Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: dXhH7LhBbiVziQ0wxHD5ngr6goISGXIiUCva+cQad84=
Subject key identifier: 0E:46:FB:2E:F9:B4:42:8B:C9:82:B3:7A:40:40:91:86:52:EE:12:9C
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 019D386578C46345AE94ADD808C34B53CBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: 0128
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: lYWHYUJ555vZQW+CyctLRXFzrzIbasP6fINXPMJv6kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:78:c4:63:45:ae:94:ad:d8:08:c3:4b:53:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=0e46fb2ef9b4428bc982b37a4040918652ee129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:0c:c4:3d:a7:a3:e2:97:4a:f0:99:a7:0c:
63:eb:80:24:cc:08:a9:4c:5b:7f:f7:9d:bb:a9:45:
11:ec:1f:f6:99:1b:c3:db:ba:ba:65:f2:a7:da:f7:
11:e0:83:41:d8:72:68:8b:48:86:e7:58:64:a3:08:
f9:1f:39:92:d7:0e:4d:6f:34:aa:df:a8:dc:52:24:
b7:7d:c9:b7:a7:26:ea:79:6a:3a:f3:45:ea:cd:d0:
79:9d:e0:2e:1b:d6:06:3f:cc:25:eb:39:fe:c0:71:
3f:ca:9a:1e:8d:00:d9:79:07:1e:e3:a0:71:19:ae:
82:2e:9b:e9:31:7d:d8:fd:55:5e:e8:0a:5d:0e:0d:
5d:e9:e4:db:69:c3:c4:47:08:59:8a:89:29:59:cb:
ef:43:09:52:e1:a4:e8:b4:0b:55:f6:e8:d8:43:b8:
24:ee:d8:05:30:0e:52:8f:20:b2:31:ba:e9:f0:5a:
71:5c:84:9b:5f:db:1f:7a:01:59:00:46:47:f2:a1:
81:de:24:cf:4c:9a:91:6a:4b:66:dc:20:b9:49:e8:
93:6a:c2:97:33:b3:b0:04:65:77:75:dc:cb:31:38:
63:c9:18:a4:6d:91:25:3a:1b:74:fe:b8:33:09:d9:
4b:5d:35:36:6b:e4:50:d5:78:53:44:ba:12:39:6e:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:FB:2E:F9:B4:42:8B:C9:82:B3:7A:40:40:91:86:52:EE:12:9C
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:70:41:3a:eb:34:2d:67:75:ca:67:29:52:98:4d:b6:b2:4c:
d1:dc:14:9f:8b:23:ff:34:06:92:42:a2:bf:59:c5:13:66:4f:
2f:1c:a7:7f:77:d3:2b:17:42:d0:be:59:5f:f0:c6:e2:7f:68:
d2:18:0d:ed:fd:ea:44:be:8f:25:df:a4:69:d5:8d:ce:52:bf:
e4:a0:56:60:c9:4c:1d:bc:69:a9:e7:3c:98:25:39:90:95:5d:
53:1d:cc:2a:dc:43:34:fc:af:26:c2:fa:52:ca:47:08:c9:50:
98:d1:90:04:d5:82:ef:1d:6e:55:cd:17:d2:51:7c:74:79:79:
6f:6c:5a:8c:29:7e:06:5e:37:0b:3d:2a:30:2d:71:82:df:35:
3e:7c:ea:9a:61:55:db:c8:ac:73:67:5a:91:1d:e0:a5:2f:10:
af:27:ba:2c:57:9e:83:4a:78:b1:d6:e3:2e:9c:ac:1e:6a:b8:
92:92:bc:90:8f:7a:9a:93:95:f9:45:df:d1:50:ff:a7:c3:f4:
51:3d:ad:2c:13:16:1a:50:17:40:08:e3:17:5c:f4:b2:df:46:
aa:4e:ab:83:a8:59:e4:41:ec:2d:f5:c9:4a:1b:f5:cb:d0:2e:
71:8d:e8:0c:e6:97:af:a3:0c:fe:60:fe:5b:46:66:88:4d:28:
db:c7:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:14 2026 by rpki-client