Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: lvTvl6O/FFP1EM59YKntTwUK4nDNutx9Qib/qw8NpC0=
Subject key identifier: F2:93:CB:B7:FB:72:42:C5:52:66:8D:B8:CE:C1:A2:17:9A:99:83:3A
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 01A176CC07ECE7A5F18C12A120CB6B2E4544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0CEC
Signing time: Mon 26 Oct 2026 06:00:45 +0000
Manifest this update: Mon 26 Oct 2026 06:00:45 +0000
Manifest next update: Tue 27 Oct 2026 06:00:45 +0000
Files and hashes: 1: MlJBYbax3t58n6UyQAjgc7I1pFo.roa (hash: e3iDQ3FYINgIQmMaeKUDVugt5cK6QeLA+QYPHV3bv/I=)
2: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: DO5L3Is3nyT0fiEgmgsV3KIV+/g63SXhxN9JDVDNrNc=)
3: rdAuEK8upk6mx2gdhzDvAiBjkpA.roa (hash: neSutvd2UdygUv3ATr8lKmwONQiQv6cC5T84e4a3szg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:07:ec:e7:a5:f1:8c:12:a1:20:cb:6b:2e:45:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Oct 26 06:00:45 2026 GMT
Not After : Oct 27 06:00:45 2026 GMT
Subject: CN=f293cbb7fb7242c552668db8cec1a2179a99833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:ce:7c:ad:66:63:f5:2f:51:32:88:ec:80:
9d:6d:fe:d4:5e:23:51:d4:31:14:42:ac:02:dc:e1:
f2:40:15:5b:da:2b:28:60:ee:f4:d3:7a:85:f8:92:
b8:85:85:c2:be:eb:fe:46:69:0f:13:d2:6d:b7:4d:
ff:6c:ea:3e:06:8a:dc:4e:bb:d3:67:42:90:e8:77:
3a:54:15:12:f7:13:f2:8d:f3:ce:67:36:b6:cf:fa:
90:42:f2:37:41:a5:b9:49:a1:3c:7e:7e:d4:ad:ea:
ca:9f:81:a7:c9:e7:3a:f5:f5:9c:f2:54:7a:c4:0c:
ea:2d:fd:70:91:0b:4c:2a:77:58:ce:50:04:0f:54:
c5:57:14:e5:03:1d:7e:bf:0a:44:bd:de:28:eb:c4:
69:c3:a0:b7:fb:01:3c:92:4e:ba:c7:8b:63:d6:e8:
64:24:1a:27:bf:a8:a3:c1:e2:50:c4:3f:c8:80:58:
6a:9b:90:c8:cb:bf:b6:76:fb:24:eb:54:e4:9f:80:
7a:99:9d:7c:9d:1d:f3:8c:fe:53:a2:21:6b:84:3a:
7e:ee:97:f6:e6:84:1f:86:cb:7d:94:d2:17:ae:63:
80:6d:89:ec:de:81:eb:b6:27:49:33:f6:b1:98:da:
1d:0b:14:4e:64:ea:8b:9c:ad:81:9c:30:45:07:8a:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:93:CB:B7:FB:72:42:C5:52:66:8D:B8:CE:C1:A2:17:9A:99:83:3A
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cb:c4:fc:d8:fc:01:4a:bc:69:56:3b:dc:3c:62:bd:0f:05:
52:6a:b2:2d:e4:a6:44:e4:2a:0b:c0:c7:89:28:c1:72:bb:cf:
cc:3b:9e:e8:13:a1:b5:f3:6f:3e:52:a0:eb:2b:dd:65:2c:e7:
14:65:a8:72:40:ff:fe:19:1d:15:06:ff:4f:77:b3:df:c1:57:
55:88:ea:24:2a:d7:5c:49:01:66:d0:77:4d:40:e8:63:c4:2a:
33:a8:8f:22:a8:07:a8:ef:f3:ab:61:52:f6:5f:b3:83:31:fb:
64:45:96:8e:3f:7a:bb:e1:7e:fb:d2:e2:1a:86:e0:d2:e0:16:
f7:b5:43:12:01:f0:d8:95:e6:75:96:a9:9b:7f:94:3f:85:a9:
c1:4f:3b:53:fd:91:d2:89:0a:49:bb:3c:8f:6f:72:c3:ac:1e:
ac:45:e0:d1:58:14:65:06:7b:5f:9a:06:ad:fd:17:bf:fa:32:
53:4e:c7:5b:87:20:03:d8:17:44:a9:9a:ad:ef:ed:dd:0c:49:
fa:a2:7a:0f:0f:cc:ad:6e:a9:09:bd:fc:60:98:0d:e1:05:87:
4d:1b:65:c8:cc:7f:83:53:75:3a:09:75:8b:c5:5f:a4:55:ad:
64:df:4c:22:0b:1e:72:01:a8:d6:87:9f:ee:76:fd:03:56:aa:
e8:c8:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:22 2026 by rpki-client