Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: Cz893i8OtMX59bqLeDxRxYOGRtbXKlJI/XjCf3foOpc=
Subject key identifier: 36:A8:58:76:E4:C8:6B:48:75:19:92:86:0C:6F:97:B1:7A:97:1B:E1
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 019D9C635D66CADCEF56D21DCB0B9F41020E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 0752
Signing time: Fri 17 Apr 2026 17:00:50 +0000
Manifest this update: Fri 17 Apr 2026 17:00:50 +0000
Manifest next update: Sat 18 Apr 2026 17:00:50 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: M+bBLGptwjlWok+g5S2OSexMUD4RGCxuzRxL5KSqdTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:5d:66:ca:dc:ef:56:d2:1d:cb:0b:9f:41:02:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Apr 17 17:00:50 2026 GMT
Not After : Apr 18 17:00:50 2026 GMT
Subject: CN=36a85876e4c86b48751992860c6f97b17a971be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:c1:60:aa:de:2f:5f:72:8e:6f:d4:1b:8d:
eb:74:41:da:dc:c9:00:d2:48:d3:2b:60:c4:20:9c:
db:49:40:e2:64:78:4a:d6:73:e3:24:35:ba:76:94:
a1:c8:63:f9:bb:12:a2:52:05:9c:61:c2:62:c4:ac:
d5:11:5f:b4:de:2e:8d:4a:0a:03:34:e1:c9:df:72:
68:c8:e8:a8:71:de:77:71:ca:1a:a4:7b:37:88:65:
1b:75:42:af:0e:3d:34:b0:ce:42:c1:73:1e:7f:05:
0b:9f:dc:80:1b:30:4b:f1:bd:1e:15:7c:78:e2:f6:
da:20:cb:00:b5:e2:17:58:16:b1:0f:55:f8:d9:34:
12:a6:f8:c8:07:a4:18:b4:b3:b4:33:9a:3d:58:34:
8f:c9:80:b2:90:9e:0e:95:9d:4d:2d:d7:a4:5d:d0:
74:3a:4d:cc:41:9e:ca:fd:ca:79:eb:f8:6d:a7:1e:
f5:be:45:c5:77:b9:b0:82:db:74:47:b2:63:0f:45:
ac:bf:ce:77:e4:2f:d8:e3:8f:22:dd:e2:10:d6:ec:
2b:2e:01:79:81:88:1d:cf:3c:81:dd:eb:93:1d:3c:
43:c1:25:4b:d9:0e:84:49:eb:a7:98:a5:01:45:73:
c7:0d:04:1d:dd:bd:d1:cf:ec:5f:62:c4:27:72:44:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A8:58:76:E4:C8:6B:48:75:19:92:86:0C:6F:97:B1:7A:97:1B:E1
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1c:09:7b:f9:85:4c:78:08:c6:7a:e5:38:b7:2b:c6:73:62:
25:78:d5:14:24:55:c2:08:a1:aa:6a:cb:2c:ea:06:80:dc:21:
6e:e4:ca:61:db:30:42:31:be:5a:95:a0:32:96:7f:8b:89:02:
8c:75:cf:b3:2c:10:10:e6:53:86:67:3a:96:cb:25:44:32:18:
66:55:cd:42:d7:e2:05:76:d4:14:26:d2:b6:81:54:28:ce:f9:
66:f3:26:22:a4:4d:4e:c4:94:7f:de:4f:e6:a9:9e:9d:17:92:
39:bb:54:d9:86:4d:9d:c5:00:be:f1:a4:68:92:db:0e:6c:f0:
3a:30:7f:43:33:35:e5:0f:06:ac:8f:49:bb:eb:d9:07:5a:4e:
0e:5e:df:df:e8:00:7f:d2:60:dd:9b:bd:ea:19:86:56:67:8b:
e8:7a:e1:fc:e5:9a:88:e0:9b:a3:8c:7b:40:55:c5:22:ee:20:
6a:ba:1c:ab:9b:7d:c8:6e:8f:39:34:1e:82:5e:33:35:89:fa:
f8:46:c9:49:1e:46:43:af:38:c2:74:17:3e:c3:78:66:96:fc:
2b:05:0d:80:30:8e:fc:cd:8d:70:c1:d6:22:93:09:83:1a:14:
80:6c:29:16:c7:6c:6e:1b:c0:26:c8:4e:eb:5c:da:5e:80:ea:
e2:23:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:06 2026 by rpki-client