
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File: pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier: qyBGqLj5sWM6B+IDIl9X1+KzhuYb5xP+zkZf3dNjcbk=
Subject key identifier: 94:6C:02:5B:86:71:28:CF:6A:B8:6D:DD:9A:F6:CC:17:88:F0:F1:AA
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial: 01A162694D8FBCD5E5E6E0C57CCB0FC0B856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number: 0350
Signing time: Thu 22 Oct 2026 07:00:30 +0000
Manifest this update: Thu 22 Oct 2026 07:00:30 +0000
Manifest next update: Fri 23 Oct 2026 07:00:30 +0000
Files and hashes: 1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: mi4KHl9w/orzYdGjdJnHlbJzWrd+Jf3CYSsqHR2jF3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:69:4d:8f:bc:d5:e5:e6:e0:c5:7c:cb:0f:c0:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Validity
Not Before: Oct 22 07:00:30 2026 GMT
Not After : Oct 23 07:00:30 2026 GMT
Subject: CN=946c025b867128cf6ab86ddd9af6cc1788f0f1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:b5:d8:1f:22:91:a1:f8:26:3e:4b:c1:bc:
54:08:e8:b4:52:58:48:12:53:b1:6e:22:32:de:c5:
97:f3:4b:ea:89:f2:64:45:97:f1:bb:38:29:09:77:
e7:5f:2a:e7:27:34:bb:4c:8a:c6:fd:4d:31:03:3f:
70:e9:8a:0f:2f:fe:ce:46:06:70:ee:81:79:32:53:
97:b9:e7:38:fa:35:aa:d1:ed:87:f5:8c:f3:c6:03:
47:af:fa:96:16:50:23:4a:3b:0a:89:f4:d6:69:cf:
fb:4d:fe:06:b4:61:e4:36:74:0c:2e:a6:be:99:cf:
dc:15:15:12:d4:ec:13:1a:1f:9d:71:07:fc:f1:44:
48:bd:e5:47:b4:fb:f5:06:2c:c8:cf:aa:86:66:3c:
ed:1e:b7:7d:5b:8e:48:cd:4b:92:b6:52:be:07:94:
45:58:7b:33:65:f5:b7:ce:e2:97:42:f7:9a:f9:9f:
43:ad:f1:6e:93:1d:4e:8c:6d:c8:fe:c1:6f:b8:b5:
5d:95:38:c1:da:8f:14:06:52:6a:09:d8:89:e1:81:
07:67:48:69:cd:04:e3:16:0d:69:3b:38:9c:e2:b4:
97:76:2b:e9:01:a2:09:97:de:91:bf:74:94:33:45:
20:b4:77:97:0d:05:d4:30:43:f6:91:ae:a2:72:50:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:02:5B:86:71:28:CF:6A:B8:6D:DD:9A:F6:CC:17:88:F0:F1:AA
X509v3 Authority Key Identifier:
keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:31:55:fd:21:6c:3c:3e:e1:25:94:d3:b9:7c:86:7b:b1:e2:
82:db:99:ab:72:c6:62:f1:57:b2:87:c2:d7:27:b8:f8:d1:36:
e8:1e:be:2e:09:96:af:76:8e:85:7a:ed:5f:2a:2e:48:3c:1b:
ce:6b:74:e7:68:d6:01:d8:6f:40:f9:88:28:6c:c8:ef:af:03:
f3:d0:12:5b:29:22:ac:17:54:ce:39:bd:9b:be:fb:e6:2d:d1:
fe:a6:82:03:45:23:0b:2b:1f:b9:11:6d:ab:ec:f7:c5:dd:06:
3f:4c:6f:5d:a3:09:d1:cb:86:1b:1c:60:da:43:ad:f5:fb:90:
25:2a:db:99:4e:01:ad:e7:3f:8a:f6:26:60:17:7c:08:61:a1:
bb:63:cd:de:db:e7:ff:77:d6:37:79:a7:74:b0:4f:c9:9e:79:
f7:8b:db:4a:e4:83:dd:76:eb:b4:91:e4:08:ec:85:01:60:d4:
0d:38:5d:d4:8f:4b:20:a0:26:c1:fc:fe:7c:09:27:71:25:05:
72:4f:c0:c5:6e:d1:e4:4a:0e:0f:41:05:61:ef:99:51:29:3a:
47:45:7a:16:47:1d:76:d1:77:f6:88:4b:f8:16:d9:c9:e1:46:
03:08:42:1c:39:9f:d2:06:99:16:d9:89:c9:50:e3:ae:47:06:
49:63:59:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFiaU2PvNXl5uDFfMsPwLhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDVhNjgyOTYwNWM2ZDU4ZTRlMGMxYTc0NzRjMGEzZjMw
NjhkNmUwHhcNMjYxMDIyMDcwMDMwWhcNMjYxMDIzMDcwMDMwWjAzMTEwLwYDVQQD
Eyg5NDZjMDI1Yjg2NzEyOGNmNmFiODZkZGQ5YWY2Y2MxNzg4ZjBmMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApne12B8ikaH4Jj5LwbxUCOi0UlhI
ElOxbiIy3sWX80vqifJkRZfxuzgpCXfnXyrnJzS7TIrG/U0xAz9w6YoPL/7ORgZw
7oF5MlOXuec4+jWq0e2H9YzzxgNHr/qWFlAjSjsKifTWac/7Tf4GtGHkNnQMLqa+
mc/cFRUS1OwTGh+dcQf88URIveVHtPv1BizIz6qGZjztHrd9W45IzUuStlK+B5RF
WHszZfW3zuKXQvea+Z9DrfFukx1OjG3I/sFvuLVdlTjB2o8UBlJqCdiJ4YEHZ0hp
zQTjFg1pOzic4rSXdivpAaIJl96Rv3SUM0UgtHeXDQXUMEP2ka6iclB0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRsAluGcSjParht3Zr2zBeI8PGqMB8GA1UdIwQY
MBaAFKZFpoKWBcbVjk4MGnR0wKPzBo1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgt
MmQ4ZjNiNmUxYjk0LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgtMmQ4ZjNiNmUxYjk0
LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTFV/SFs
PD7hJZTTuXyGe7HigtuZq3LGYvFXsofC1ye4+NE26B6+LgmWr3aOhXrtXyouSDwb
zmt052jWAdhvQPmIKGzI768D89ASWykirBdUzjm9m7775i3R/qaCA0UjCysfuRFt
q+z3xd0GP0xvXaMJ0cuGGxxg2kOt9fuQJSrbmU4Brec/ivYmYBd8CGGhu2PN3tvn
/3fWN3mndLBPyZ5594vbSuSD3XbrtJHkCOyFAWDUDThd1I9LIKAmwfz+fAkncSUF
ck/AxW7R5EoOD0EFYe+ZUSk6R0V6FkcddtF39ohL+BbZyeFGAwhCHDmf0gaZFtmJ
yVDjrkcGSWNZxA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 16:29:00 2026 by rpki-client