Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: KCvf4cVHHHre3MDX6D80J1bXznjIc18txe+50OElOAw=
Subject key identifier: 22:2B:B1:47:DB:2C:55:8A:8A:8A:46:E7:9A:97:91:4E:8B:59:53:60
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 019D98F52F7CCC244E7AA1FCC3293784C51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 0BD9
Signing time: Fri 17 Apr 2026 01:01:38 +0000
Manifest this update: Fri 17 Apr 2026 01:01:38 +0000
Manifest next update: Sat 18 Apr 2026 01:01:38 +0000
Files and hashes: 1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: znQ1qwFPaJSVhcT0e65+G19sIo4k3uGC5UutJmn4Jso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2f:7c:cc:24:4e:7a:a1:fc:c3:29:37:84:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Apr 17 01:01:38 2026 GMT
Not After : Apr 18 01:01:38 2026 GMT
Subject: CN=222bb147db2c558a8a8a46e79a97914e8b595360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:ec:1f:5b:13:d4:b7:92:48:ec:de:13:19:
da:a5:f3:d7:f3:f8:21:03:ca:e4:8d:66:99:86:db:
f7:60:5a:dd:7a:84:af:4d:a0:a5:bd:9b:25:bc:af:
37:3a:3d:bb:43:95:a5:ff:ec:2e:00:5d:29:37:fd:
cd:de:32:43:77:dc:63:a6:a8:5e:33:21:ec:6d:0f:
a6:94:47:ff:27:b2:97:5d:fe:b6:ab:a6:f8:8d:b6:
5f:12:78:36:a0:d9:c9:90:0f:57:45:36:39:ac:85:
84:a5:05:70:b4:bc:1d:f8:51:a8:42:86:54:08:e5:
c0:9e:cc:a8:6e:bb:b7:5c:fb:7b:b6:88:20:8f:d8:
55:40:0d:76:49:93:eb:94:49:97:fa:6d:65:b5:bf:
2b:ba:24:1a:7a:07:29:68:84:ea:3c:09:a5:64:4d:
8c:c8:33:72:52:34:d1:7a:3b:8d:82:bb:bc:33:dc:
10:34:00:59:8d:c2:c8:4d:8d:fa:24:e9:89:ea:00:
2a:a0:a2:07:80:83:f7:7d:3f:c6:77:0d:48:0f:6a:
f8:da:5c:bf:dd:c7:9f:0b:a2:9f:84:f1:98:04:f4:
75:46:f9:d8:e4:a1:b9:ea:2d:b1:2f:5b:cd:1a:ec:
29:a7:21:06:72:c1:50:a0:85:f2:f7:1c:9f:98:29:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:B1:47:DB:2C:55:8A:8A:8A:46:E7:9A:97:91:4E:8B:59:53:60
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5f:68:38:49:41:e0:ef:73:2c:9b:ff:d9:d1:4a:8b:92:bd:
bb:e3:b6:c0:c1:72:e9:65:af:0a:5b:de:82:df:28:93:49:fd:
44:2a:85:5b:9d:80:c5:c4:35:be:63:b8:0d:c3:08:6b:99:cd:
ab:66:11:ac:84:df:8c:bf:ff:32:8e:56:3b:0a:52:25:f0:17:
60:5c:01:ab:57:0c:3e:0e:3b:c0:e0:53:de:dd:20:88:4f:96:
ed:06:4f:1c:f8:23:33:94:b3:93:d6:55:dd:46:fc:c4:ac:0a:
76:78:64:a3:c1:00:be:82:5e:90:cb:61:dd:40:c9:e4:9d:8c:
80:0e:c2:cc:13:5e:3b:cf:1a:54:d9:c9:b0:81:18:12:28:f8:
91:12:da:c2:3c:ae:98:e2:02:76:cc:53:31:ad:12:ff:d1:be:
47:3a:61:4c:34:2f:25:b4:c5:c4:01:1e:b7:2a:27:cb:7a:8f:
03:93:77:4f:81:a0:a1:d0:fe:4e:ad:54:63:ab:7e:e0:f2:cf:
11:bb:77:df:7d:35:22:5a:bb:23:4d:d6:15:af:5f:cd:2b:57:
1e:27:44:53:b9:79:26:a5:37:f1:c3:0a:fe:ee:d7:32:d0:54:
a6:f3:11:98:ed:a7:db:56:88:35:de:7b:a0:2e:19:77:f1:59:
e6:8b:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:25 2026 by rpki-client