Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: 6LMPAjYCPqFzL4X8cw2anviSNxqEgC9d3b9j6tEv4E4=
Subject key identifier: FE:49:D7:30:0B:18:41:7E:03:8E:D5:DA:07:02:72:52:3E:7F:5F:0A
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019EB80F01F4B65922961F9C36FA8995757E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 0379
Signing time: Thu 11 Jun 2026 19:00:51 +0000
Manifest this update: Thu 11 Jun 2026 19:00:51 +0000
Manifest next update: Fri 12 Jun 2026 19:00:51 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: cVrYKK2oPOhcuETxwXrHZMxhsSPcv28qvwC59XBqpz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:01:f4:b6:59:22:96:1f:9c:36:fa:89:95:75:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Jun 11 19:00:51 2026 GMT
Not After : Jun 12 19:00:51 2026 GMT
Subject: CN=fe49d7300b18417e038ed5da070272523e7f5f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:e7:f6:6f:62:ee:d2:05:68:ba:13:0d:d4:
f9:18:70:c5:f8:d7:05:ae:a9:6c:5f:6b:03:49:6d:
e6:19:c3:a8:b4:b3:87:09:85:1d:46:88:40:03:09:
27:33:74:a5:49:40:35:48:1e:1c:57:93:29:9e:75:
81:9f:5d:24:fd:b1:93:5c:90:2c:8c:ab:56:ae:a8:
b9:d2:17:98:de:ee:aa:01:4a:c8:06:01:e5:65:75:
34:c1:2e:37:1d:8b:1b:a5:3c:f9:ba:6c:91:84:29:
1e:10:ff:14:02:5f:f0:f8:49:d6:02:30:3f:d8:fb:
4f:82:bc:51:3a:99:f9:60:4d:8f:f2:b4:62:e9:26:
ba:9e:bc:31:05:89:69:3d:61:95:91:69:04:74:86:
8d:e6:51:e6:fe:fb:8f:3d:a5:0b:d8:8f:bd:81:7b:
a5:be:ca:21:c3:3d:16:59:c6:70:4b:89:62:8b:e0:
60:6d:61:4a:90:0c:54:18:64:c6:60:af:c7:ee:35:
a7:6a:38:b6:a7:44:c4:63:30:98:ed:5d:9e:ef:d9:
34:9d:e3:c6:a0:33:0e:40:8d:7f:1e:3a:75:04:66:
23:9a:a2:11:50:5a:d7:51:55:db:36:26:f9:76:3e:
e6:15:b6:1d:2f:26:d0:c7:49:4b:de:dc:6e:ca:3b:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:D7:30:0B:18:41:7E:03:8E:D5:DA:07:02:72:52:3E:7F:5F:0A
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:db:94:70:d0:76:1d:8a:ac:ee:64:c4:72:a7:d0:76:55:48:
88:f5:90:e7:9d:f3:9b:f7:e5:15:24:23:84:34:74:72:ca:74:
16:f6:0f:5d:e7:8e:2b:61:36:73:b6:e9:7d:97:77:ea:ea:50:
55:7e:da:a6:b7:01:c7:c1:cd:07:7f:35:57:3c:df:fb:89:50:
5b:fb:08:c8:e0:d7:9f:77:c9:62:00:e4:32:28:e9:79:10:1a:
49:f5:09:74:e5:18:40:bc:86:18:4d:a9:a5:a8:d1:76:5a:7b:
e7:18:b4:4c:09:aa:ba:4b:a1:64:ac:8d:0b:19:5e:40:ea:73:
62:65:45:55:40:34:ae:9a:b3:f8:a2:de:5f:a4:11:26:2c:78:
57:cf:d4:3a:bc:df:98:9f:a6:6c:b4:9f:29:9c:2b:c2:fb:bf:
ab:ad:88:7a:42:ae:c2:66:f6:3b:33:73:85:26:00:c6:60:d5:
9b:e5:81:a3:66:2e:79:5e:f9:e3:84:d7:80:99:21:1d:0b:76:
fc:fb:d4:69:c1:01:92:0c:3d:07:4c:0c:2f:2b:46:72:f9:90:
5d:c3:b9:d5:6f:10:2c:f8:16:58:65:77:c7:75:5a:6c:cd:1c:
2d:6e:83:a6:66:bc:e2:be:01:0a:d9:e1:ce:fa:3f:f9:24:91:
bd:66:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:41 2026 by rpki-client