Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: cmwN8hHk7IwbLBLSYe5D0A2nX/NV78oZQ8TkoOThnBw=
Subject key identifier: D7:3A:DB:99:05:C0:EF:FC:8B:C8:BB:2A:74:91:4B:BF:C6:CA:4A:4A
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019CB091B7F5789ACDC2E2F7F93A56D2CF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 026C
Signing time: Mon 02 Mar 2026 22:01:05 +0000
Manifest this update: Mon 02 Mar 2026 22:01:05 +0000
Manifest next update: Tue 03 Mar 2026 22:01:05 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: 9lb8RmlIys/nOIOG7D02jFxaZZOoO/okxcArPTpWKuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:b7:f5:78:9a:cd:c2:e2:f7:f9:3a:56:d2:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Mar 2 22:01:05 2026 GMT
Not After : Mar 3 22:01:05 2026 GMT
Subject: CN=d73adb9905c0effc8bc8bb2a74914bbfc6ca4a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:eb:18:6d:9f:7d:de:88:36:24:6b:c8:a3:
69:8e:29:38:45:35:23:b2:02:ad:c2:c2:ca:66:22:
10:71:f7:f8:6d:07:80:7c:19:45:b7:18:f3:e2:16:
de:0c:22:2e:5f:dc:a8:74:3e:06:4f:9c:c0:cb:a1:
29:76:ff:05:22:f2:1a:b9:1c:08:30:4e:7e:2e:cc:
d7:e2:9e:de:02:eb:b7:53:7c:fd:a8:6c:c4:4f:22:
cf:f0:2a:2c:2d:dc:bc:48:a9:a2:a3:7e:10:60:b0:
f9:f5:c4:e3:08:a5:a7:a0:be:4c:d3:f7:23:b2:45:
c1:3d:62:53:df:da:3f:f8:58:35:ab:1c:92:05:a5:
e3:0a:7d:c8:91:42:7e:8e:16:3a:d8:38:48:f3:6b:
ff:1f:e1:ea:ee:2b:62:f9:80:1f:c5:f8:bb:0b:c6:
5a:09:9d:e4:43:44:a8:a9:d9:9a:fa:86:33:fc:60:
2c:1c:d6:8d:64:a9:e7:dd:09:ed:89:9d:b7:a1:01:
35:ca:59:cf:01:67:0f:cb:10:5a:4d:ec:3c:3b:a0:
48:63:bc:02:de:27:72:ee:0a:1b:ed:01:f2:b9:57:
4c:48:08:dc:a3:bf:5b:75:75:58:40:4e:17:56:af:
03:63:fa:2b:a3:17:54:97:5e:af:bc:23:07:dc:58:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3A:DB:99:05:C0:EF:FC:8B:C8:BB:2A:74:91:4B:BF:C6:CA:4A:4A
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:b5:5d:a1:a4:9a:e6:e5:39:48:11:01:27:88:ab:ac:ea:
b1:40:91:57:0b:08:3d:6b:76:23:95:11:e6:d7:34:d3:85:0d:
0f:d3:75:67:6b:ba:c9:75:7c:b3:bc:11:54:6f:d2:88:b7:68:
97:4f:ea:5b:52:fd:37:11:c2:64:24:b3:aa:8a:70:5d:8f:50:
37:66:d0:b7:ec:e5:46:5d:3d:d8:f8:fd:e6:b8:25:8e:45:2b:
82:34:f5:a2:14:35:58:35:e1:25:5e:5e:d2:87:6e:41:8b:91:
23:18:b9:96:9d:33:6b:b7:75:4d:58:0b:10:5a:95:aa:54:bf:
c6:cd:27:8f:c6:e2:74:36:0e:aa:6b:79:ee:ef:dd:94:6e:dc:
7e:57:86:02:89:11:aa:bd:a1:74:e3:49:cb:2a:02:0c:5b:59:
45:04:2e:f9:c9:95:17:fb:08:b6:52:ce:9f:fd:e9:d0:48:55:
ad:5c:a1:77:01:5e:a6:f8:3d:59:5d:a2:b6:ac:ba:2b:94:f7:
89:d9:cd:1b:71:b4:30:15:c0:58:4e:eb:86:f1:c7:9b:ee:1a:
ad:bc:d1:cd:31:dd:4c:c5:9a:c0:f3:29:30:42:93:d0:a3:a0:
22:be:8b:e4:bf:d7:d8:3e:48:07:91:79:70:fc:39:c8:ae:5b:
ec:06:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:33:40 2026 by rpki-client