Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: yeyazTriBohZX6vWR8R3WG/wBgbNLkjGhxy83wsT9KY=
Subject key identifier: B5:A3:2E:2C:5D:5D:63:D6:01:DF:25:B3:3F:9D:B0:B6:DF:26:85:BB
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 019D9AE37AE92C6D9B8110DD9DBB3FD973F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 08EC
Signing time: Fri 17 Apr 2026 10:01:32 +0000
Manifest this update: Fri 17 Apr 2026 10:01:32 +0000
Manifest next update: Sat 18 Apr 2026 10:01:32 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: olojGrHu/HKleCNc0FMUtSLPEtCgxqXdrscr6c91rZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:7a:e9:2c:6d:9b:81:10:dd:9d:bb:3f:d9:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: Apr 17 10:01:32 2026 GMT
Not After : Apr 18 10:01:32 2026 GMT
Subject: CN=b5a32e2c5d5d63d601df25b33f9db0b6df2685bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:32:13:44:31:8b:25:00:65:7b:6f:dc:bc:
76:80:82:ee:24:45:7c:59:ed:84:d7:ad:87:1a:48:
d5:55:75:d2:16:4c:88:ab:66:f3:1c:9b:ac:58:e6:
61:17:0e:b4:c2:0d:25:0e:e6:0c:3b:2b:6e:2d:41:
57:2b:a6:59:75:48:8d:f4:d0:b6:1f:99:b1:75:56:
d8:66:ad:3a:54:de:7f:2b:ef:0f:48:22:95:e5:08:
2a:db:8b:85:da:b8:79:36:21:eb:28:6f:d6:10:e3:
8c:e6:ac:09:ae:ac:c9:46:47:87:c6:41:68:55:d7:
88:78:56:0f:1b:1b:c7:ee:d9:41:23:42:44:67:da:
ab:e3:5f:67:e8:cb:0e:5e:eb:0d:67:a5:f2:15:99:
af:09:11:02:9c:9b:22:be:9c:ec:b0:68:57:9a:07:
6b:99:4c:7d:cf:ad:f6:a7:95:ac:7e:2b:da:9e:af:
49:ac:18:ef:67:65:cc:a4:68:eb:c1:e1:1a:02:1f:
10:0b:2f:ff:d3:63:81:18:77:dd:42:cc:cd:4c:91:
85:9c:28:32:90:e9:5c:76:43:65:94:2b:a7:a6:10:
8c:73:37:69:d7:53:38:c4:2f:f4:95:12:d9:31:31:
78:64:61:14:30:81:b1:ea:ce:fb:56:83:21:8d:69:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:2E:2C:5D:5D:63:D6:01:DF:25:B3:3F:9D:B0:B6:DF:26:85:BB
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2d:46:19:f8:f2:86:32:75:96:2e:9d:c2:91:b7:b0:f1:f3:
64:c5:79:29:76:4e:ef:3e:07:3a:0d:c5:71:15:14:f6:c6:83:
60:fc:1d:a3:e8:29:39:55:ec:95:8c:23:56:99:64:41:f1:53:
1a:68:8b:ec:7a:32:8a:e3:26:bb:5e:1b:e4:4d:ab:64:2a:32:
9d:16:5a:0b:87:cb:f3:bc:77:2b:d5:c4:f8:22:89:f9:f8:9a:
00:fd:ee:60:ca:dc:d4:a4:58:9a:dc:9d:58:4c:cd:a2:b2:98:
6a:46:f1:e7:66:e5:49:26:d3:8e:30:e7:1c:b5:c2:e9:cd:44:
44:14:f8:33:60:37:b6:83:f6:d4:ba:31:ee:a1:9b:cd:e0:4b:
2e:42:00:2c:3d:48:f1:30:3f:78:49:06:48:e6:30:50:6c:47:
d9:1a:8f:54:33:a7:47:99:fe:a3:b4:b2:12:6f:ce:f0:ca:b8:
12:dd:ea:e9:c0:db:f2:fc:f3:11:55:88:97:79:8a:da:97:c9:
15:77:39:93:09:5e:0d:7a:6f:4c:b9:aa:63:af:dc:b3:04:ec:
eb:a2:e7:42:c5:13:d5:85:e9:5c:94:23:65:a2:32:82:25:2d:
e6:08:e7:42:de:bd:2e:e4:48:fb:50:7d:e4:a1:de:37:da:9c:
53:38:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:44 2026 by rpki-client