Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: PbmxpWs/Avk4AQfh1JcpifgEw/sukXELb6QCqnICM3Q=
Subject key identifier: D4:15:A3:39:BF:7C:86:10:C8:8F:2C:87:27:1C:5C:9A:4E:02:A4:4C
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019D265ECB1CA23F8A55331BB0F304C3C7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0AAF
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: RH3fQy7WDBZ8zIAqLkUL+O0weqi6UXgPDKy/JT0pQds=)
2: rdAuEK8upk6mx2gdhzDvAiBjkpA.roa (hash: neSutvd2UdygUv3ATr8lKmwONQiQv6cC5T84e4a3szg=)
3: ruR8f9AmtQvh0RBkYF7FPMTv6Dk.roa (hash: rCIjDYZ1f6UcDcYU9LBZzWo2gwww940GJ0hMkyxCy88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cb:1c:a2:3f:8a:55:33:1b:b0:f3:04:c3:c7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=d415a339bf7c8610c88f2c87271c5c9a4e02a44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:15:90:6f:3c:5a:35:3d:c1:9a:de:c5:af:
e2:8f:66:86:25:d1:12:cf:78:96:45:06:96:d8:ae:
22:fe:8e:ef:2d:20:e8:9d:cb:46:07:5e:9a:f1:fa:
e7:58:9f:37:84:c5:de:8d:2d:c9:47:c1:e9:b3:15:
9e:ce:63:98:d5:e8:5b:e1:55:57:b4:b9:1f:ac:32:
94:38:32:a7:f9:31:26:8f:ea:8e:0f:3b:c7:bd:eb:
5b:a3:ca:08:1a:25:35:15:f8:2d:59:f1:e8:28:1e:
ae:59:87:a7:82:8c:90:e0:1c:54:6f:7d:10:43:eb:
ff:f6:85:18:8c:e4:c4:e0:b0:9d:b1:f7:e5:3b:be:
d2:ef:c1:aa:e4:06:c8:02:11:25:71:11:70:df:93:
75:36:43:1b:9c:ee:f8:c5:13:c6:2e:63:39:70:30:
1d:ac:c2:12:67:95:b9:fe:7d:a2:e2:0f:2f:54:a9:
e5:71:8c:a8:0d:71:5f:ce:b4:12:b8:a5:41:e3:8a:
ec:76:66:95:f7:71:c2:dc:b0:8e:0d:a8:90:c0:37:
23:cd:ed:9e:1c:29:54:0e:89:07:cf:d0:d4:02:a3:
3a:60:0e:13:cf:e2:cc:ad:0e:30:ff:1b:f6:ae:73:
2e:85:46:f0:ce:c4:02:5f:f3:d0:39:25:43:20:76:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:A3:39:BF:7C:86:10:C8:8F:2C:87:27:1C:5C:9A:4E:02:A4:4C
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:77:d8:c2:48:1d:06:c6:9d:0a:b8:d3:d5:0d:b9:82:34:
db:3e:7d:c6:cd:7c:70:3e:16:72:06:58:39:a7:bd:f4:60:07:
d1:f1:d7:6e:c0:7d:db:74:66:fd:d2:36:f1:7a:78:8c:e4:1e:
42:ed:36:4b:95:7b:c1:90:ab:6f:99:65:49:9c:f0:4e:a3:af:
1b:05:8a:31:90:3e:3e:dd:7b:d9:ad:80:75:f8:9c:f1:dc:fc:
f6:b2:30:a1:3f:ac:4a:cd:eb:26:d1:67:45:b9:3a:e3:e7:e1:
d3:d0:1b:09:65:b5:40:d2:9b:ac:9c:e5:c7:a3:dc:dc:b0:94:
4d:dc:f9:89:04:c0:4f:b6:37:bf:fd:22:b2:8d:56:ad:37:9d:
c4:ba:7d:4a:b7:2d:5c:5f:06:d2:f7:90:ad:41:35:91:fa:db:
76:26:8b:4d:08:c5:2f:12:a0:d2:94:ac:55:fc:ad:73:7d:c3:
7b:a0:00:d8:9e:b6:d8:cb:8d:06:89:c7:2d:7f:de:66:65:89:
81:ca:28:16:ab:ce:b9:2e:eb:37:b8:dd:cb:56:17:46:cb:2e:
7e:85:82:55:2e:49:d8:7f:92:0b:c6:e9:c8:80:ba:4c:a6:10:
73:ff:4e:53:e4:cd:cc:f7:bc:ce:9e:fd:c3:22:bc:83:93:31:
c4:95:84:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXsscoj+KVTMbsPMEw8ehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4
ZTdlN2MwHhcNMjYwMzI1MTkwMDM5WhcNMjYwMzI2MTkwMDM5WjAzMTEwLwYDVQQD
EyhkNDE1YTMzOWJmN2M4NjEwYzg4ZjJjODcyNzFjNWM5YTRlMDJhNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfkVkG88WjU9wZrexa/ij2aGJdES
z3iWRQaW2K4i/o7vLSDonctGB16a8frnWJ83hMXejS3JR8HpsxWezmOY1ehb4VVX
tLkfrDKUODKn+TEmj+qODzvHvetbo8oIGiU1FfgtWfHoKB6uWYengoyQ4BxUb30Q
Q+v/9oUYjOTE4LCdsfflO77S78Gq5AbIAhElcRFw35N1NkMbnO74xRPGLmM5cDAd
rMISZ5W5/n2i4g8vVKnlcYyoDXFfzrQSuKVB44rsdmaV93HC3LCODaiQwDcjze2e
HClUDokHz9DUAqM6YA4Tz+LMrQ4w/xv2rnMuhUbwzsQCX/PQOSVDIHaebwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQVozm/fIYQyI8shyccXJpOAqRMMB8GA1UdIwQY
MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt
YWU0ZTY5ODY2NGYxLzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx
LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWd32MJI
HQbGnQq409UNuYI02z59xs18cD4WcgZYOae99GAH0fHXbsB923Rm/dI28Xp4jOQe
Qu02S5V7wZCrb5llSZzwTqOvGwWKMZA+Pt172a2Adfic8dz89rIwoT+sSs3rJtFn
Rbk64+fh09AbCWW1QNKbrJzlx6Pc3LCUTdz5iQTAT7Y3v/0iso1WrTedxLp9Srct
XF8G0veQrUE1kfrbdiaLTQjFLxKg0pSsVfytc33De6AA2J622MuNBonHLX/eZmWJ
gcooFqvOuS7rN7jdy1YXRssufoWCVS5J2H+SC8bpyIC6TKYQc/9OU+TNzPe8zp79
wyK8g5MxxJWEHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:22 2026 by rpki-client