Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: H5fwOl6ya3Pk78lAPYj1huVQcg4u7FKDh0ShCWD18TM=
Subject key identifier: 4B:AA:66:16:CB:CA:BA:59:3A:96:E6:AE:FE:62:95:87:7F:AE:CB:65
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019FA1BB9EE10FBEE570F7A6C4EF62CADC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 03F2
Signing time: Mon 27 Jul 2026 04:00:55 +0000
Manifest this update: Mon 27 Jul 2026 04:00:55 +0000
Manifest next update: Tue 28 Jul 2026 04:00:55 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: 1xIgOAgTkO18NrEi6/LGXLXpIdL5RMn8HT41jnPXuYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:9e:e1:0f:be:e5:70:f7:a6:c4:ef:62:ca:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Jul 27 04:00:55 2026 GMT
Not After : Jul 28 04:00:55 2026 GMT
Subject: CN=4baa6616cbcaba593a96e6aefe6295877faecb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:99:de:26:57:8a:19:e7:1e:3c:20:b8:60:
76:9d:f3:b6:4d:f2:3d:ad:fc:d6:3d:a2:e6:f9:4d:
d5:d6:be:ce:ca:15:91:b8:9f:f6:c1:15:ea:d1:b9:
87:60:fa:05:6d:eb:72:21:9b:6c:c8:0e:25:e7:4d:
8a:57:aa:35:fc:78:67:65:15:1c:5e:ce:47:00:7d:
9e:3c:b0:f0:6d:a5:2d:41:ad:ef:5d:91:61:1b:d9:
d1:a9:fa:1d:cd:d8:dd:13:96:42:d6:76:86:24:70:
c8:44:a5:2f:7b:bf:a5:55:42:d8:e1:b7:65:1c:28:
99:c1:43:05:47:f7:0c:41:25:6d:6f:87:d3:c1:9f:
6f:ba:62:82:2b:6c:cf:83:99:77:4d:29:3e:fe:c5:
26:49:82:84:ee:25:0c:82:ae:76:95:eb:5d:ef:8e:
e5:cb:79:7d:7a:d1:03:df:aa:1f:d8:c8:9c:48:b7:
e7:f6:f3:6e:42:34:e5:c8:3d:30:cb:3f:96:7a:cb:
e0:cf:15:50:ae:5b:40:14:d3:bf:28:1f:9e:44:dc:
b3:9b:5e:0e:82:43:af:1e:6b:4a:fe:89:f1:84:c9:
72:5a:35:6d:dc:72:53:0f:91:db:49:63:a2:e1:06:
81:f1:1e:dc:8c:9e:f9:41:e4:50:48:8b:b5:ea:08:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AA:66:16:CB:CA:BA:59:3A:96:E6:AE:FE:62:95:87:7F:AE:CB:65
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:36:60:00:ea:26:bb:e9:ac:ed:4f:19:38:4b:92:63:73:42:
dc:7f:0b:c2:4e:46:04:df:90:31:f7:20:e2:48:3b:04:1d:74:
d4:47:08:4a:77:0b:df:61:96:d8:15:38:a1:57:90:7b:1e:e2:
8d:e3:27:82:1c:39:e1:a7:7a:51:9b:49:7f:93:70:7a:ae:e5:
c5:13:0e:c3:bc:4e:78:56:9b:1e:ba:ac:20:49:a4:f4:3d:d5:
c3:ed:9a:1d:a4:53:8f:b3:42:5f:4e:16:98:9a:3a:37:43:a0:
ea:d4:0e:a4:7b:81:25:ba:78:e2:1d:cf:b9:36:7a:b2:61:f1:
f3:e0:87:ea:39:d1:0a:97:b2:39:65:a5:58:c9:7a:c9:fa:e4:
15:05:51:dd:3d:02:fc:ca:b0:a1:38:61:4b:2a:45:71:5c:82:
a7:69:e0:43:51:81:0d:0e:a2:c9:f3:a5:b1:84:50:2b:dd:fd:
07:fd:62:3e:58:9b:bd:af:3b:52:ee:15:66:1f:cd:00:03:cb:
74:a5:c1:73:98:e9:e2:da:18:e3:57:fb:81:37:f4:e4:5b:fd:
43:a7:95:31:ae:31:4f:79:cc:0f:bc:2a:8a:7d:c8:f6:a5:69:
df:d4:35:fa:c8:ab:39:2b:93:ff:ee:ec:83:b1:ed:f8:5e:1d:
a9:86:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:28 2026 by rpki-client