Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: pZgklN+v+pXPDNhagwm7XuldIAIdL/RUWSGiyqnjxPU=
Subject key identifier: DB:FE:3A:B9:1D:00:2F:05:52:74:4E:4F:59:A4:6D:66:B9:EA:FE:B5
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 019D9AE2D6ADA10FF2186985A3289818C7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: 015B
Signing time: Fri 17 Apr 2026 10:00:50 +0000
Manifest this update: Fri 17 Apr 2026 10:00:50 +0000
Manifest next update: Sat 18 Apr 2026 10:00:50 +0000
Files and hashes: 1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: 6XpFLeCMyzWVtzFEUbX9tW39PDiatj5DNSMGsvXq5ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d6:ad:a1:0f:f2:18:69:85:a3:28:98:18:c7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Apr 17 10:00:50 2026 GMT
Not After : Apr 18 10:00:50 2026 GMT
Subject: CN=dbfe3ab91d002f0552744e4f59a46d66b9eafeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:ce:fb:80:32:fc:20:1d:e1:22:62:a1:2d:
a8:e1:f6:c7:5b:4c:58:aa:1d:14:83:3d:27:3f:ba:
e4:1b:69:12:e7:a7:1a:ce:b2:e2:19:9f:07:e6:18:
89:2c:36:1f:75:46:20:7f:20:76:9a:12:0f:02:c7:
7e:da:f7:6e:5b:28:08:99:4a:b1:68:b3:ed:a8:8e:
05:e9:3d:d4:a7:74:f9:c7:03:b0:28:af:e8:b2:63:
e1:c4:26:d8:3d:b6:c1:d8:88:81:39:1f:9d:eb:ba:
4c:c6:fc:1f:2e:98:b9:b5:6b:eb:ea:cb:9c:b8:bf:
5d:8e:29:1e:ee:cb:ba:a4:01:57:03:1b:dd:a3:89:
7d:91:7f:89:a1:06:67:a2:05:f8:a1:a3:75:52:b2:
1a:db:a1:f8:01:3c:c9:b2:ba:3e:04:e1:a0:75:7b:
bd:d3:c9:38:f5:e9:eb:68:96:e6:fb:a5:b7:a7:2c:
a1:b8:a8:7c:26:0b:4f:85:5e:1a:69:f3:e8:55:98:
5c:2a:93:0f:b2:99:2b:9a:b1:3d:a5:4d:18:5a:fd:
66:26:9c:95:4d:54:c8:79:46:54:52:66:9d:3c:34:
c2:51:b2:39:50:3d:c6:a5:4c:58:25:bd:66:88:81:
e6:e7:3a:c7:94:f3:a7:6d:51:f9:14:19:58:4d:2e:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:3A:B9:1D:00:2F:05:52:74:4E:4F:59:A4:6D:66:B9:EA:FE:B5
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:d0:f2:bb:a1:e8:49:24:95:d0:b8:24:78:fe:11:d3:5a:
2b:59:35:ed:2b:74:65:47:cf:44:bf:79:2f:01:0b:58:b0:d7:
3b:71:0e:93:23:91:cf:0a:e3:9b:83:09:e3:31:a8:21:ca:fd:
a5:93:84:0f:c4:a2:d6:fa:cc:6e:60:b5:f1:55:61:2e:27:b9:
5d:8b:f6:43:f8:a8:ca:5d:eb:c0:86:25:e5:0d:5c:b8:5b:16:
9e:d6:3f:94:3f:f4:08:cd:50:d9:5a:60:ff:4c:8a:97:82:9f:
7c:41:52:2c:6c:a2:05:13:13:68:3a:d4:a9:e5:9b:d4:5a:1e:
5f:8a:95:2d:32:65:b4:02:84:14:64:6e:19:53:fd:58:f1:99:
af:8d:21:f5:b7:ad:6e:56:3c:c4:91:df:7b:82:fb:36:fb:5b:
bf:4a:49:8b:47:05:67:8f:99:08:a0:02:72:60:be:af:82:97:
8a:80:47:20:97:72:5e:47:a6:a3:f2:59:98:b1:c6:3c:44:a6:
12:8f:6a:a2:a9:9d:de:ff:08:7b:66:de:8d:ba:7b:32:21:ed:
8b:57:eb:04:f4:da:b5:c9:86:78:e0:c2:06:58:46:88:16:5d:
85:a3:a4:ca:92:08:65:73:17:23:78:5a:72:9b:ec:8b:86:1e:
38:5a:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:01 2026 by rpki-client