Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier: Ac8ubS5PmHetNWFVPBC6DGmzAra6ztAhN8CEeXCOplI=
Subject key identifier: AD:22:2A:52:9F:9A:85:8A:40:B9:F2:1D:69:08:5E:93:5E:72:CE:7A
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial: 019CAD59DCCBF64628261AD61D2E3B50E270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number: 10EB
Signing time: Mon 02 Mar 2026 07:01:13 +0000
Manifest this update: Mon 02 Mar 2026 07:01:13 +0000
Manifest next update: Tue 03 Mar 2026 07:01:13 +0000
Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: V9B/+e6hB7LfFHVi5TUWbJmsqX9MbbRyspSpVulvVSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:dc:cb:f6:46:28:26:1a:d6:1d:2e:3b:50:e2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Validity
Not Before: Mar 2 07:01:13 2026 GMT
Not After : Mar 3 07:01:13 2026 GMT
Subject: CN=ad222a529f9a858a40b9f21d69085e935e72ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:9a:eb:bb:a6:3e:df:d7:96:3a:ad:eb:37:
ce:91:f0:67:34:32:98:b5:b4:31:77:11:35:c1:8a:
ba:f5:e9:fb:72:6e:7c:c0:ae:bf:b4:80:e7:fe:18:
c0:75:9b:8a:b1:33:fd:41:fe:1c:36:4a:c9:aa:e5:
de:36:ed:f5:db:ac:7b:35:91:63:66:e7:21:85:ba:
df:e4:5a:c7:d3:99:ba:ca:98:92:1f:d0:e5:b1:8d:
bc:d5:89:62:14:75:24:8a:e5:46:49:d5:9a:7e:9b:
fc:cc:7e:d5:be:9f:96:c5:e8:14:76:a6:18:c9:4e:
f4:9a:d9:7b:2c:01:3a:8c:f4:54:9b:26:2b:5b:60:
0e:f1:0a:71:d8:21:e8:00:13:ba:d0:7a:f3:85:55:
16:c1:ce:5b:2b:56:82:df:83:8f:5e:28:b8:9e:8f:
0e:11:bf:ee:ef:43:d9:00:08:90:69:fe:2f:14:86:
11:f9:38:bb:63:ec:e3:d5:53:9f:d4:cb:32:22:8a:
6a:89:1c:db:8a:4a:99:5c:6d:1f:d6:69:32:4f:e2:
ce:bc:3e:82:f9:9e:28:0c:e8:bf:37:3a:bc:bc:27:
0e:f3:ea:06:f4:03:24:8d:70:1a:e3:2b:50:36:4e:
da:93:6a:ce:4f:8d:40:8b:e6:b2:a2:5d:a2:f0:a4:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:2A:52:9F:9A:85:8A:40:B9:F2:1D:69:08:5E:93:5E:72:CE:7A
X509v3 Authority Key Identifier:
keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:df:41:ca:85:5a:86:cb:e7:1f:38:6a:7c:62:2d:ab:8b:a3:
5a:85:60:3f:c9:8d:38:e7:25:03:2b:76:44:da:41:2f:d4:0f:
7e:80:ae:6e:46:e1:ed:f8:15:bc:f9:a0:71:1c:a1:82:91:94:
2c:e1:4d:db:f1:c6:7a:bd:84:64:95:b1:07:05:ee:a6:36:82:
76:8b:2d:6a:e2:67:42:8e:20:c8:2e:1f:bf:65:8a:31:6c:4e:
e1:58:5b:ea:d9:fc:ba:88:8e:a8:04:2e:9b:67:cd:62:49:fa:
6f:5e:72:cb:e9:e1:6c:61:75:ea:c9:b6:88:b7:8e:f0:fb:d5:
3f:64:30:13:f5:50:2d:77:69:a6:87:c4:de:c8:b0:4d:ad:b4:
c4:8a:57:fa:de:27:8d:cb:7c:f4:71:58:ae:23:27:c9:d7:86:
b7:42:83:ea:5f:06:7d:c1:3d:25:6f:04:59:ea:b9:65:43:50:
c0:de:dd:44:d6:de:71:e3:2e:5e:dc:54:1a:55:5d:1f:90:7e:
79:18:6a:7d:00:17:87:c3:90:e8:8a:27:80:b1:9e:6d:c0:91:
93:84:2e:99:0b:0d:ee:c7:d1:a5:53:4c:17:24:f6:0b:c4:0e:
dc:7f:d1:89:27:e5:28:ef:1e:c9:2a:5d:2c:f8:51:97:83:c4:
0b:d6:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:49 2026 by rpki-client