Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: 9bd1ImvatRGWeqP2s0Fho6FHRoiHKc/FYgBtIqjpWlc=
Subject key identifier: B3:AA:C5:2F:7E:ED:F3:8A:A6:5A:CC:3B:B5:2A:3B:1B:48:BD:08:9D
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 019CAAC6567A2A02BF8768F45B28ABB66AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 1675
Signing time: Sun 01 Mar 2026 19:00:50 +0000
Manifest this update: Sun 01 Mar 2026 19:00:50 +0000
Manifest next update: Mon 02 Mar 2026 19:00:50 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: pbI9dcouWWKEdAKA+qsUVq1vfcN8hQ2nsx43wLH2jkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:56:7a:2a:02:bf:87:68:f4:5b:28:ab:b6:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Mar 1 19:00:50 2026 GMT
Not After : Mar 2 19:00:50 2026 GMT
Subject: CN=b3aac52f7eedf38aa65acc3bb52a3b1b48bd089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:1d:0d:d5:08:2c:0b:f3:55:bf:d1:42:56:
2e:fb:24:86:89:82:41:64:47:22:79:ff:48:cd:15:
57:1e:0b:92:0f:d1:1f:62:80:d9:f4:f3:cc:ad:37:
7e:31:0f:4a:2a:7e:89:33:34:03:78:62:55:a9:f1:
48:a8:6b:bd:ab:6b:7f:7e:be:1f:d4:5d:0e:8d:91:
d7:d7:95:f5:5f:0b:f4:54:ae:78:8b:c5:f3:f3:c3:
09:de:1e:f8:ee:5e:79:15:dc:86:e7:e9:47:6d:d6:
9d:90:ac:b1:e7:9b:0c:cc:9f:6e:56:e8:e4:6d:35:
73:ae:40:63:17:e9:cb:ef:69:b5:de:c5:0f:c3:9d:
1b:86:99:49:d8:41:35:da:6f:98:98:b4:01:78:f2:
82:d8:b0:51:74:82:bd:6c:69:8c:85:e0:06:5d:73:
36:85:d7:74:de:3f:80:2e:22:08:8d:f4:ae:22:98:
72:46:c5:00:0e:9b:b8:47:70:03:c6:b1:bd:7d:5c:
4f:c0:42:ac:ba:0d:a6:d2:32:ef:29:10:85:9d:ad:
f9:5b:6f:c4:81:89:32:22:e6:da:6d:ea:57:b6:2a:
6c:de:04:84:61:04:54:9c:73:d0:63:38:84:87:b3:
47:64:13:af:68:eb:78:87:80:ab:bb:36:8f:94:76:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:C5:2F:7E:ED:F3:8A:A6:5A:CC:3B:B5:2A:3B:1B:48:BD:08:9D
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ef:f5:26:13:42:54:fe:fc:9f:33:fe:3f:a9:e8:7c:ca:ad:
5b:68:30:c2:10:a4:73:d0:16:f2:fd:e3:1c:37:99:60:b5:ce:
fc:64:7a:a7:51:bf:4e:cb:98:c3:f7:4b:34:b8:47:c3:ae:31:
2b:3b:46:2e:71:76:d8:89:f2:39:d0:71:5b:d3:88:76:2c:12:
56:93:92:e2:6f:9f:7e:c3:e1:ad:1c:ca:06:cc:43:3c:e6:67:
f4:e1:17:dd:ad:1d:23:6d:ae:be:96:91:25:72:82:bc:01:e1:
02:0c:96:70:e4:0e:97:f2:3b:3e:55:3f:c4:84:df:22:0e:99:
a2:97:2f:83:7b:af:e7:07:81:33:75:25:2a:16:2e:5a:00:69:
7a:30:8b:7b:72:70:e9:73:96:98:dc:cd:47:9c:43:e5:55:24:
46:71:90:53:3a:f6:4f:79:af:0c:70:31:cc:4a:de:21:67:29:
62:20:d0:3e:5b:8f:f4:26:72:cc:53:05:5a:d1:6d:c6:98:ec:
06:ea:aa:a0:81:a9:f5:57:8c:c6:c5:09:1e:74:90:9a:8d:02:
85:ee:1f:a4:5c:bb:78:7b:29:4a:cd:45:a8:66:d8:bf:bc:89:
c5:43:84:ec:fb:f7:6a:8e:2f:fc:62:d2:34:6e:b3:ac:c8:9b:
15:b9:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:37 2026 by rpki-client