Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
File: pWGJNurjnydAQKDTMnz4gQLITG8.mft (raw, json)
Hash identifier: e+J/OdxI1Vc/bi1S62fPeUBHqYHoKi58/fAwbvdE83A=
Subject key identifier: C2:81:23:8C:DA:D6:D9:A4:A1:29:03:90:A8:F9:C4:E0:4F:FB:D7:61
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Certificate issuer: /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial: 019DA52F21450491D2022DC266D99B78AC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 10:00:22 +0000
Manifest this update: Sun 19 Apr 2026 10:00:22 +0000
Manifest next update: Mon 20 Apr 2026 10:00:22 +0000
Files and hashes: 1: pWGJNurjnydAQKDTMnz4gQLITG8.crl (hash: jQLjOAnnScxgI/tS7J0qNd1Lme7oaQYDHWJszOm9eIM=)
2: vc4rQV1btws3GoUjJ72MXPBLjsA.roa (hash: vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:21:45:04:91:d2:02:2d:c2:66:d9:9b:78:ac:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
Validity
Not Before: Apr 19 10:00:22 2026 GMT
Not After : Apr 20 10:00:22 2026 GMT
Subject: CN=c281238cdad6d9a4a1290390a8f9c4e04ffbd761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:c2:74:f6:da:46:b2:3b:84:5c:46:47:9f:
1f:fa:12:78:67:b7:cc:1e:e3:1e:7a:02:f9:35:b4:
31:05:5a:8f:27:a0:24:42:14:83:c7:da:76:6b:d2:
82:93:1c:f0:9c:8e:8d:b4:91:6c:55:33:9a:1f:1e:
73:b4:ae:ec:ec:36:01:c0:26:bc:f2:08:b9:e4:78:
48:d4:7b:4e:36:32:5b:0d:5d:6e:ba:af:84:32:39:
c0:91:5e:06:6e:10:50:67:68:48:b5:3b:c3:97:0e:
0b:ef:1b:b7:bc:8e:28:99:c8:74:70:13:5f:d2:a0:
bc:ef:3e:1a:e2:7b:7d:ca:f1:32:6c:1a:e8:5d:51:
24:96:a2:03:9f:d2:c5:c8:51:b7:34:a5:07:5d:0c:
da:ed:1a:33:58:4f:1c:87:b2:28:9e:be:ed:c0:69:
05:1c:9b:01:a2:47:55:69:6c:2d:69:25:6f:42:91:
98:66:37:34:88:13:e0:20:c0:73:3b:47:80:11:a9:
b9:91:4c:95:7d:3b:7f:be:3b:4d:53:8b:43:c2:c6:
c6:40:db:dd:f3:92:61:9c:fc:48:66:73:7c:07:fc:
fb:cc:66:bf:a4:36:17:10:de:df:04:00:94:4c:c2:
e6:32:64:f5:9d:6a:52:72:04:d2:0f:4b:d8:73:9d:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:23:8C:DA:D6:D9:A4:A1:29:03:90:A8:F9:C4:E0:4F:FB:D7:61
X509v3 Authority Key Identifier:
keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d9:0e:a6:d3:2f:a7:05:28:d3:cd:e3:7f:11:3b:f2:a6:34:
e9:ea:20:22:4b:b8:f0:ba:45:89:0c:89:1e:7e:43:2b:b0:b2:
84:b9:90:33:7b:92:84:d7:20:49:bf:a5:51:d1:09:d4:3f:b6:
15:42:a2:f2:ce:23:87:50:6f:bd:7d:cc:a7:66:94:14:e1:ed:
e4:c8:d5:7a:76:af:ba:b5:d0:43:df:1a:47:a1:90:85:9e:ab:
b6:93:e3:2b:70:3b:7e:8b:11:5a:6c:eb:64:22:8a:a0:7c:89:
90:df:f8:26:31:45:c8:d3:ac:c4:43:0b:9c:94:2f:dc:93:53:
14:40:d6:aa:cd:ff:cb:07:7a:e0:31:08:94:c1:6c:e7:40:03:
7e:93:6b:50:8e:c0:04:3b:99:da:0a:35:1a:b1:5e:12:f9:0f:
53:09:64:e4:fa:e0:c5:9a:51:52:95:6d:1e:15:d1:36:06:24:
01:22:c8:32:94:b8:55:a1:0a:d2:9b:68:1a:3b:c2:75:89:92:
eb:d1:ae:3d:0f:46:f8:44:02:e4:5a:22:96:4c:52:41:e9:14:
74:a4:a8:8a:b1:4f:84:03:71:0b:69:cf:b1:12:bd:ab:ab:c2:
15:a0:64:fe:b2:5a:66:e8:d6:bf:a5:da:d2:bc:7e:9d:82:a5:
78:51:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:40:52 2026 by rpki-client