Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: DU1KHTco0OuQD/sttm9wuIxmU0oMvp9LUsUR31s9TUw=
Subject key identifier: AA:16:10:B0:0A:04:E5:0A:E5:D9:9A:23:50:86:C3:84:5D:32:E4:B0
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 019D3A54865E027800095965FD2E97390DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 08BA
Signing time: Sun 29 Mar 2026 16:01:51 +0000
Manifest this update: Sun 29 Mar 2026 16:01:51 +0000
Manifest next update: Mon 30 Mar 2026 16:01:51 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: 5aOip+fdF2R8yJehV0vADrmjKshD4ajcE3s4hfPVCNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:86:5e:02:78:00:09:59:65:fd:2e:97:39:0d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: Mar 29 16:01:51 2026 GMT
Not After : Mar 30 16:01:51 2026 GMT
Subject: CN=aa1610b00a04e50ae5d99a235086c3845d32e4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:18:96:64:d2:3a:de:b2:46:03:37:b5:7d:
df:29:dc:6a:eb:ad:fc:80:14:29:71:1e:5f:db:1b:
ed:f0:25:4a:72:52:b5:e4:d2:16:70:7b:7c:b9:2c:
fa:25:aa:72:8e:d2:97:4e:92:22:59:fd:58:96:9b:
21:13:d4:54:11:a8:61:d1:26:70:9a:7f:c6:7e:b4:
cf:e4:24:e0:a8:82:b2:bb:1f:c1:d6:23:9e:02:fa:
11:39:e2:77:7f:a6:80:3e:b9:77:96:b5:9b:5c:99:
2f:e4:bb:f1:0c:d6:57:68:b1:71:12:26:1b:a2:0c:
d1:99:bf:e5:c0:31:12:74:30:8c:1f:32:b0:34:b8:
64:63:6f:5f:e9:18:8b:8c:fd:55:7a:6f:48:ef:67:
e6:1e:19:f5:f1:c6:ab:d5:07:a0:b9:e5:fa:20:92:
b8:18:ea:69:ea:9c:1b:af:e6:c8:50:01:43:45:2a:
ab:9f:5b:fd:bb:31:62:9f:70:3f:ae:63:23:f1:24:
5f:e9:d3:23:32:8b:20:b8:b0:15:92:a5:1b:2b:ef:
5b:49:d3:33:de:5d:f8:68:70:05:51:e3:13:ae:d0:
b5:49:c0:8a:44:4a:0a:54:b9:f0:77:3c:95:16:3d:
03:f7:c7:54:ed:06:2b:1e:b6:4e:b4:af:7d:62:00:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:10:B0:0A:04:E5:0A:E5:D9:9A:23:50:86:C3:84:5D:32:E4:B0
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ad:7a:4f:b2:94:22:2d:b7:d8:3f:8e:ce:7a:ac:20:ba:03:
f0:7c:03:cc:82:8f:de:fb:4c:f7:5d:20:61:a4:70:85:d9:3f:
d1:35:f8:a5:34:38:77:a0:6b:88:f8:15:3e:d2:6d:41:9f:d6:
4a:fb:db:73:27:75:ab:91:c4:77:1e:52:32:af:f9:c0:6d:e9:
a8:a6:b7:78:f1:ed:0b:32:dd:b1:e3:66:68:47:fa:e5:2a:c7:
21:fc:52:d7:7e:f5:2d:39:03:a8:2a:38:93:0b:cf:e6:03:99:
a0:ff:e6:40:3e:e7:da:88:5f:f6:b6:ba:fa:9d:58:95:f4:de:
f9:28:86:17:a6:0a:01:d1:31:64:9b:ba:ad:66:83:56:4a:9b:
e8:44:46:2a:f2:1d:65:01:89:2a:d4:b9:3d:e4:a1:4d:9f:e1:
96:7b:68:74:05:53:b5:7c:2f:b1:1c:a2:de:b9:3e:71:d1:ca:
3d:32:79:e5:95:4e:a6:3a:81:47:28:14:ba:f9:1e:2e:4a:1a:
03:59:03:aa:52:87:90:fb:1b:05:33:5e:28:b3:51:75:af:77:
e7:28:55:06:f8:88:00:c4:f6:94:a6:1b:0a:5f:64:e6:89:22:
d2:c9:06:49:42:b1:a6:23:56:81:f0:01:86:cd:c4:ed:a2:1d:
01:85:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:59 2026 by rpki-client