Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: mB4/ECrox7aZmMsV3SftXRIqM+E5hRbuW1vJrXojfiY=
Subject key identifier: 6E:BA:EC:DA:FA:EB:2D:70:F1:1B:36:C3:98:94:55:00:B6:6C:94:15
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 019CABD8E2686009F148FE95C2B14B9AB15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: hiiR8iUUeE28MJzVKooRTqG7bAl+EBmNRbPbrEXNjc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e2:68:60:09:f1:48:fe:95:c2:b1:4b:9a:b1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=6ebaecdafaeb2d70f11b36c398945500b66c9415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:f7:e0:bb:40:94:fd:85:f4:c1:8c:63:cd:
d2:1d:56:5c:65:b0:a3:e0:d1:3c:a5:d9:61:96:06:
0d:e2:06:28:09:c0:25:dc:60:1c:39:45:90:6e:2a:
46:e9:f0:90:1c:20:20:b1:9c:79:c4:ac:db:43:a1:
cb:26:06:22:f4:22:75:2f:59:32:47:a6:b1:49:ea:
7e:58:78:f9:a6:a7:af:ae:e7:7a:4e:3d:45:b6:b2:
d8:44:73:e5:5a:46:30:f6:e1:09:5f:79:a0:d4:29:
f1:db:a4:26:8c:db:60:46:5e:20:98:b5:f4:c3:da:
3f:ae:4b:3c:c9:96:f0:33:96:8f:f7:69:44:e4:8a:
46:28:5f:d2:29:53:df:df:6e:4f:79:89:20:dd:46:
5f:c9:6f:d7:67:ea:32:a3:33:ee:45:7e:60:af:25:
bc:5b:f3:83:93:1b:21:8f:5b:5b:c8:cb:bd:1c:9a:
0a:5f:e1:e9:bd:b4:31:9b:47:a8:dc:96:73:cb:11:
cb:e3:36:41:f3:23:47:f0:b3:71:79:9f:c7:ca:80:
7b:b7:4c:bd:91:b7:c7:b8:aa:c9:ee:20:34:95:01:
7c:a2:b2:e5:52:59:8f:12:9e:ae:1b:f7:16:09:b8:
89:48:46:e3:c0:39:02:5d:db:df:35:45:ee:02:d5:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:EC:DA:FA:EB:2D:70:F1:1B:36:C3:98:94:55:00:B6:6C:94:15
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:95:6f:c9:62:59:75:65:f3:5c:19:de:bc:f9:ee:60:43:db:
9a:88:94:dd:97:ab:d2:35:37:f3:b4:70:ec:d4:3b:c5:03:6e:
e9:7f:c7:5e:94:5f:ee:ee:7b:f8:e4:a6:b7:3f:10:5a:ee:39:
80:64:08:7e:94:a9:88:3b:85:6a:0a:d9:eb:3e:f6:20:ec:67:
15:43:a1:20:1d:14:45:02:ac:ee:42:49:e9:f3:a9:fe:6d:fe:
94:dd:f2:3a:de:08:1c:4d:37:74:10:d5:f0:8b:3e:66:c2:6f:
63:27:40:bc:78:91:c7:28:21:31:14:54:1d:57:93:b0:53:85:
35:aa:e6:7f:17:55:23:c4:0f:66:49:54:72:38:38:97:92:46:
d3:8b:b2:a6:79:52:5d:44:e3:b5:be:cd:bc:38:c3:fa:0c:c5:
ae:82:4f:4a:ba:da:7c:31:1e:8a:1a:1c:f2:14:d0:8e:58:63:
e9:81:6f:4d:2e:81:bf:86:f6:f8:00:15:f0:ca:1e:00:63:92:
f6:8a:39:bd:16:7a:e7:30:4e:55:72:35:75:57:f3:3e:3d:79:
74:b8:d9:03:1d:43:dd:b2:c4:79:f9:5d:f7:21:3c:64:96:9e:
bc:a8:e3:f2:d3:7c:0e:47:cd:3f:a5:f2:83:46:e5:36:9c:01:
04:0e:08:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2OJoYAnxSP6VwrFLmrFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDgyZmIzYzlmOWFmNDcwZTRlNDhiNmRmMzgyZDNkNTAx
NTQ2NjEwHhcNMjYwMzAyMDAwMDQzWhcNMjYwMzAzMDAwMDQzWjAzMTEwLwYDVQQD
Eyg2ZWJhZWNkYWZhZWIyZDcwZjExYjM2YzM5ODk0NTUwMGI2NmM5NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzf34LtAlP2F9MGMY83SHVZcZbCj
4NE8pdlhlgYN4gYoCcAl3GAcOUWQbipG6fCQHCAgsZx5xKzbQ6HLJgYi9CJ1L1ky
R6axSep+WHj5pqevrud6Tj1FtrLYRHPlWkYw9uEJX3mg1Cnx26QmjNtgRl4gmLX0
w9o/rks8yZbwM5aP92lE5IpGKF/SKVPf325PeYkg3UZfyW/XZ+oyozPuRX5gryW8
W/ODkxshj1tbyMu9HJoKX+HpvbQxm0eo3JZzyxHL4zZB8yNH8LNxeZ/HyoB7t0y9
kbfHuKrJ7iA0lQF8orLlUlmPEp6uG/cWCbiJSEbjwDkCXdvfNUXuAtVjAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG667Nr66y1w8Rs2w5iUVQC2bJQVMB8GA1UdIwQY
MBaAFD5IL7PJ+a9HDk5Itt84LT1QFUZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQt
ZGI0ZDcxNDg1OWI1LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQtZGI0ZDcxNDg1OWI1
LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5VvyWJZ
dWXzXBnevPnuYEPbmoiU3Zer0jU387Rw7NQ7xQNu6X/HXpRf7u57+OSmtz8QWu45
gGQIfpSpiDuFagrZ6z72IOxnFUOhIB0URQKs7kJJ6fOp/m3+lN3yOt4IHE03dBDV
8Is+ZsJvYydAvHiRxyghMRRUHVeTsFOFNarmfxdVI8QPZklUcjg4l5JG04uypnlS
XUTjtb7NvDjD+gzFroJPSrrafDEeihoc8hTQjlhj6YFvTS6Bv4b2+AAV8MoeAGOS
9oo5vRZ65zBOVXI1dVfzPj15dLjZAx1D3bLEefld9yE8ZJaevKjj8tN8DkfNP6Xy
g0blNpwBBA4INg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:52 2026 by rpki-client