Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
File: pWGJNurjnydAQKDTMnz4gQLITG8.mft (raw, json)
Hash identifier: NcedmQlL/1Bi7y+p1n0MMLj2QJkwKS4sOn+daaRVC6E=
Subject key identifier: 43:3D:5F:51:B4:E8:AF:47:D3:8C:06:6A:2A:24:17:08:7E:87:2E:50
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Certificate issuer: /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial: 019E6E081392AF2ABFCE57B22CAF7A422292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
Manifest number: 0147
Signing time: Thu 28 May 2026 10:01:23 +0000
Manifest this update: Thu 28 May 2026 10:01:23 +0000
Manifest next update: Fri 29 May 2026 10:01:23 +0000
Files and hashes: 1: pWGJNurjnydAQKDTMnz4gQLITG8.crl (hash: T5L76IGygbW33Q36jK5ACZuKXiHoRdLFfeXxraOtX0Q=)
2: vc4rQV1btws3GoUjJ72MXPBLjsA.roa (hash: vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:08:13:92:af:2a:bf:ce:57:b2:2c:af:7a:42:22:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
Validity
Not Before: May 28 10:01:23 2026 GMT
Not After : May 29 10:01:23 2026 GMT
Subject: CN=433d5f51b4e8af47d38c066a2a2417087e872e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:5f:cf:24:21:3e:9e:cd:3f:3e:af:1a:b5:
5c:8b:9b:ce:6d:26:3b:10:27:26:6e:ab:de:2a:84:
74:86:b7:5b:ef:c3:6c:a8:e5:22:a3:34:96:86:08:
11:46:61:55:80:23:4f:8d:54:7d:d8:a8:2d:a1:ec:
4c:b0:52:b3:ed:7d:7b:33:70:60:6b:99:58:c2:4c:
5d:3d:76:4f:19:81:ef:e0:ef:68:3b:7d:74:1a:16:
04:79:a7:79:70:19:2e:6f:b7:f0:a9:eb:9b:c7:a4:
6f:f1:dc:d3:87:d0:c0:76:fb:b7:d9:62:ce:c5:a5:
2c:fb:09:62:9d:eb:5b:a9:bf:e1:eb:f8:a6:97:40:
86:77:5a:45:b3:54:c3:f3:37:67:40:6b:fd:27:12:
62:6f:d2:69:eb:2d:42:aa:6c:47:b8:67:08:25:d2:
aa:83:51:6b:ed:a4:e4:cb:86:5d:be:c0:22:e4:b1:
73:58:6e:7a:d6:98:c2:cb:2a:c3:67:7c:90:18:9d:
6b:01:5a:58:d8:54:25:64:fa:94:f5:21:87:7a:d4:
15:cc:21:06:de:33:e9:74:60:ef:52:bf:43:af:47:
f6:01:a1:e9:2f:3b:d2:79:07:15:2c:7b:3a:8b:8a:
63:87:bd:98:21:7f:9f:8e:d4:91:b1:7c:e9:18:5b:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3D:5F:51:B4:E8:AF:47:D3:8C:06:6A:2A:24:17:08:7E:87:2E:50
X509v3 Authority Key Identifier:
keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ac:6b:6e:37:53:aa:fc:28:1d:b6:1e:e2:a5:e2:8b:2e:81:
f5:04:0c:88:26:7e:0d:94:61:19:ab:7c:fd:27:6f:b5:77:23:
d0:f1:51:8d:2f:b6:66:80:db:f7:8f:26:29:0f:33:44:33:cd:
13:e4:db:16:67:aa:b6:56:09:e4:ab:a6:c8:76:c0:b0:7a:2b:
f9:0c:3b:80:f8:0a:d0:97:92:b7:7f:51:ff:9c:53:3d:5a:ab:
e3:78:1a:32:04:5a:64:f9:32:cb:e1:04:a4:cd:bf:57:7f:41:
12:9e:f2:8e:ca:9b:c9:35:e6:bb:9f:9e:59:e7:9a:f4:5d:e1:
f3:3b:37:e6:9a:df:78:b2:76:25:b4:1b:9f:e4:a5:ee:d3:2b:
6e:ef:04:38:5b:69:17:7e:91:33:29:ea:e9:16:d1:d8:ed:44:
d8:b9:c3:6a:95:76:0f:d0:87:12:40:1c:69:35:d1:aa:fb:c1:
36:74:04:47:e2:4b:3b:2a:8f:4c:1f:1c:e3:70:f2:31:04:01:
2f:5f:2f:12:0a:7e:f0:84:3c:fe:e2:c6:1a:16:55:ea:9b:44:
fb:9a:ad:b9:8c:ff:f1:0b:b6:cc:f4:d6:5e:90:12:7f:45:fc:
99:7a:11:22:b8:b0:0d:7e:37:27:c0:cc:fd:63:08:b4:72:76:
a6:d6:76:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5uCBOSryq/zleyLK96QiKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjE4OTM2ZWFlMzlmMjc0MDQwYTBkMzMyN2NmODgxMDJj
ODRjNmYwHhcNMjYwNTI4MTAwMTIzWhcNMjYwNTI5MTAwMTIzWjAzMTEwLwYDVQQD
Eyg0MzNkNWY1MWI0ZThhZjQ3ZDM4YzA2NmEyYTI0MTcwODdlODcyZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD5fzyQhPp7NPz6vGrVci5vObSY7
ECcmbqveKoR0hrdb78NsqOUiozSWhggRRmFVgCNPjVR92KgtoexMsFKz7X17M3Bg
a5lYwkxdPXZPGYHv4O9oO310GhYEead5cBkub7fwqeubx6Rv8dzTh9DAdvu32WLO
xaUs+wlinetbqb/h6/iml0CGd1pFs1TD8zdnQGv9JxJib9Jp6y1CqmxHuGcIJdKq
g1Fr7aTky4ZdvsAi5LFzWG561pjCyyrDZ3yQGJ1rAVpY2FQlZPqU9SGHetQVzCEG
3jPpdGDvUr9Dr0f2AaHpLzvSeQcVLHs6i4pjh72YIX+fjtSRsXzpGFv/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM9X1G06K9H04wGaiokFwh+hy5QMB8GA1UdIwQY
MBaAFKVhiTbq458nQECg0zJ8+IECyExvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdHSk51cmpueWRBUUtEVE1uejRnUUxJVEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85YmVkMjYtMThmYi00ZWNmLWEyYTIt
ZTRhMzFlNzljOWNlLzEvcFdHSk51cmpueWRBUUtEVE1uejRnUUxJVEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85YmVkMjYtMThmYi00ZWNmLWEyYTItZTRhMzFlNzljOWNl
LzEvcFdHSk51cmpueWRBUUtEVE1uejRnUUxJVEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKxrbjdT
qvwoHbYe4qXiiy6B9QQMiCZ+DZRhGat8/SdvtXcj0PFRjS+2ZoDb948mKQ8zRDPN
E+TbFmeqtlYJ5KumyHbAsHor+Qw7gPgK0JeSt39R/5xTPVqr43gaMgRaZPkyy+EE
pM2/V39BEp7yjsqbyTXmu5+eWeea9F3h8zs35prfeLJ2JbQbn+Sl7tMrbu8EOFtp
F36RMynq6RbR2O1E2LnDapV2D9CHEkAcaTXRqvvBNnQER+JLOyqPTB8c43DyMQQB
L18vEgp+8IQ8/uLGGhZV6ptE+5qtuYz/8Qu2zPTWXpASf0X8mXoRIriwDX43J8DM
/WMItHJ2ptZ2pw==
-----END CERTIFICATE-----
Generated at Thu May 28 16:23:55 2026 by rpki-client