Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: JeOgxps4sJ7f7/drBvdiYfx5sxaH7z2sjoLKOsnaURY=
Subject key identifier: 3B:38:ED:D2:D5:5F:DA:75:2F:37:96:8B:CB:29:44:C1:2D:D1:42:11
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 019CAEDA20A804B675F91A73F5A72C740C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 06D7
Signing time: Mon 02 Mar 2026 14:00:56 +0000
Manifest this update: Mon 02 Mar 2026 14:00:56 +0000
Manifest next update: Tue 03 Mar 2026 14:00:56 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: uvKSg0hjJ44aQvfnch0mEMJH87dFeft99KkOAQOjjP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:20:a8:04:b6:75:f9:1a:73:f5:a7:2c:74:0c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Mar 2 14:00:56 2026 GMT
Not After : Mar 3 14:00:56 2026 GMT
Subject: CN=3b38edd2d55fda752f37968bcb2944c12dd14211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:8c:67:66:8f:e1:57:a1:4d:a4:e8:95:30:
6a:e3:6a:8c:93:7a:42:71:1a:52:3b:1d:b5:f2:a7:
bd:10:9a:52:93:6c:6a:52:8e:52:53:97:02:7d:62:
5e:3f:6d:ec:42:09:f6:eb:4d:b0:c9:9e:ae:79:00:
6a:d9:4b:09:bb:b9:e5:f6:a8:e2:93:53:e0:df:d1:
d2:c3:e5:20:38:31:fb:29:cf:19:60:73:7a:8e:b6:
7d:43:ca:23:ce:3a:95:4c:e4:dd:b6:82:c2:f1:9e:
38:f8:0b:4a:73:70:50:9d:14:b1:b6:6d:7b:71:8b:
6e:96:95:e8:b6:d6:1e:21:c3:50:ff:1c:c9:11:70:
77:4b:c7:2f:99:00:37:7f:3f:63:2e:d7:89:6d:84:
53:92:2d:59:71:77:1c:d9:e1:76:a8:a9:ba:79:a0:
68:22:19:07:65:94:26:7d:bf:88:ca:f4:37:67:69:
67:f2:d1:07:b6:93:c5:90:69:15:9e:d3:36:65:7a:
a2:e8:80:f0:47:e5:0a:28:b9:d9:de:2d:9d:1d:40:
1a:bc:d8:0b:d9:4d:53:7d:8d:11:7a:cb:0c:7d:3c:
81:9a:93:fe:91:82:cc:52:ef:9d:ad:9f:7f:cd:12:
90:97:ba:db:33:69:43:09:ba:8b:a0:70:b8:89:84:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:ED:D2:D5:5F:DA:75:2F:37:96:8B:CB:29:44:C1:2D:D1:42:11
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:15:9e:72:b9:39:30:af:f3:b7:14:15:8f:61:4e:6d:5d:d6:
0f:42:4d:9e:43:63:72:84:3f:bb:6c:a5:b0:e2:ea:f7:21:02:
a5:8f:89:0c:5a:65:8f:85:aa:7d:2c:f4:9a:3e:27:84:f5:4a:
c2:b8:fa:38:df:69:b8:b6:2e:31:52:55:cc:64:2b:5c:4c:d6:
98:2c:20:5c:f4:97:a5:eb:3f:43:c0:de:ef:d7:b1:1a:d0:c5:
76:f6:59:ab:fd:7a:3f:99:57:32:4d:b3:4c:c1:42:02:3e:69:
a0:3e:85:53:bc:68:bc:65:d2:91:5f:ee:c2:cb:a5:bd:83:95:
af:c0:c6:4a:4b:d2:f9:1a:c0:ee:89:41:3c:8f:57:5a:8d:dc:
c9:6e:5e:78:ee:f9:75:8c:f3:a6:f1:be:0f:a6:cc:ad:42:43:
94:a6:56:0e:61:e6:c5:d7:60:af:c7:cf:e5:0c:0f:7f:14:24:
4c:17:6b:c5:0f:62:e4:2c:bb:ba:dd:59:d2:a5:19:de:bb:51:
9f:cb:ea:93:15:d7:c2:db:31:cc:39:ef:6d:f8:a4:ce:87:67:
ac:f8:69:b1:52:34:8b:5e:17:22:97:a1:00:2e:3b:a7:99:12:
04:4f:07:b2:7b:71:08:9f:b5:87:60:5d:11:1a:76:39:c3:99:
df:bf:6c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:37 2026 by rpki-client