Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: gBzxFJPR5Vgf+DV+zriFuSG3yKaB2iIUK8M8VY9f4aw=
Subject key identifier: 68:E2:D8:E1:BD:FE:60:31:13:DB:41:FC:31:8E:7A:7A:61:6E:1B:4E
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 01A03CDF23E165ED6AF866E8E357E7E9249A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: 02B8
Signing time: Wed 26 Aug 2026 07:00:51 +0000
Manifest this update: Wed 26 Aug 2026 07:00:51 +0000
Manifest next update: Thu 27 Aug 2026 07:00:51 +0000
Files and hashes: 1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: fxqqPQU5j+XxgeO5Ak+c4Myy+1p9b6a50M3jWZGg1wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:df:23:e1:65:ed:6a:f8:66:e8:e3:57:e7:e9:24:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Aug 26 07:00:51 2026 GMT
Not After : Aug 27 07:00:51 2026 GMT
Subject: CN=68e2d8e1bdfe603113db41fc318e7a7a616e1b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:0b:63:ed:35:7c:86:5b:d5:f5:5c:af:1f:
2a:c5:d7:16:b9:c9:66:15:6e:4c:1b:18:fe:5a:a5:
c3:b3:71:9a:7a:c8:bb:e7:fc:a3:70:27:b8:ad:ae:
b6:0f:ac:e9:11:d4:bb:78:fb:49:39:a0:c9:e5:6f:
44:d4:0d:da:10:98:3b:f4:df:13:95:b5:bc:48:f2:
ed:7a:f1:dd:10:58:03:6b:00:d3:90:1a:2c:ff:66:
ea:0b:49:44:24:51:ef:a1:fb:80:9b:a6:3f:cf:92:
95:ea:e9:d8:2f:77:56:de:02:0d:b1:f4:b5:65:70:
4b:38:41:99:d0:bb:e1:60:09:34:15:27:c0:df:3c:
ba:29:30:d9:b3:7a:db:9b:59:e9:f0:cc:a2:15:35:
ce:92:e8:0a:f5:75:d4:70:22:f8:a7:19:66:c3:4c:
e9:0f:ad:01:7d:1c:5e:89:06:fc:71:9c:bb:e7:72:
bd:ab:cd:dd:d3:7f:b1:cf:c0:19:7e:60:87:89:58:
42:e4:23:4c:bf:5d:18:f7:c6:b5:c2:37:43:4e:39:
63:ab:bd:18:a5:61:18:ff:f8:ed:39:a6:0e:69:1c:
53:7a:b5:24:69:6d:6c:7e:48:b8:96:01:64:43:1e:
30:e9:a1:c1:6b:77:1d:7d:be:19:15:c0:20:78:ec:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E2:D8:E1:BD:FE:60:31:13:DB:41:FC:31:8E:7A:7A:61:6E:1B:4E
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:65:b9:5d:e1:79:9d:13:39:93:ae:fc:fd:5f:d2:03:d5:05:
9b:d6:62:ef:08:46:94:03:83:8f:bc:98:af:6c:16:1a:c0:ca:
3c:06:55:02:3b:ce:66:8e:be:b4:d4:a1:2b:30:78:54:67:45:
4f:c7:2c:bd:ae:2c:c9:ac:3d:bd:ae:e7:d1:f7:1c:7d:44:89:
b7:26:db:fe:ab:2d:0a:88:25:54:c1:e5:72:33:de:f7:d1:5b:
bd:24:a8:40:3d:ad:ab:1b:cc:56:82:b4:af:53:76:1f:75:30:
14:85:9a:f7:0f:80:c8:31:42:ba:33:5c:1e:83:09:7c:5a:0f:
c4:9a:b4:2c:73:ff:6a:ca:19:43:17:8a:f6:2c:1d:59:9f:95:
01:17:d0:ec:08:b6:e3:a4:df:4b:55:87:2c:47:a3:16:1a:4d:
f8:98:c6:8b:de:49:4a:d9:73:c0:db:05:a1:5f:71:57:f3:b2:
e2:53:b9:35:f6:5d:44:92:d4:7a:6c:2e:ae:0d:c4:ea:79:38:
fc:d7:d0:2c:20:2a:9f:4f:c5:06:b9:39:b2:ec:b8:8a:1b:7d:
fd:55:40:64:38:0c:dd:9c:56:33:10:54:0c:30:3b:69:6d:da:
1b:67:46:10:28:49:ae:5c:18:68:06:32:68:a8:48:28:34:80:
ca:24:0f:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA83yPhZe1q+Gbo41fn6SSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDVhNjgyOTYwNWM2ZDU4ZTRlMGMxYTc0NzRjMGEzZjMw
NjhkNmUwHhcNMjYwODI2MDcwMDUxWhcNMjYwODI3MDcwMDUxWjAzMTEwLwYDVQQD
Eyg2OGUyZDhlMWJkZmU2MDMxMTNkYjQxZmMzMThlN2E3YTYxNmUxYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GsLY+01fIZb1fVcrx8qxdcWuclm
FW5MGxj+WqXDs3Gaesi75/yjcCe4ra62D6zpEdS7ePtJOaDJ5W9E1A3aEJg79N8T
lbW8SPLtevHdEFgDawDTkBos/2bqC0lEJFHvofuAm6Y/z5KV6unYL3dW3gINsfS1
ZXBLOEGZ0LvhYAk0FSfA3zy6KTDZs3rbm1np8MyiFTXOkugK9XXUcCL4pxlmw0zp
D60BfRxeiQb8cZy753K9q83d03+xz8AZfmCHiVhC5CNMv10Y98a1wjdDTjljq70Y
pWEY//jtOaYOaRxTerUkaW1sfki4lgFkQx4w6aHBa3cdfb4ZFcAgeOyvfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGji2OG9/mAxE9tB/DGOenphbhtOMB8GA1UdIwQY
MBaAFKZFpoKWBcbVjk4MGnR0wKPzBo1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgt
MmQ4ZjNiNmUxYjk0LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgtMmQ4ZjNiNmUxYjk0
LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWW5XeF5
nRM5k678/V/SA9UFm9Zi7whGlAODj7yYr2wWGsDKPAZVAjvOZo6+tNShKzB4VGdF
T8csva4syaw9va7n0fccfUSJtybb/qstCoglVMHlcjPe99FbvSSoQD2tqxvMVoK0
r1N2H3UwFIWa9w+AyDFCujNcHoMJfFoPxJq0LHP/asoZQxeK9iwdWZ+VARfQ7Ai2
46TfS1WHLEejFhpN+JjGi95JStlzwNsFoV9xV/Oy4lO5NfZdRJLUemwurg3E6nk4
/NfQLCAqn0/FBrk5suy4iht9/VVAZDgM3ZxWMxBUDDA7aW3aG2dGEChJrlwYaAYy
aKhIKDSAyiQPuw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:41 2026 by rpki-client