Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: a0yew1Z/TxcI+I+WlkqgLBhQYjIg6iK/FL8ZkPo0lIY=
Subject key identifier: AB:CC:2E:0D:00:2D:98:25:00:83:D5:25:21:66:1D:C7:85:C5:57:D0
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 019CA97D4F6F8E0EA359B203018CFC903D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: DD
Signing time: Sun 01 Mar 2026 13:01:27 +0000
Manifest this update: Sun 01 Mar 2026 13:01:27 +0000
Manifest next update: Mon 02 Mar 2026 13:01:27 +0000
Files and hashes: 1: DMVSDn-EmFqLrxD1lOdBrIrCjoo.asa (hash: uFX9WQ/D1sH0tSqq9AtdYpe5K/buXv8+uWvNQsHXI2E=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: DDFXMi8Ce5pSwHp3s18h32igo0E2/xeXECK7QWiLJ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:4f:6f:8e:0e:a3:59:b2:03:01:8c:fc:90:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Mar 1 13:01:27 2026 GMT
Not After : Mar 2 13:01:27 2026 GMT
Subject: CN=abcc2e0d002d98250083d52521661dc785c557d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:58:99:d4:03:58:94:49:1e:d8:90:85:e9:
4a:28:89:19:4b:cf:76:c9:b7:ef:e6:3f:9a:7e:24:
d3:7e:14:1b:c7:8b:d9:1b:42:3f:5a:1c:5c:cc:df:
54:42:d5:68:3f:b9:fe:e4:f6:3c:ef:7a:1a:d9:2e:
4a:27:54:84:82:9a:17:4e:29:57:ea:5e:48:73:01:
d0:a1:28:cb:fd:21:db:fe:d8:66:34:99:d2:1c:f3:
c8:0b:f1:6f:66:0b:fa:ff:fd:fe:4f:52:f4:8d:a6:
1a:ad:5d:e1:91:c1:25:94:08:ee:04:8c:cd:52:c8:
7f:9e:f6:0f:ca:f3:e8:c4:38:91:9c:9f:f7:25:dd:
00:b8:b7:13:47:27:81:98:70:88:72:f3:23:17:14:
52:a6:e9:17:27:d9:0f:c9:3a:ee:ab:ec:62:0a:f2:
21:ec:9e:bc:04:1c:e6:d9:45:1d:94:79:1b:bd:c3:
a0:2c:11:bd:ef:08:9d:af:b5:3d:90:76:41:d6:02:
51:b2:af:a5:d5:7d:e2:75:db:c5:c1:08:57:1a:73:
79:bc:4c:92:e6:bb:69:b8:86:b0:22:c0:fa:9f:89:
d8:fe:39:ce:cd:71:bd:8a:70:6d:22:a1:52:42:7d:
b2:65:fb:67:5b:fa:b4:cf:03:85:f4:30:0d:13:55:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CC:2E:0D:00:2D:98:25:00:83:D5:25:21:66:1D:C7:85:C5:57:D0
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:26:13:9f:bd:c9:bc:c7:6d:9f:5b:54:99:b1:67:9f:8c:bf:
21:e2:09:48:ba:5d:01:8f:51:ba:f4:00:d2:ae:2f:54:78:10:
12:a8:1c:53:fb:54:d2:16:f3:78:62:5f:16:e7:68:ee:b9:23:
cf:64:35:15:11:21:ca:b9:ce:75:ac:52:39:6a:44:ab:5b:39:
2a:44:ad:3c:bc:bb:6f:e1:f7:8c:a2:63:77:df:aa:61:11:1c:
90:fc:d9:3e:a2:d4:eb:dd:70:5d:a9:5b:ad:1e:ef:b5:e7:cd:
83:de:7a:1e:c5:5c:a4:21:69:b6:f9:32:09:f9:61:dc:59:3e:
65:89:53:ce:05:19:43:b7:75:fd:88:06:5a:12:90:e9:56:de:
62:da:da:5a:4e:b1:da:5d:6c:46:a3:35:d8:fe:8d:48:57:a6:
a4:3f:62:11:41:cc:95:97:cb:64:35:2b:87:a1:86:bb:8b:cd:
0d:28:36:c8:a0:6b:f8:af:4f:dc:1d:08:21:ff:4e:d9:e5:26:
85:17:22:0a:0f:1f:b8:be:c5:fd:38:07:83:bc:46:7b:80:2f:
8a:71:9f:8a:bd:f4:4d:8c:36:08:02:cd:bf:78:29:5d:be:27:
a8:5a:db:0f:d6:68:f9:c5:ae:e8:71:d5:94:88:55:89:df:5c:
db:f5:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:57 2026 by rpki-client