Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: vACpqjQ4AjXX2Ra/lOI0epck50ynuL68aprup96BymM=
Subject key identifier: 34:13:F9:72:B3:AF:07:E8:F6:79:B2:C1:9E:61:02:36:B5:7F:CA:16
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 019CAD5A0CA574244F2AB211B525CDEE2B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 0B5F
Signing time: Mon 02 Mar 2026 07:01:25 +0000
Manifest this update: Mon 02 Mar 2026 07:01:25 +0000
Manifest next update: Tue 03 Mar 2026 07:01:25 +0000
Files and hashes: 1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: yu0c9xHZBDFGbNGs33Tbrmm7usWRZbJbuWs/73VIJEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0c:a5:74:24:4f:2a:b2:11:b5:25:cd:ee:2b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Mar 2 07:01:25 2026 GMT
Not After : Mar 3 07:01:25 2026 GMT
Subject: CN=3413f972b3af07e8f679b2c19e610236b57fca16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:b0:9c:e1:02:4e:69:ac:e3:92:ea:83:e9:
fe:60:58:7e:41:52:dd:e7:47:8b:18:d1:d2:08:4b:
ab:df:ae:aa:96:28:19:27:a8:49:c4:36:47:4d:d5:
79:13:69:83:82:84:7d:03:e1:61:e3:ea:30:fc:36:
00:08:62:07:1c:03:32:62:e2:c3:a9:92:05:b3:98:
06:84:d0:4e:c8:18:8d:ad:23:07:f2:0f:7b:8b:9a:
99:af:a0:04:96:cd:17:b2:80:7d:04:cf:87:a5:26:
c4:d7:cb:cb:7d:d1:0c:0a:4f:b9:fb:6a:1f:5e:9d:
4a:41:08:2c:c3:78:9e:b4:ae:61:44:a3:e3:cc:54:
06:67:da:9c:0c:dc:e3:36:1b:1c:0c:cb:0e:e0:53:
55:02:ac:32:39:2a:1d:4f:82:8e:b1:99:b5:25:8c:
f1:1a:86:c5:93:fc:47:12:8a:d3:cb:08:73:d9:38:
d7:ce:21:ec:8f:14:b8:e9:80:4b:3e:87:ce:6a:62:
3c:4a:b6:24:c6:21:ad:4d:c8:6e:d4:e4:6b:4f:a2:
c4:71:e8:6b:2a:dd:86:77:94:76:71:d0:41:08:8b:
e6:8b:89:b2:3e:28:69:14:ca:95:ea:08:b8:ad:d9:
59:25:00:c5:cc:f2:da:f9:fd:d2:c8:17:f1:7c:ae:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:13:F9:72:B3:AF:07:E8:F6:79:B2:C1:9E:61:02:36:B5:7F:CA:16
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5f:3e:9d:9f:3b:11:fb:11:a0:c9:87:7c:68:48:93:2f:6e:
b4:58:52:5f:04:ab:4b:b4:e3:1b:49:56:a6:eb:4e:d0:02:2d:
e6:45:a4:88:1c:4d:c0:11:f4:ac:02:60:99:3e:4a:99:03:d3:
e2:57:bf:16:d9:5d:b4:88:8a:1e:72:cb:22:db:ac:04:00:7a:
43:d1:59:5f:2b:92:b4:e5:63:ab:df:59:e2:6e:73:12:ff:5f:
55:16:35:69:e7:10:ce:a7:6b:a8:48:f4:c4:e3:73:18:68:7a:
27:ab:73:a2:01:23:e8:50:bf:2a:9a:fa:a4:a1:d6:26:ac:69:
9c:ad:d0:2a:b7:c5:29:74:b3:29:c2:f7:99:e4:c9:47:04:a5:
12:43:71:84:1a:18:28:fd:d8:d1:4e:8c:83:35:63:4d:8d:d8:
a5:aa:d5:43:50:07:fb:53:1c:60:dc:3a:78:90:ee:1d:a3:b5:
04:d0:0c:76:f6:7f:40:63:36:94:94:86:f9:83:08:97:f5:ff:
99:27:7c:69:34:f6:e2:a5:e8:27:85:2d:df:31:84:ab:72:c8:
1e:3b:a4:35:a4:af:0d:82:e3:4f:fb:4c:bc:11:f9:94:20:cf:
f4:c6:6d:25:d7:3c:d1:10:ff:04:e0:ec:f9:6b:d7:a3:7c:e9:
d8:d2:32:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:29 2026 by rpki-client