Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: /e20Yj7/QFrP1Sn1UYvcfXxFK01zSEgDKzoaqzbv7jM=
Subject key identifier: 3B:46:AC:6A:53:48:A9:9D:73:31:4E:20:F9:41:23:C0:4F:07:44:7A
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019F93FFA51732A247DF0CFB0ACA3AD1DE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0BF2
Signing time: Fri 24 Jul 2026 12:00:32 +0000
Manifest this update: Fri 24 Jul 2026 12:00:32 +0000
Manifest next update: Sat 25 Jul 2026 12:00:32 +0000
Files and hashes: 1: MlJBYbax3t58n6UyQAjgc7I1pFo.roa (hash: e3iDQ3FYINgIQmMaeKUDVugt5cK6QeLA+QYPHV3bv/I=)
2: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: Hi6wGn3l9cktApnRXh7KwK+474eGxnv5i8KbRHT49wE=)
3: rdAuEK8upk6mx2gdhzDvAiBjkpA.roa (hash: neSutvd2UdygUv3ATr8lKmwONQiQv6cC5T84e4a3szg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a5:17:32:a2:47:df:0c:fb:0a:ca:3a:d1:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jul 24 12:00:32 2026 GMT
Not After : Jul 25 12:00:32 2026 GMT
Subject: CN=3b46ac6a5348a99d73314e20f94123c04f07447a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:10:ff:9c:c5:ee:58:ab:f4:88:1f:6e:f7:
06:a5:cf:03:b0:10:c2:1d:72:cc:72:dd:78:86:ea:
c5:21:b9:88:89:6c:c8:79:3b:12:f5:65:12:d5:1e:
2a:74:27:b9:6b:96:8e:0e:f3:2f:9e:ce:9e:2e:e3:
2e:55:27:f0:61:a4:e2:f4:24:9c:80:b3:a0:c1:64:
54:12:f6:cb:2b:c3:8d:1d:3c:46:18:a3:e8:7b:03:
c9:c3:c8:70:3d:06:db:ad:47:1e:75:fb:13:9c:e9:
b2:1d:64:69:fd:02:62:4e:32:c6:65:c1:ca:da:1a:
17:45:21:96:8e:cb:cd:13:bc:c8:7f:c1:41:de:3d:
ff:cb:c7:d6:de:3f:c5:f3:ae:d2:6b:67:b8:40:9b:
be:93:ca:7c:22:01:9c:81:04:32:b6:36:d0:23:43:
d3:77:3e:26:0a:16:54:c3:6c:b8:1b:c6:e7:a9:01:
d6:44:6a:61:61:19:b9:95:d8:f8:74:4e:29:dc:70:
91:8c:b4:68:74:70:3c:a1:e3:e1:63:16:00:36:94:
06:1e:0c:67:6f:82:20:5b:4d:3a:f6:d0:19:1b:4b:
4e:a8:82:5c:1f:77:b7:ac:71:73:62:37:35:4a:f4:
7d:04:33:dd:36:d8:4c:64:18:eb:d1:3d:16:4d:47:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:AC:6A:53:48:A9:9D:73:31:4E:20:F9:41:23:C0:4F:07:44:7A
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f9:79:50:8e:3e:90:d3:f5:73:c1:d3:86:16:06:81:24:2f:
13:22:4f:43:36:b4:04:5a:99:aa:32:cb:7a:63:58:01:d7:98:
ed:6d:e8:6a:78:9d:02:76:5d:08:bd:23:f8:fb:90:57:2e:d4:
4a:d9:69:57:06:e4:31:1b:83:bc:ab:2d:6d:a4:9d:26:34:e1:
6e:d5:22:24:12:ec:f5:30:03:7a:5b:44:12:1c:e9:49:9b:2a:
f7:a5:c5:cc:49:e9:c3:9d:5a:b1:eb:8e:e1:4d:11:fb:e7:11:
9f:42:55:f0:c2:06:b5:fe:f8:87:f5:35:09:26:f9:40:c0:ef:
52:62:ba:61:52:f6:d7:f5:38:cb:e8:aa:ce:9b:0d:54:f6:a7:
97:1c:46:bd:1b:2e:17:d1:61:63:87:1f:f2:d1:28:61:58:b0:
48:7b:42:81:06:e0:39:13:6e:5c:8f:8e:83:3d:6f:d2:1f:46:
7c:f2:82:21:d1:21:07:9e:5c:69:d4:50:f2:1d:c4:60:e4:70:
37:8f:d3:46:29:a3:de:a6:a8:cf:24:77:9b:f9:8d:98:d4:75:
f3:48:1d:ac:7c:cd:9a:55:c6:93:2d:dd:d2:5f:04:29:c0:f4:
63:b6:5b:2c:b1:6b:d5:22:e3:92:a0:5c:85:45:3e:17:1f:de:
d2:80:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:51 2026 by rpki-client