Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: cG1k7JeDplf12+xfJFFTR66SkQu3XwaRudLCSshCg54=
Subject key identifier: 74:6F:E8:71:4A:39:A3:5D:59:4F:6C:2A:9D:BD:8E:1E:44:F2:42:8F
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 019D284E808E9C2ABF6B20F1B5FBDD42EE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0E96
Signing time: Thu 26 Mar 2026 04:02:06 +0000
Manifest this update: Thu 26 Mar 2026 04:02:06 +0000
Manifest next update: Fri 27 Mar 2026 04:02:06 +0000
Files and hashes: 1: ATXg03GR8zoML1xy7L80ZPtMT8M.roa (hash: nheIXMj5AVfyPJ0H/Ys4b1d8hSHkVKCMyhmzU1gBfCw=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: 3sOol2QsFsr+eCPvVH62pztMke3yqvHOJYIRJSLAC4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:80:8e:9c:2a:bf:6b:20:f1:b5:fb:dd:42:ee:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: Mar 26 04:02:06 2026 GMT
Not After : Mar 27 04:02:06 2026 GMT
Subject: CN=746fe8714a39a35d594f6c2a9dbd8e1e44f2428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:e2:42:36:77:da:2f:c8:88:76:06:f4:cc:
8d:87:a2:89:d1:02:9b:c4:db:11:b7:67:bd:b1:eb:
59:26:dd:94:6a:c6:1d:4c:b0:fd:a1:d6:4a:9b:fb:
cf:c6:29:e3:32:e1:ea:ad:7c:0b:b0:54:33:ac:fc:
b6:ec:7d:47:72:83:db:69:56:20:14:4c:11:48:62:
b0:52:91:92:1e:8c:7a:a2:c1:36:2a:af:75:aa:db:
aa:64:88:07:26:fa:5f:f6:8a:69:2b:84:f5:ba:3f:
2f:51:86:57:d5:23:85:23:45:5a:d8:f1:db:ee:7a:
a0:23:d0:06:b9:30:83:f5:c1:69:2f:4f:10:d3:9c:
d3:50:3e:59:c7:b0:2f:33:ff:73:e1:5f:99:a8:19:
71:8e:d7:1b:4c:8f:36:56:ce:27:49:1a:5d:33:2b:
67:a8:75:e8:cb:91:d7:ac:a1:9b:f2:5f:18:96:7c:
46:bd:f2:c9:7e:2a:86:47:37:c7:28:6a:5d:95:0f:
e7:45:7f:87:03:18:4e:37:bb:16:70:74:60:2b:1e:
21:a9:27:75:9d:be:a7:a1:8a:21:5c:a5:0d:ed:b2:
ae:e9:1d:5c:ec:87:cf:9b:84:74:00:72:c7:81:2d:
a2:c7:ff:0b:81:d7:97:0e:9c:f3:82:ca:33:24:a4:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:E8:71:4A:39:A3:5D:59:4F:6C:2A:9D:BD:8E:1E:44:F2:42:8F
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:f8:45:37:e0:56:d5:5a:57:61:24:3a:f0:96:2b:19:19:
01:11:07:03:6e:e5:3f:4e:3e:16:78:4d:d5:0a:ab:4c:9f:9a:
c4:7f:74:38:e7:d8:77:d7:1d:56:5f:40:c5:08:aa:62:66:cc:
a4:4a:05:da:f5:42:88:7a:be:e6:b4:d1:26:ea:f2:b8:33:e6:
e5:47:a3:38:5f:65:f2:36:8d:0c:46:ae:f2:ba:d0:1d:18:94:
e6:a3:b7:20:d4:69:2f:bf:49:c9:a6:8b:fe:6e:18:fe:25:d8:
0d:38:81:e5:f1:b9:4a:84:75:45:8a:46:46:7b:53:20:15:e2:
21:83:b9:c7:4b:b4:6b:2b:d7:60:1d:4e:fe:9d:2f:a6:cb:b5:
ae:af:c4:31:7d:d8:16:7a:37:de:a4:5f:05:07:bd:56:2d:64:
b2:04:5e:c1:5b:9d:4b:04:07:b6:81:7a:ef:b8:2f:e1:fe:f7:
1f:0b:45:57:e1:bd:44:25:72:85:32:f5:b3:2e:33:36:af:11:
8a:cc:d0:37:1e:89:3a:c5:29:46:a5:90:b6:e5:03:2e:14:ef:
cf:f1:4e:d2:b5:15:9e:57:96:bf:1a:e9:b3:97:82:b2:9f:06:
55:f6:7b:2f:2b:a6:53:90:b3:55:dc:1f:b2:69:a4:83:bc:72:
57:aa:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:16 2026 by rpki-client