Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: Tx6MdAwOI73CoEPHzPj3LsuCX52wli6gD+4cGibg58w=
Subject key identifier: 65:00:AF:99:4A:56:09:BB:88:F4:A2:0D:D5:13:12:29:D0:E8:79:A7
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019DB16B57E9915FDF41F74AF85990467DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0AF7
Signing time: Tue 21 Apr 2026 19:01:35 +0000
Manifest this update: Tue 21 Apr 2026 19:01:35 +0000
Manifest next update: Wed 22 Apr 2026 19:01:35 +0000
Files and hashes: 1: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: mUEVr4kx2Oh7SanREFqulhS/IiivdoDfZ+4tKPEN1UA=)
2: rdAuEK8upk6mx2gdhzDvAiBjkpA.roa (hash: neSutvd2UdygUv3ATr8lKmwONQiQv6cC5T84e4a3szg=)
3: ruR8f9AmtQvh0RBkYF7FPMTv6Dk.roa (hash: rCIjDYZ1f6UcDcYU9LBZzWo2gwww940GJ0hMkyxCy88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:57:e9:91:5f:df:41:f7:4a:f8:59:90:46:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Apr 21 19:01:35 2026 GMT
Not After : Apr 22 19:01:35 2026 GMT
Subject: CN=6500af994a5609bb88f4a20dd5131229d0e879a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:88:ba:9f:40:a4:68:07:8d:02:8b:04:0d:
65:97:16:ba:19:d7:2d:ea:f7:41:6d:4d:45:b1:80:
fa:54:19:d0:97:05:2f:ec:1d:21:9e:cf:dc:66:9d:
ec:0d:2d:b7:8e:d5:13:8e:2f:3a:3e:7a:da:a6:c4:
dd:b8:93:f5:15:e9:e2:ba:94:3a:05:29:ce:12:c5:
50:41:fd:d3:24:55:67:9d:14:1a:9b:4e:37:84:a3:
3f:3d:bc:ae:18:9a:e5:20:a3:e1:5a:cb:aa:06:71:
4a:95:d6:72:67:09:da:20:73:07:23:d8:ab:97:22:
e8:94:b4:4a:fb:fe:38:30:29:29:08:7d:35:4c:8b:
55:c3:e1:60:a3:52:8b:bc:96:6f:5d:4e:fa:39:10:
31:b8:3a:23:d5:91:7a:cf:cb:0f:11:21:71:bf:19:
2d:ca:e0:a9:38:34:0a:49:4d:17:e5:4f:28:fa:49:
e3:6c:09:7a:4a:bf:f2:29:43:a0:1a:38:21:ee:bb:
8b:a3:fb:4e:67:88:89:54:f2:99:0e:b1:df:96:c6:
83:bc:bb:ba:e5:9d:51:0d:75:76:80:d0:99:e7:41:
00:dc:22:96:bb:d7:b9:98:20:15:46:2f:fd:07:52:
c1:b8:e4:50:dc:e7:cf:27:0a:c5:c8:70:bc:84:70:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:AF:99:4A:56:09:BB:88:F4:A2:0D:D5:13:12:29:D0:E8:79:A7
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a8:ea:ea:7d:b6:96:b5:71:f1:68:e0:bb:fd:81:d9:7c:75:
87:81:6e:b6:05:8e:a2:72:4f:d8:ea:ca:fe:47:10:8e:1c:25:
a6:05:1a:d5:81:c8:f9:3b:85:1c:ee:61:c9:ef:5e:0e:20:14:
41:0b:c8:3d:f6:44:6e:d8:82:11:4d:04:c1:6e:89:51:0a:c9:
58:68:e6:e3:74:cd:22:7c:3f:d4:79:50:62:90:4c:1b:79:76:
10:e5:bf:30:37:5f:18:aa:ed:be:3d:bc:b8:a5:92:fd:f5:bd:
d2:07:25:c1:34:c5:b3:8a:44:c1:64:a1:11:d9:1f:e6:5f:ef:
5d:a4:50:d8:c7:03:50:72:57:2f:83:c4:8d:c7:84:d1:a8:5a:
18:b9:96:50:44:b8:92:1c:0d:60:91:16:46:9f:d4:c8:79:d5:
ec:13:93:eb:c2:82:cc:55:b6:61:35:6f:27:3d:08:3a:91:76:
2f:6d:9a:bd:60:97:c5:8b:a5:d3:fc:31:1a:05:f9:e6:29:db:
00:0e:86:09:cd:38:f6:59:b6:6c:fe:61:8d:c7:76:fc:0b:9f:
c6:02:bf:50:5f:22:6c:db:7c:5b:c4:43:98:5f:2e:62:12:c0:
66:0a:bd:03:ea:f5:92:3e:e9:af:1d:fe:14:b3:c4:67:83:fa:
84:9c:a4:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xa1fpkV/fQfdK+FmQRn3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4
ZTdlN2MwHhcNMjYwNDIxMTkwMTM1WhcNMjYwNDIyMTkwMTM1WjAzMTEwLwYDVQQD
Eyg2NTAwYWY5OTRhNTYwOWJiODhmNGEyMGRkNTEzMTIyOWQwZTg3OWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ6Iup9ApGgHjQKLBA1llxa6Gdct
6vdBbU1FsYD6VBnQlwUv7B0hns/cZp3sDS23jtUTji86PnrapsTduJP1FeniupQ6
BSnOEsVQQf3TJFVnnRQam043hKM/PbyuGJrlIKPhWsuqBnFKldZyZwnaIHMHI9ir
lyLolLRK+/44MCkpCH01TItVw+Fgo1KLvJZvXU76ORAxuDoj1ZF6z8sPESFxvxkt
yuCpODQKSU0X5U8o+knjbAl6Sr/yKUOgGjgh7ruLo/tOZ4iJVPKZDrHflsaDvLu6
5Z1RDXV2gNCZ50EA3CKWu9e5mCAVRi/9B1LBuORQ3OfPJwrFyHC8hHDm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUAr5lKVgm7iPSiDdUTEinQ6HmnMB8GA1UdIwQY
MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt
YWU0ZTY5ODY2NGYxLzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx
LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqjq6n22
lrVx8Wjgu/2B2Xx1h4FutgWOonJP2OrK/kcQjhwlpgUa1YHI+TuFHO5hye9eDiAU
QQvIPfZEbtiCEU0EwW6JUQrJWGjm43TNInw/1HlQYpBMG3l2EOW/MDdfGKrtvj28
uKWS/fW90gclwTTFs4pEwWShEdkf5l/vXaRQ2McDUHJXL4PEjceE0ahaGLmWUES4
khwNYJEWRp/UyHnV7BOT68KCzFW2YTVvJz0IOpF2L22avWCXxYul0/wxGgX55inb
AA6GCc049lm2bP5hjcd2/AufxgK/UF8ibNt8W8RDmF8uYhLAZgq9A+r1kj7prx3+
FLPEZ4P6hJykmg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:13:52 2026 by rpki-client