Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: r2fBxWckawyRaC2QmzbMIn75M9G5bTZ2bZk5lJOu0j4=
Subject key identifier: B5:4D:02:25:9C:21:3F:F5:61:4F:AE:4C:35:31:5A:B7:23:83:56:86
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 019D3865F4611E7F509EAF2CF68C1F4A0824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: io8lhBdKOzDserrUmSaYFjExpcxqHKQUG31NGKCyWAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f4:61:1e:7f:50:9e:af:2c:f6:8c:1f:4a:08:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=b54d02259c213ff5614fae4c35315ab723835686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:cc:99:51:9d:20:73:26:91:37:2c:98:96:
0c:2a:22:62:d2:7f:7a:a7:6a:ae:c6:d4:ed:00:c9:
c3:cc:f4:b3:00:8e:27:de:a5:02:99:5b:00:60:b1:
cd:ee:e9:3b:f5:00:89:d6:25:11:e8:ad:10:0d:cf:
b4:9f:29:bb:c5:53:1a:23:66:22:ea:ac:a1:e0:61:
df:aa:81:2c:18:dd:09:49:0a:b8:37:2c:b4:5f:b7:
24:a9:24:9c:e1:48:e6:49:21:c6:55:5d:2c:5a:9c:
c3:ec:ba:a6:37:17:7c:ec:00:45:f6:a0:9a:98:b9:
29:e3:95:90:9c:08:ae:75:6b:c1:a0:f9:64:21:82:
72:e3:51:13:4b:1f:09:af:50:bf:db:07:b4:17:0a:
bd:a4:23:f2:ee:c2:f8:ed:ae:65:53:66:c9:59:31:
a7:83:9c:a1:aa:7a:f9:2a:b2:77:e7:e3:94:c8:f0:
74:0c:54:4c:fa:47:1b:bc:07:ef:51:c9:89:20:85:
4a:cd:e8:13:68:75:82:b6:39:f8:8a:a3:3b:9b:38:
54:e8:80:ef:b1:71:34:2c:b7:f5:1d:28:2d:62:8d:
6c:66:4b:5c:44:49:50:f7:a6:3d:92:53:b1:01:95:
ec:7e:0b:cd:8f:41:0f:4a:a9:16:04:7a:28:87:66:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:02:25:9C:21:3F:F5:61:4F:AE:4C:35:31:5A:B7:23:83:56:86
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:05:01:f0:4b:8e:f6:a4:f2:f3:64:84:21:d7:4d:70:f6:20:
4b:03:c3:7d:1d:65:92:99:11:4f:57:e5:8b:c1:6d:e1:8a:cd:
8f:68:de:41:cb:87:36:9b:72:7f:8e:37:a1:61:37:f3:f2:19:
04:70:be:22:5a:19:5d:1c:07:8c:8f:7f:88:1c:69:86:7d:38:
4e:42:80:64:f1:c3:af:81:82:8d:21:26:c6:bb:8d:88:4c:4f:
9e:95:9e:7c:63:47:b7:47:5d:48:c4:ba:e9:b5:5d:b4:a8:ec:
39:1d:a5:ba:14:b2:d2:e0:8c:15:f8:b4:07:51:60:64:df:d1:
96:5e:eb:4f:c1:d5:20:e0:f7:4b:eb:5e:5f:e8:77:c5:e6:6a:
06:2e:79:4d:68:fd:43:fd:44:35:7c:14:85:31:6d:c2:95:ee:
14:17:b3:23:5b:f7:b2:27:14:a7:35:66:e6:1f:96:22:7d:4c:
ae:ce:fc:b0:dc:e1:d1:26:29:34:a8:58:85:43:bb:4f:42:6f:
cf:db:92:1d:ae:2b:0a:14:45:b1:53:fd:d3:8f:28:d2:00:9b:
4d:a7:ad:86:74:41:0a:d9:0c:75:5b:d2:d9:9d:02:89:0f:5c:
14:09:b5:05:f7:e6:e0:99:8e:39:09:7d:70:9f:31:65:06:42:
89:06:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:11 2026 by rpki-client