Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: 3HnmAhaghmTda1+htvDg8/QFe8V2ci72Wjew4lhXd74=
Subject key identifier: 18:AD:2D:94:E2:FB:79:E2:15:A6:08:AF:ED:EC:8D:E9:63:D6:B2:B2
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 019CAD596F807A7D59551A356A1FA9D928D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 0871
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: ngnw74azrhwyxiV29PKbsYo3DM1IDDWYIJeSV1MX7/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:6f:80:7a:7d:59:55:1a:35:6a:1f:a9:d9:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=18ad2d94e2fb79e215a608afedec8de963d6b2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:7f:5a:f0:72:2c:b2:04:5d:c1:03:91:11:
42:bf:2d:c6:0d:6a:a2:4b:94:81:93:cc:8b:8c:28:
86:f2:f6:e0:ad:cd:4e:b4:ed:c0:a8:9d:09:e1:50:
32:31:c6:fb:e9:3e:aa:1a:8e:9a:75:0f:ae:51:8f:
72:8c:6d:4a:37:07:51:2b:c0:c3:d8:ea:fd:4b:6b:
00:ee:d6:65:09:74:8d:4d:dd:1b:b9:7f:25:1e:2a:
bf:b6:3f:9b:e0:cd:01:c4:c9:be:0f:7d:a4:d4:96:
a5:71:d3:60:8e:18:a3:38:94:2b:eb:f4:65:2e:65:
06:cc:41:d5:a3:ed:c7:88:70:24:11:71:d7:ea:67:
7c:ee:88:91:91:2d:76:16:84:80:a9:6e:f9:cb:c9:
a5:31:04:d0:ed:75:07:fe:2d:39:e3:5b:44:b0:cc:
ad:a3:bc:45:be:dd:d6:6d:37:aa:da:2c:76:79:73:
85:7c:c2:83:15:0e:74:3a:73:66:54:52:c0:82:dd:
38:04:ff:cf:d5:d7:57:05:9e:9a:db:4a:06:f4:e7:
9c:0a:65:b9:5c:ad:e1:b6:b4:98:c6:2c:6b:62:4d:
00:e0:22:53:12:1f:b0:a3:e9:3b:6d:d5:f7:b4:05:
3c:49:a9:05:b1:0f:08:22:64:91:d2:02:79:39:ae:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:2D:94:E2:FB:79:E2:15:A6:08:AF:ED:EC:8D:E9:63:D6:B2:B2
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:df:f0:4b:74:c1:e2:54:38:40:2f:cb:e9:d0:5b:2b:e5:ab:
ee:54:7f:2d:f5:15:7a:09:a6:94:97:06:85:93:61:d5:7c:cb:
20:f7:85:48:58:ce:04:80:92:c9:bb:94:97:0c:ab:7b:d8:3e:
b1:8f:b5:bc:d9:99:c4:bd:36:57:91:bc:74:da:6b:4d:80:6c:
0d:a0:20:ae:2e:0d:31:f7:57:48:2a:e0:10:98:4c:bf:94:1b:
05:bc:df:89:19:88:24:00:e6:62:3d:a0:ab:ef:42:69:87:51:
1d:cb:7a:d2:7e:37:02:5e:3b:04:5e:b9:10:4d:b5:55:c9:40:
5d:a2:e2:72:43:31:4b:c0:dd:38:f7:f7:42:be:29:90:a4:14:
00:29:52:af:24:62:93:19:d1:f8:a5:da:34:cd:34:e3:76:07:
1a:94:62:12:9e:db:fe:46:ea:a1:48:32:fc:fc:79:8d:a9:4d:
9a:18:41:69:98:6a:8a:09:d4:43:4f:62:6b:4a:8b:19:d3:bd:
56:31:de:7d:55:f9:3c:a5:02:95:20:5e:a6:75:c5:70:5b:62:
80:fa:f3:9b:3d:b7:77:ae:22:45:bf:6d:dd:d5:97:2c:bd:ff:
4e:69:bd:5f:8b:0e:a5:73:4d:2d:be:77:c2:9a:a2:7f:44:54:
83:3f:99:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:36 2026 by rpki-client