Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: LYQv46npC53Lq5yeP2y1APUPwY8gA3FRQ0aS3W7G9bQ=
Subject key identifier: 79:68:97:60:5E:27:7D:A5:F2:AF:30:E7:10:9B:DB:AA:22:41:72:1B
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019E1D90710C495104729D40A030A6532977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0B2F
Signing time: Tue 12 May 2026 19:01:05 +0000
Manifest this update: Tue 12 May 2026 19:01:05 +0000
Manifest next update: Wed 13 May 2026 19:01:05 +0000
Files and hashes: 1: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: HrdTPuC2WvoaI5Ofv7c7stMAvOIem2VflTzth7rmoCc=)
2: rdAuEK8upk6mx2gdhzDvAiBjkpA.roa (hash: neSutvd2UdygUv3ATr8lKmwONQiQv6cC5T84e4a3szg=)
3: ruR8f9AmtQvh0RBkYF7FPMTv6Dk.roa (hash: rCIjDYZ1f6UcDcYU9LBZzWo2gwww940GJ0hMkyxCy88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:71:0c:49:51:04:72:9d:40:a0:30:a6:53:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: May 12 19:01:05 2026 GMT
Not After : May 13 19:01:05 2026 GMT
Subject: CN=796897605e277da5f2af30e7109bdbaa2241721b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:29:7f:f2:d8:32:83:5a:c4:eb:ab:3c:04:
f3:7a:66:f5:2b:c1:c4:0b:02:73:20:a2:df:a4:11:
97:7e:7c:82:3e:42:62:5a:ad:b9:29:9a:a4:81:7e:
8e:6e:8c:5e:a6:39:41:61:4a:86:dd:43:1a:64:76:
dc:e4:52:d8:f2:15:87:c3:98:c1:81:55:a0:7e:be:
3d:3d:dd:21:c9:bd:68:b6:15:36:ad:ea:02:19:5e:
15:99:17:9f:73:60:4e:2b:ba:92:2c:4f:34:f2:f8:
18:87:d4:42:36:78:7d:98:a6:de:ea:89:b8:0e:ed:
6e:9e:d9:e2:39:ec:ff:da:a8:6b:3a:7f:a1:16:56:
81:6b:6a:02:a3:2e:b6:cd:f0:92:ff:6d:2f:a8:ff:
dd:5a:9a:3f:2b:55:e0:a0:70:89:9d:5f:88:0d:8a:
0e:c5:94:e5:59:48:4a:a3:07:e9:d7:58:9f:3c:94:
ed:96:b0:a0:cd:65:ec:c5:6c:5b:6d:5e:f9:dd:9a:
23:5b:ae:5c:ef:d8:dc:15:45:ad:31:73:09:b8:06:
8c:74:d4:50:7e:c0:87:37:b9:33:85:79:0d:3b:6b:
2a:b8:95:2a:d6:f1:49:9d:3d:c6:b6:6b:11:16:31:
f2:16:3d:a6:24:c8:10:0a:44:d4:c9:0e:88:6c:ae:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:97:60:5E:27:7D:A5:F2:AF:30:E7:10:9B:DB:AA:22:41:72:1B
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:2d:e6:05:b1:7d:22:8a:56:d1:ba:6f:12:40:b7:8c:05:
06:24:64:23:0a:1e:a8:16:36:4c:ba:2d:93:99:54:1e:c6:9c:
c8:d2:4d:44:25:8b:57:19:58:d6:d3:89:39:da:af:e3:59:1d:
77:a3:da:30:1d:41:5f:b2:56:1b:7b:b1:9f:a3:7a:16:05:ba:
c1:ad:d0:8c:45:58:5b:4e:4e:36:92:29:6b:23:38:95:ac:1c:
40:54:97:57:78:47:11:aa:3c:4e:be:8c:cf:8f:b4:52:83:31:
7f:35:29:7e:a3:92:a8:bd:f7:88:25:46:5c:c4:0a:a8:c5:a4:
11:a0:1e:c2:0e:29:06:f6:95:dc:a4:88:55:f3:9e:17:c8:dd:
5a:7c:9d:9d:1c:6f:4f:37:1a:8a:4a:ee:43:48:fb:05:dc:20:
7a:6a:9e:72:59:72:4a:68:b0:6f:03:2f:68:93:0d:24:1d:b6:
16:45:82:a2:46:cd:f3:5a:0a:89:27:38:a3:a0:99:90:72:30:
ae:c0:bc:eb:69:87:72:03:47:f0:fc:80:17:1c:94:ac:9d:0a:
1c:04:81:ba:f5:52:e6:12:36:a6:06:95:f4:ae:1f:7e:18:94:
55:74:72:b3:f0:07:bf:70:e3:2b:e3:32:b6:c7:95:83:a8:c5:
29:77:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:35:31 2026 by rpki-client