Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: lLcn4a8x+9o11VxnQWaRvLK7BqQA+OR0c5m2n3+aLzw=
Subject key identifier: 8E:48:F4:63:8F:14:8F:E4:10:40:7F:35:B3:AA:C5:D6:97:30:8F:F9
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019D39AED896802511752297DF9D7C02A085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 02B3
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: iGIbsIN2DXsFXcEEVGmOVZIzZWOVdeZLwSiJKGXFmwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d8:96:80:25:11:75:22:97:df:9d:7c:02:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=8e48f4638f148fe410407f35b3aac5d697308ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:09:cb:34:7e:66:61:17:80:44:76:c6:b3:
1a:86:a7:f7:88:ca:c0:c0:5c:63:a7:8d:a1:b5:5b:
0e:34:d2:76:20:bc:c2:1b:8b:7f:19:5d:86:bf:b4:
c4:83:cf:e8:52:d8:13:a5:5c:f1:48:ef:0b:4f:fc:
84:74:a5:a4:ac:95:07:4c:fa:23:0f:d8:c2:76:3b:
73:89:bf:3a:18:2c:e9:05:bd:d1:8c:ff:15:e7:44:
9e:ca:28:61:14:5e:b4:f7:ed:69:1a:f6:1e:45:85:
23:e4:34:a7:e1:5c:3a:89:7f:3b:6b:90:e2:87:aa:
9c:90:f1:af:12:b2:c3:e6:60:df:b1:0f:af:8f:54:
12:5f:5a:0a:43:52:da:8d:b0:0d:71:66:3c:a4:61:
7e:e0:e5:66:c2:b2:d7:90:55:a1:b6:f5:71:cc:4f:
35:4f:71:db:5c:43:37:24:e3:31:50:b1:cb:65:57:
88:9f:e0:9a:1d:9e:4d:38:49:b4:34:ac:3e:7a:03:
7b:2d:77:8e:3b:05:e4:45:16:8e:58:b0:c4:af:25:
3f:18:7c:10:65:97:6d:0b:02:b3:1a:9b:50:3a:18:
d5:21:82:d7:e9:c9:a9:0b:01:12:d8:e5:87:55:79:
03:63:42:c7:5b:fc:0e:9c:32:e2:fe:60:00:c9:34:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:48:F4:63:8F:14:8F:E4:10:40:7F:35:B3:AA:C5:D6:97:30:8F:F9
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e8:13:55:47:38:48:85:62:e2:35:76:97:34:db:37:eb:00:
ca:f9:a8:5c:28:52:82:e9:e3:6a:5c:2b:d4:3c:be:9f:27:85:
bb:e9:07:57:1e:e4:6a:df:a8:6e:90:6d:2b:3a:b7:3f:b8:f9:
f5:37:e9:81:18:e0:2e:90:bf:8c:0a:b8:f0:08:37:dc:f7:d3:
b0:9a:ad:9e:d6:63:f7:ed:d2:de:ed:f0:64:1e:3e:c0:c4:c2:
a5:4b:73:d4:37:e9:30:b2:ee:e8:97:8e:37:f5:f2:c6:47:54:
62:f2:10:6b:88:d3:fa:bd:9e:9e:6a:2f:b8:c9:03:3b:39:2a:
f1:0d:13:c1:b1:b3:88:c4:bd:e7:66:a0:53:b2:dd:54:7f:6c:
67:83:5b:13:e9:14:70:ac:6d:17:3b:f5:1a:28:96:e1:91:e5:
71:e4:8d:ce:ba:70:4a:73:c1:86:eb:46:f0:39:71:a1:7c:ba:
9f:9f:f1:fd:8c:5d:3a:90:63:21:79:bf:88:d6:00:67:dd:6a:
50:ca:70:1e:8d:b7:ca:22:01:23:55:5b:dd:01:fc:fa:e2:8d:
be:a9:4b:91:1d:ac:f2:8e:7b:cb:10:dc:c1:7b:a3:a1:26:a7:
e7:ae:fe:1f:2b:ed:b9:58:ea:13:90:44:94:6c:38:6e:e8:48:
27:7b:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:51 2026 by rpki-client