Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: C+cDohuilprOZ9015j8K7VeNGEA2LaAGqwKr8r13ARk=
Subject key identifier: C5:97:A5:B4:DE:BE:89:A4:12:2D:EC:63:90:CC:AA:A4:FD:3B:9C:FB
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 019D99630F95E622367903E08B4049734365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:39 +0000
Manifest this update: Fri 17 Apr 2026 03:01:39 +0000
Manifest next update: Sat 18 Apr 2026 03:01:39 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: gkbQICNSUStgJIrip7PQpKN6/qIwsA9CR4zTU1P5ieo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0f:95:e6:22:36:79:03:e0:8b:40:49:73:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Apr 17 03:01:39 2026 GMT
Not After : Apr 18 03:01:39 2026 GMT
Subject: CN=c597a5b4debe89a4122dec6390ccaaa4fd3b9cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:4a:b3:9c:34:e3:5f:d4:f3:ec:ea:c7:ff:
fc:07:7a:fd:5c:fd:a3:a6:b6:8b:c1:86:be:64:c5:
65:99:cd:d1:1a:7e:13:75:d8:00:21:cb:70:55:0b:
19:06:61:93:32:f4:49:11:58:ec:b8:64:31:d8:9f:
40:35:e4:0e:4b:f7:1c:bb:15:76:d7:06:3f:ee:e8:
56:ca:6c:19:ba:61:d5:dd:81:41:91:85:88:7f:1f:
de:27:e3:33:ae:1c:e8:d2:07:41:7b:e4:f9:42:5b:
10:65:cf:e0:12:7d:fd:2c:ad:c4:cb:e7:eb:85:47:
2f:9d:3b:d9:37:44:a8:dc:1a:db:7f:40:2f:24:b0:
f7:56:9a:fd:29:5e:c1:d5:fa:83:c8:87:57:00:17:
8b:61:d6:de:79:2c:a7:e7:b7:80:b7:06:46:eb:a7:
6e:06:54:22:ba:ac:31:51:c4:fa:80:3e:1d:7a:67:
72:04:01:87:89:1e:6e:3b:74:70:99:62:62:23:e7:
96:30:0b:db:66:0a:2d:48:79:39:73:8f:5b:ac:4a:
e2:e4:c3:f6:d4:90:bf:d0:3c:99:6b:c1:16:4a:2f:
6c:d1:5a:10:97:29:d4:bd:91:51:31:67:7d:f7:40:
4e:f5:d4:c8:4c:23:6b:fa:db:7c:fa:cb:f6:67:c5:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:A5:B4:DE:BE:89:A4:12:2D:EC:63:90:CC:AA:A4:FD:3B:9C:FB
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:64:fb:d9:ae:56:18:88:87:c6:7b:08:a4:92:89:66:e0:8f:
c3:e6:0a:cd:ef:d3:8c:be:bf:62:61:4b:fe:ae:ee:cd:8b:55:
af:90:d9:16:c3:a6:1d:25:8f:87:1c:59:2a:3e:8d:0a:42:42:
aa:d7:53:f1:27:04:5d:a2:eb:09:34:5a:75:d3:6d:56:ab:40:
99:ac:4c:7d:6e:5c:aa:e3:cb:da:2e:4f:83:41:af:11:c6:a5:
60:81:01:50:f6:97:7f:42:ee:79:a5:88:ff:47:c2:e6:f3:a0:
ea:8f:0c:8f:6f:8d:09:28:65:71:ea:7b:9d:3c:8d:65:05:3f:
09:aa:91:94:45:1f:aa:27:9a:a4:5e:96:00:e5:fc:f6:e9:81:
66:be:b3:6e:0e:11:d7:88:d8:c2:47:8c:e8:a3:b6:b4:4e:93:
8a:41:a9:18:bc:91:6a:e9:2f:be:18:90:c8:03:c8:33:9c:3d:
5e:41:bb:6d:34:af:ae:e7:ed:92:eb:80:6e:1c:0b:31:b4:28:
53:8a:74:31:ba:f4:20:fa:5e:d3:69:8e:2d:50:0c:e3:67:6d:
df:6a:be:f9:fc:73:2d:5b:f3:8e:bc:bb:62:60:a0:47:19:22:
bf:fc:bf:08:1b:0c:0a:b3:d5:a8:5f:2f:7d:a5:1d:1e:75:b0:
65:cf:e1:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYw+V5iI2eQPgi0BJc0NlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDgyZmIzYzlmOWFmNDcwZTRlNDhiNmRmMzgyZDNkNTAx
NTQ2NjEwHhcNMjYwNDE3MDMwMTM5WhcNMjYwNDE4MDMwMTM5WjAzMTEwLwYDVQQD
EyhjNTk3YTViNGRlYmU4OWE0MTIyZGVjNjM5MGNjYWFhNGZkM2I5Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm5Ks5w041/U8+zqx//8B3r9XP2j
praLwYa+ZMVlmc3RGn4TddgAIctwVQsZBmGTMvRJEVjsuGQx2J9ANeQOS/ccuxV2
1wY/7uhWymwZumHV3YFBkYWIfx/eJ+Mzrhzo0gdBe+T5QlsQZc/gEn39LK3Ey+fr
hUcvnTvZN0So3Brbf0AvJLD3Vpr9KV7B1fqDyIdXABeLYdbeeSyn57eAtwZG66du
BlQiuqwxUcT6gD4demdyBAGHiR5uO3RwmWJiI+eWMAvbZgotSHk5c49brEri5MP2
1JC/0DyZa8EWSi9s0VoQlynUvZFRMWd990BO9dTITCNr+tt8+sv2Z8WxuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWXpbTevomkEi3sY5DMqqT9O5z7MB8GA1UdIwQY
MBaAFD5IL7PJ+a9HDk5Itt84LT1QFUZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQt
ZGI0ZDcxNDg1OWI1LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQtZGI0ZDcxNDg1OWI1
LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2T72a5W
GIiHxnsIpJKJZuCPw+YKze/TjL6/YmFL/q7uzYtVr5DZFsOmHSWPhxxZKj6NCkJC
qtdT8ScEXaLrCTRaddNtVqtAmaxMfW5cquPL2i5Pg0GvEcalYIEBUPaXf0LueaWI
/0fC5vOg6o8Mj2+NCShlcep7nTyNZQU/CaqRlEUfqieapF6WAOX89umBZr6zbg4R
14jYwkeM6KO2tE6TikGpGLyRaukvvhiQyAPIM5w9XkG7bTSvruftkuuAbhwLMbQo
U4p0Mbr0IPpe02mOLVAM42dt32q++fxzLVvzjry7YmCgRxkiv/y/CBsMCrPVqF8v
faUdHnWwZc/hnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:02 2026 by rpki-client