39:ba:9f:45:c3:eb:
6a:9a:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:30:01 2026 by rpki-client