Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: OglLU33oTQXc1StoyxRPzGeh4nSnL7zydgWqUMrcdYo=
Subject key identifier: 8F:CD:6F:23:74:C4:8B:3C:BB:D1:42:0C:F0:74:7A:EC:71:3D:20:BC
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019EB7D7C8D7B498C4B5847A0F2B3129E414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0B80
Signing time: Thu 11 Jun 2026 18:00:32 +0000
Manifest this update: Thu 11 Jun 2026 18:00:32 +0000
Manifest next update: Fri 12 Jun 2026 18:00:32 +0000
Files and hashes: 1: MlJBYbax3t58n6UyQAjgc7I1pFo.roa (hash: e3iDQ3FYINgIQmMaeKUDVugt5cK6QeLA+QYPHV3bv/I=)
2: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: OMySDbLBYr8dqZMH5nuwsxN1NGhecNSBU/HZVTkUB/4=)
3: rdAuEK8upk6mx2gdhzDvAiBjkpA.roa (hash: neSutvd2UdygUv3ATr8lKmwONQiQv6cC5T84e4a3szg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:c8:d7:b4:98:c4:b5:84:7a:0f:2b:31:29:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jun 11 18:00:32 2026 GMT
Not After : Jun 12 18:00:32 2026 GMT
Subject: CN=8fcd6f2374c48b3cbbd1420cf0747aec713d20bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:49:bc:71:ea:e9:3a:51:5e:b3:54:61:cd:
76:ee:59:f1:2b:8e:91:d2:97:f4:5d:95:8a:e2:5c:
4a:07:74:5d:19:56:13:ab:5a:14:49:35:11:42:df:
c3:69:52:42:4a:3e:e3:28:64:59:61:fc:05:d4:cf:
ba:bb:f5:8d:66:39:8b:05:eb:5c:10:c6:1b:86:37:
9d:93:ff:fd:6b:ce:39:ee:e1:bd:34:9f:6f:5a:e1:
1e:02:43:de:80:9e:9c:0a:95:38:0a:05:95:b0:f7:
85:10:30:22:11:cc:66:33:4f:28:27:66:0e:a8:c8:
4d:e8:f5:29:f6:8e:cc:97:45:fe:cf:23:e2:7f:46:
a5:d3:65:c3:86:84:bf:9c:99:cf:1b:90:27:74:9f:
cc:25:37:1e:bb:3a:b7:90:02:a0:c2:22:08:f8:7b:
be:6d:05:f5:6d:47:d0:6d:29:5a:8d:9b:66:f0:e6:
d7:58:32:0b:29:e2:a3:cf:ec:52:24:11:ea:8f:4e:
5f:d6:64:9c:73:c6:83:e5:1f:a1:0c:7c:9a:dc:92:
32:29:2e:f5:e6:b3:48:4c:bb:f6:41:02:6d:2a:a4:
c6:6a:d0:77:48:fe:ee:3a:8c:8f:d3:c6:d8:38:a1:
44:3b:67:1d:e6:06:82:3c:42:20:44:67:e3:a1:fd:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:6F:23:74:C4:8B:3C:BB:D1:42:0C:F0:74:7A:EC:71:3D:20:BC
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:68:99:7a:03:36:2a:a2:ce:b8:b5:d3:8b:43:3f:d5:ee:88:
ee:c4:ea:ef:ca:c2:29:6f:2e:76:cb:b0:d6:da:00:3e:20:46:
ef:63:53:ac:24:5a:e9:cc:05:36:49:ef:91:74:8c:b8:c3:fa:
eb:54:d4:aa:e0:92:03:b3:31:95:5a:ad:eb:ce:fd:03:cf:0f:
96:95:82:c5:1b:87:c2:d9:64:16:f0:d3:54:a8:0f:43:f5:25:
1c:99:b2:9c:de:2c:36:ed:6b:bb:cb:43:4f:bd:ad:88:28:53:
d3:bb:29:f5:ad:07:bf:25:95:43:dc:db:36:f4:99:9a:71:a3:
93:41:86:31:08:ab:99:8e:a9:03:80:2e:3c:be:0f:bf:e3:2b:
d7:2c:45:91:c1:1f:14:ee:76:7a:61:17:32:6a:d5:a8:14:9c:
93:08:57:09:c4:65:51:b6:68:45:26:b8:e6:5c:bc:7a:4e:b6:
44:b7:68:2d:35:f1:5e:ec:91:d6:04:ed:cf:eb:cb:a9:4f:78:
a2:f9:55:c1:51:4c:90:a4:2a:86:36:2e:5f:cf:a7:78:e9:f9:
dd:78:08:ca:f0:6c:d4:2f:85:a0:6e:88:2c:45:a6:d1:8b:7f:
72:e2:01:a4:8a:27:1e:47:27:1a:fd:09:dd:d4:96:90:9f:99:
34:67:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:29:52 2026 by rpki-client