
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: 3cf2m5PRGQtuyUvOE8uJPiGjISOYNzRKJo14wVMTl9Y=
Subject key identifier: 63:5A:C3:D3:53:A6:A8:89:10:D5:02:42:FB:17:02:29:50:65:47:DA
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 019E32CE779820C3927F4EEA05F2D5EC7994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0F20
Signing time: Sat 16 May 2026 22:00:52 +0000
Manifest this update: Sat 16 May 2026 22:00:52 +0000
Manifest next update: Sun 17 May 2026 22:00:52 +0000
Files and hashes: 1: ATXg03GR8zoML1xy7L80ZPtMT8M.roa (hash: nheIXMj5AVfyPJ0H/Ys4b1d8hSHkVKCMyhmzU1gBfCw=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: ujM4EBzjjCPMkCO2oEGyxPGHKnr/NVpraiaaR3NiKs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:77:98:20:c3:92:7f:4e:ea:05:f2:d5:ec:79:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: May 16 22:00:52 2026 GMT
Not After : May 17 22:00:52 2026 GMT
Subject: CN=635ac3d353a6a88910d50242fb170229506547da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:82:0d:34:af:87:c5:7d:6f:5d:62:f1:5a:
9d:c2:8b:bd:99:02:9c:b6:a5:39:fb:64:70:0b:6b:
1c:fc:ee:58:43:67:c7:80:aa:55:ae:59:e9:34:43:
7f:73:54:1e:30:2d:ec:c3:58:1c:aa:b0:a2:d4:2b:
19:2d:60:af:7c:66:c9:b9:36:16:27:31:5a:96:ec:
44:0e:b6:71:72:f2:5c:9b:4f:dd:57:3e:2f:33:9b:
8a:85:14:3d:6a:16:2e:39:39:80:9d:46:62:c0:d1:
48:a2:25:19:40:91:56:07:86:12:98:22:86:d0:59:
0c:d0:68:ef:1a:da:26:25:57:ab:7c:32:a8:0c:7d:
1c:95:d4:c3:e6:34:e5:dc:75:ba:f1:41:cb:b3:d7:
47:ec:74:7f:4b:ec:37:d5:7b:36:a7:d6:83:9e:99:
a4:cf:48:36:cb:6b:ac:13:5e:a8:ac:bb:33:7b:e0:
80:d0:1f:99:4c:26:84:3a:a5:21:d9:95:18:bb:a4:
95:76:47:36:49:34:28:9f:17:86:29:06:70:68:9a:
09:a7:e2:86:1b:ce:75:3b:f1:13:d0:f3:b3:b2:d6:
5d:b5:d6:1f:64:3a:83:e5:ee:da:12:b3:dc:d7:4c:
8a:73:e7:21:cc:ed:f5:e6:02:75:77:9e:35:0b:dc:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5A:C3:D3:53:A6:A8:89:10:D5:02:42:FB:17:02:29:50:65:47:DA
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4e:0f:67:ea:14:d0:ac:75:7a:f7:ee:6c:57:f2:91:69:f8:
69:49:af:a6:6e:da:9e:84:59:9f:3f:38:86:b7:fc:63:ef:b9:
ae:00:bd:6a:84:3f:9a:03:a7:51:12:5e:93:fa:e3:77:28:50:
45:a2:5e:d5:96:05:69:1d:5c:5b:99:a7:2d:66:e4:3c:c7:7f:
91:71:73:d9:68:f1:26:b7:14:97:a3:9a:69:3e:08:f2:25:7e:
b2:7a:54:31:2d:90:b8:ac:6b:ee:11:28:10:e1:6f:4b:ac:1f:
cb:49:8f:f6:7d:6d:a9:8b:cf:cf:44:9d:d0:7b:7f:d2:0c:93:
1a:8d:72:13:ae:eb:9d:67:e9:d1:be:78:42:c3:0a:02:7f:75:
b8:3c:01:b8:1e:c7:4b:1a:fc:8a:34:73:7d:05:45:5c:e3:eb:
a0:3f:64:12:f9:0a:1b:4f:aa:36:38:29:be:4d:66:ce:1b:5b:
8a:d5:04:ac:a9:42:05:bf:a3:1f:9d:15:97:71:1c:a3:9e:a2:
a8:27:ea:8a:c8:86:10:a0:b1:61:87:f0:c4:bb:87:fa:eb:28:
34:26:aa:27:dd:c6:7d:6c:7a:7d:41:8c:95:21:3b:fb:1f:e6:
b3:b5:56:bc:87:89:f0:ed:6f:85:27:f3:16:20:eb:3e:ec:a0:
62:8b:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:04:57 2026 by rpki-client