Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: NjZEqLPtrKi9E6Y7kGH5b1rcNZq+hGFKQNc+DQ+c79U=
Subject key identifier: F9:EB:08:E2:F8:76:FC:FF:09:1B:CE:DC:27:D5:9A:8C:0E:E4:D4:98
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 01A17137A83C0F9A3C94A0142D5A9C9917C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 04E2
Signing time: Sun 25 Oct 2026 04:00:35 +0000
Manifest this update: Sun 25 Oct 2026 04:00:35 +0000
Manifest next update: Mon 26 Oct 2026 04:00:35 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: rgl04NXRl0eZRs2cEXiF5CeC8iaRnP2/ylN1YGyyfcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:37:a8:3c:0f:9a:3c:94:a0:14:2d:5a:9c:99:17:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Oct 25 04:00:35 2026 GMT
Not After : Oct 26 04:00:35 2026 GMT
Subject: CN=f9eb08e2f876fcff091bcedc27d59a8c0ee4d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:66:50:97:dd:93:2a:e9:80:ad:9a:e1:43:
17:af:6a:4e:40:b5:c1:4c:34:43:fa:15:11:3d:03:
0c:ed:65:fd:28:c0:d0:1d:44:c2:51:17:52:08:92:
c2:6f:da:08:31:be:bc:48:af:06:3a:42:b0:d5:c6:
c8:84:5f:ec:b6:52:e0:ba:b5:d1:3f:07:70:b4:72:
03:86:4d:f4:43:cd:cc:70:2a:9d:64:ab:00:3d:42:
d8:40:62:18:85:ee:a1:e2:d5:c8:33:3e:32:29:a5:
86:98:a5:7d:b4:be:69:5d:1c:0a:5a:4a:e6:91:fc:
f4:8a:ea:e0:2a:68:75:71:b1:0d:cc:65:53:0c:df:
77:26:4e:be:c3:c4:16:2c:16:ad:3e:e1:55:3c:ec:
b6:c0:6a:70:45:b0:d1:fa:52:06:9d:df:20:8c:27:
81:3f:54:8e:2e:d6:e7:f3:29:69:b6:d9:7a:3e:e3:
d4:ea:94:51:04:9a:31:6e:7a:90:2d:47:3e:ca:6e:
e7:21:c0:e8:2a:8e:62:6c:6c:9d:f8:d8:b6:45:80:
a1:78:50:8f:34:b2:6a:92:fa:d3:1c:8c:29:ac:1a:
ed:88:72:7b:ce:a9:1e:3b:de:9b:8f:39:6b:c7:14:
45:18:ad:4f:b7:d1:65:6a:a5:43:6b:0e:41:a1:73:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EB:08:E2:F8:76:FC:FF:09:1B:CE:DC:27:D5:9A:8C:0E:E4:D4:98
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cc:08:19:e0:47:dd:c3:76:58:b1:a5:28:63:3d:ae:72:ca:
24:94:63:2c:91:c9:74:17:1f:e7:38:49:db:91:3a:01:8b:43:
78:fb:d0:27:68:e3:28:07:4c:ac:29:e9:fb:f6:d5:e6:2a:e0:
ab:d1:d4:75:f4:4c:05:a5:55:6c:b0:da:5b:66:fa:fb:f6:75:
15:29:92:96:2f:e6:4e:5e:ef:24:78:02:04:de:e7:aa:3f:72:
b8:22:bb:02:bd:7c:99:8c:66:ca:f4:eb:c0:03:ee:dd:de:63:
59:12:22:64:da:d6:7d:40:74:63:f9:d1:97:e8:df:cb:a4:a8:
3d:f4:94:cf:5b:f9:f9:e1:bf:10:ad:19:ef:4e:4f:23:58:fa:
16:59:8d:8a:e3:39:56:f8:af:4a:d0:c4:dc:17:3b:85:fa:10:
cf:9e:82:b9:c5:d2:e8:67:f9:25:38:cb:dc:05:1a:a8:71:a9:
d9:8c:5e:e2:8b:0d:a3:fa:40:cc:b3:7b:70:45:f3:4a:a7:6c:
82:bc:01:37:ed:85:71:8c:12:25:4b:9c:78:d2:dd:6f:29:b1:
25:a7:7d:ac:db:a6:07:f4:2f:49:27:0c:bc:17:fe:e1:ef:6e:
be:24:ff:1f:f0:7f:5e:57:00:1d:2e:44:32:93:77:01:91:8f:
10:ed:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:46 2026 by rpki-client