Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: kD+RMDaidj2up3pZR3NmNcAsU/cQYxQaftA+uXdVaNk=
Subject key identifier: 83:6B:A2:93:3D:52:AB:30:CD:43:7D:50:38:0F:87:2B:2A:61:C9:D2
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 019CAB6AF4FF0398AC6E257D1763B80A8C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: K646U+bkzqMDsLjunseBA1BeQcq1A/VAWSFYBaC+XzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f4:ff:03:98:ac:6e:25:7d:17:63:b8:0a:8c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=836ba2933d52ab30cd437d50380f872b2a61c9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:77:bb:27:cb:91:26:3d:49:27:6e:8f:87:
6a:a4:c2:1b:df:68:23:c7:e8:5c:ca:75:75:1b:4a:
fd:71:8a:2c:01:3a:46:0b:c9:24:1d:14:0b:b1:30:
9a:9b:42:f5:a4:0e:12:33:fb:44:c0:a2:f0:1e:fb:
86:f4:3f:cd:f5:1f:60:17:44:da:00:fd:23:7f:39:
94:44:56:d5:d2:d4:5b:9c:e6:e9:83:0d:82:66:3c:
5d:ca:66:91:76:fb:e0:e7:d3:cd:94:ef:3d:0f:e3:
9d:41:92:3d:e9:75:3f:7b:43:d6:42:94:8c:fe:c7:
60:df:45:20:0d:c7:f2:b4:05:36:94:70:75:02:ca:
b6:fe:3b:96:cc:e8:0e:3b:f1:f8:ce:bf:5a:db:9d:
91:06:94:d0:07:3c:08:64:34:1f:99:d3:6d:22:90:
ff:46:76:f9:61:ce:a9:bd:ed:00:d6:62:37:cf:1d:
14:b7:95:21:45:6a:6d:be:14:04:f5:1f:21:ce:51:
6b:ee:4e:ce:22:90:91:71:9f:91:17:cc:08:b4:15:
c8:39:8b:7b:ae:79:e2:2a:4b:78:95:a8:fc:90:bd:
f1:23:46:18:b0:81:13:58:c8:f5:03:b8:c2:59:ca:
1d:e4:cb:27:a0:b8:49:fa:40:4d:87:17:98:de:29:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:A2:93:3D:52:AB:30:CD:43:7D:50:38:0F:87:2B:2A:61:C9:D2
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:aa:80:e7:1e:c2:19:f3:93:ad:4a:d0:bd:4d:cb:4e:a5:94:
64:5e:51:14:bf:36:1d:21:9e:eb:d3:8d:70:e4:7b:8a:0c:4d:
fe:ee:3a:79:ec:85:6e:93:44:97:1c:4f:00:ff:16:44:a4:2e:
d1:5a:9b:4d:b5:3d:e5:79:66:c6:fe:31:ac:7c:ed:14:bb:ae:
2e:2b:7f:18:71:84:9c:4c:e8:01:53:4d:b9:c7:f8:2f:70:32:
c3:a6:25:37:a8:da:88:7c:2f:be:4d:ad:4d:5d:6c:44:09:69:
1c:30:a3:04:8f:0a:05:b3:24:4f:5b:d9:78:57:c0:6c:08:e1:
92:db:80:cf:c1:2b:c7:d0:a6:d7:49:7f:f1:56:39:52:b4:2b:
93:2f:c0:f0:2b:d9:f2:43:31:04:8e:81:01:69:8c:5f:5f:a1:
c3:ba:14:b2:1b:f3:d1:f7:68:ce:53:a1:e0:b2:20:75:f4:97:
66:77:8c:26:00:21:67:60:27:c9:ed:4b:88:4d:b6:d8:7f:8f:
f4:70:cb:75:f6:15:dc:40:7d:05:36:0a:22:e0:1b:44:f6:42:
1e:6b:2b:50:74:a4:8b:7d:c7:a2:bc:2b:2a:2f:12:4f:4e:30:
fa:2d:a2:fb:0d:e3:71:97:1f:56:a0:ab:4f:4d:51:c9:7d:67:
3f:32:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:27 2026 by rpki-client