Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier: Q/EBczC1Rq885Di8zg0KjAkl84eCkoIxJA80WW0DztI=
Subject key identifier: A3:89:84:F3:ED:CB:CB:7A:C1:DC:FE:26:94:5F:70:90:9C:68:7C:32
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial: 019D9AE3A9C3411FD78A0E25D0DABC2FB84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number: 1166
Signing time: Fri 17 Apr 2026 10:01:44 +0000
Manifest this update: Fri 17 Apr 2026 10:01:44 +0000
Manifest next update: Sat 18 Apr 2026 10:01:44 +0000
Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: JB2ab5lvPcwIAydgTPW8hoiBUo0iDOkELqEX34Lfbe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a9:c3:41:1f:d7:8a:0e:25:d0:da:bc:2f:b8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Validity
Not Before: Apr 17 10:01:44 2026 GMT
Not After : Apr 18 10:01:44 2026 GMT
Subject: CN=a38984f3edcbcb7ac1dcfe26945f70909c687c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:4f:38:94:5d:8d:18:2e:9d:57:73:32:e1:
12:3a:e1:0f:1b:fa:cf:89:8c:a8:b1:1d:be:53:b1:
78:56:52:1e:2e:09:3f:81:1d:5d:20:57:7c:06:96:
d4:60:3a:21:86:c0:e9:8c:62:8a:4e:01:db:f3:0a:
53:bf:cd:b3:37:af:50:3d:70:89:85:9b:d5:20:8a:
14:91:e8:b6:95:fa:a8:92:19:e3:fc:f3:79:75:78:
bd:01:62:87:7a:3d:91:ac:55:cb:98:b6:77:59:03:
8f:77:b5:d3:10:bb:11:dc:63:d5:6c:15:64:3e:a0:
35:6d:7a:7f:4d:5d:f7:de:5c:42:56:47:f5:60:74:
d4:73:7f:03:aa:4a:24:77:80:d0:65:df:6c:1e:21:
24:c4:51:56:54:e3:7e:88:9d:74:14:e3:72:7e:8c:
22:e3:2d:11:ad:ce:84:a1:20:15:f8:48:95:e2:02:
b1:1e:bc:57:6d:17:5f:17:77:15:b3:ef:8e:1b:87:
ee:da:80:b3:a7:65:b9:d9:5d:c8:f7:a0:69:11:75:
7b:03:45:3c:32:5c:35:b6:86:5b:60:bb:37:61:63:
0b:34:92:ff:12:c9:03:f4:23:08:2e:3a:6f:53:49:
5f:c8:b8:ce:76:19:6d:02:cd:00:e9:99:10:91:99:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:84:F3:ED:CB:CB:7A:C1:DC:FE:26:94:5F:70:90:9C:68:7C:32
X509v3 Authority Key Identifier:
keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3b:08:e0:53:62:4a:e2:59:77:6d:3d:57:c8:5e:9e:ff:0f:
94:88:8e:76:33:50:97:48:f6:bc:87:81:7f:cf:ca:90:a6:fe:
8f:2b:f1:7e:cd:45:d9:c5:62:f7:d7:48:04:85:b9:b8:e3:81:
b4:01:df:86:8b:6a:da:76:d5:13:b3:93:f4:11:0d:c4:3f:0b:
2c:83:f3:93:be:90:24:1e:84:f5:99:86:8a:99:e2:58:c9:d9:
89:13:6c:44:dc:3e:45:95:28:1e:03:11:c4:6f:8d:a4:1c:bb:
a5:9c:81:82:37:7f:12:d5:4a:86:70:dc:f8:6e:1d:32:e2:be:
15:14:b0:1b:79:5a:d9:5b:0f:45:17:dc:25:46:bf:e6:da:60:
9d:cb:15:ea:cc:cb:cf:6b:b8:ef:05:90:82:25:a6:e7:e6:8c:
9b:6c:ca:d6:1b:7f:ec:85:3e:2b:ec:6c:d8:ad:68:86:01:b0:
4d:56:0e:47:8d:18:62:e3:6a:03:a5:34:ee:a4:72:fb:b1:5f:
9b:14:2e:92:94:e7:1f:d6:c9:52:10:69:69:54:fe:e9:c5:0e:
c5:9e:2d:68:e8:41:54:a8:83:16:fa:2b:d3:fe:0f:4b:fd:a0:
06:f5:d4:10:0f:52:af:80:3d:01:33:b0:83:79:d5:e3:69:a2:
3e:4b:3c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:51 2026 by rpki-client