Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: +ZDKUz2Qypxk7SgA3IPuFL1bHJT66n7KNgkV/d85ZLE=
Subject key identifier: D1:1E:0E:14:D4:17:30:EC:D9:5E:60:5F:20:EE:DA:D9:39:0E:37:D3
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019D9E1B6C8A1227498670E2CA760C773846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 02E7
Signing time: Sat 18 Apr 2026 01:01:30 +0000
Manifest this update: Sat 18 Apr 2026 01:01:30 +0000
Manifest next update: Sun 19 Apr 2026 01:01:30 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: c16b9245zozdgt7HLO43MLykaLys0A2jUawp1j7GPwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:6c:8a:12:27:49:86:70:e2:ca:76:0c:77:38:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Apr 18 01:01:30 2026 GMT
Not After : Apr 19 01:01:30 2026 GMT
Subject: CN=d11e0e14d41730ecd95e605f20eedad9390e37d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:4f:7d:d4:00:4c:76:19:45:06:f8:fa:2b:
28:c9:24:9f:bf:16:b2:50:39:02:dd:44:9e:1f:4a:
ea:1c:7e:3c:89:a2:96:78:2b:32:ba:89:8b:3c:f6:
a6:ac:ea:4e:87:dc:ab:7a:02:a0:a8:b6:89:ab:ce:
32:46:1e:b3:54:9c:0d:47:5d:0a:93:48:e6:43:a5:
2b:43:f6:5c:96:71:f9:91:ac:a6:fc:91:f9:f5:65:
02:92:bc:77:e0:0c:30:54:cd:cc:ca:41:c4:70:e8:
01:db:92:e6:76:1a:7d:2f:bd:8f:64:59:74:cd:b1:
a1:74:79:11:db:21:4b:3b:e3:a1:8f:e4:a7:5a:06:
7d:35:8d:78:d5:13:7c:75:ff:fb:e9:be:64:03:34:
a1:d9:be:5a:24:8a:24:c7:c0:8c:34:5f:d4:ca:97:
a7:ad:e2:8a:a2:62:46:3a:88:19:bb:da:95:8f:4f:
2b:3d:5d:6b:8f:05:c8:86:ec:9c:a8:b2:48:45:2b:
f3:d6:47:9e:55:f3:36:d0:67:ee:40:7d:d5:09:0b:
fb:c9:d2:04:4d:0b:f2:e9:38:7c:1c:6b:8a:31:dc:
78:a9:7f:47:22:fe:9c:1d:12:5a:ba:53:1c:1f:cc:
d1:c0:47:e1:5a:c5:87:1d:f8:87:d7:63:09:c5:f5:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:0E:14:D4:17:30:EC:D9:5E:60:5F:20:EE:DA:D9:39:0E:37:D3
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b4:a0:b2:fd:eb:57:b0:8b:b2:24:5f:a0:74:68:9a:5e:0b:
ba:41:46:f5:81:1d:73:52:73:d9:7a:17:30:e8:86:88:71:39:
59:d7:82:29:c7:e9:78:44:04:44:5d:e1:92:ba:50:8f:c6:42:
fc:85:de:a7:aa:c0:d0:a6:cc:a6:d1:ef:b9:67:c2:0c:b0:ea:
5f:c5:29:80:4b:fb:4d:b6:9e:64:2e:a1:b3:bd:1b:1a:08:24:
c0:eb:a2:b8:df:7f:00:6e:7d:95:b3:a8:8f:70:2b:23:4f:38:
34:2e:6f:f8:36:b7:40:86:32:d6:58:b4:71:df:0a:78:24:2e:
a7:be:45:3a:f8:e3:36:d5:89:da:b4:a9:a7:a9:ef:cf:77:92:
65:76:f2:38:48:e8:c7:78:11:ea:e1:b3:a1:74:fd:94:da:3c:
30:0e:9c:8a:92:5d:4c:41:32:45:ef:44:7b:89:a8:b1:96:32:
73:07:19:93:49:f9:33:c1:3f:91:22:15:6e:f5:71:71:94:1c:
13:48:b1:62:09:66:f0:ea:0e:b2:71:dd:5f:21:3e:bf:d6:a3:
82:ba:1c:dd:f3:7e:5a:f3:c2:7a:60:7e:ca:0c:b9:d4:62:e0:
10:65:ce:29:08:c6:27:5f:45:37:ec:9c:33:9a:75:53:0c:cc:
ba:24:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:17:19 2026 by rpki-client