Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: MX5a7Qkk43K96XAgyqu+TINBhanvfdyu8iJiIIUYdu8=
Subject key identifier: EC:F9:87:22:5D:E8:18:2C:7A:B7:07:F4:6E:B3:22:3F:B0:55:92:06
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 019CACB558005063EC27AEDC4D23EDFEF421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 177F
Signing time: Mon 02 Mar 2026 04:01:31 +0000
Manifest this update: Mon 02 Mar 2026 04:01:31 +0000
Manifest next update: Tue 03 Mar 2026 04:01:31 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: VXtZ3TZTCRYTU7dK9G/VwIW/YAI6ZOOjUoPGfY76Yuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:58:00:50:63:ec:27:ae:dc:4d:23:ed:fe:f4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Mar 2 04:01:31 2026 GMT
Not After : Mar 3 04:01:31 2026 GMT
Subject: CN=ecf987225de8182c7ab707f46eb3223fb0559206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:07:16:15:68:60:2a:29:d8:73:fd:d4:e7:
77:a8:17:14:e4:ba:c4:2b:fc:ee:2a:42:ba:4e:b2:
39:a0:2b:43:5d:5b:7c:dd:cf:17:d0:33:b8:b7:cf:
e8:4e:00:ff:1b:a4:f0:b4:ed:2f:11:c4:f0:ae:a7:
1d:5e:00:46:fd:d9:a9:5e:9e:5e:83:07:83:a7:9d:
e8:4f:ca:b3:b3:db:4e:4e:e9:0e:7e:aa:3b:28:e2:
87:08:64:51:1d:ba:b9:59:f1:77:b6:51:15:b4:d2:
13:dd:53:d2:60:ce:b4:e7:28:00:2b:80:40:b8:c5:
b7:10:fb:4f:36:76:9a:19:92:94:82:a1:09:59:28:
0a:b0:24:0a:c8:12:71:00:5f:63:ec:9c:98:68:ae:
d4:d6:5a:bc:9e:a8:be:5d:1a:f6:a1:66:79:bf:97:
bf:b0:17:d8:c2:d7:c4:03:20:ed:7c:2a:4d:8c:28:
ec:cf:2d:d1:2f:2d:4c:30:df:68:61:c4:d5:56:38:
f9:e2:e7:4d:93:84:74:1e:d7:ca:5b:62:d2:8e:9e:
04:fb:5d:f5:88:82:84:b0:1d:6c:fd:84:dd:63:d4:
ab:d3:47:bb:b8:ee:0a:55:e4:40:d0:6e:00:b5:bd:
bd:69:dd:2b:8f:cf:ba:cd:ef:59:62:ea:9f:15:81:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F9:87:22:5D:E8:18:2C:7A:B7:07:F4:6E:B3:22:3F:B0:55:92:06
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d3:d8:16:b3:42:dd:3d:6b:67:0e:ca:38:92:bc:7c:15:12:
26:78:87:79:41:1d:0f:6d:43:0d:f7:68:39:6e:8d:80:f2:fa:
db:fa:97:f4:92:b0:65:f1:53:1c:21:0d:60:df:76:68:5a:e4:
65:50:e9:ff:21:7d:0c:4e:9e:e1:09:db:a7:22:08:87:f3:58:
6d:73:41:75:89:7f:16:4e:a9:91:12:86:97:eb:cc:87:75:bd:
8d:4e:a1:cb:75:3f:a4:4c:ba:1d:8b:ea:3a:05:1f:24:55:89:
27:49:33:f0:2e:e9:95:85:af:dc:56:28:7c:52:67:d8:5d:e0:
d2:18:0f:dc:b1:7a:1e:9e:71:bd:2c:fb:75:84:37:48:c1:07:
e0:e4:a5:45:4d:ff:50:d1:9e:96:79:25:3e:2a:e4:ee:3f:0f:
3d:0a:d8:25:d8:d9:04:67:8a:99:32:1d:04:0a:c6:0d:7c:6b:
1e:00:41:31:91:c8:d2:56:f0:27:ba:6e:dd:f9:16:38:c1:5b:
9d:68:92:b1:63:15:35:86:4e:08:74:c1:86:66:2a:aa:7b:cf:
c8:a2:1f:34:61:db:c9:ef:b7:31:6d:91:29:a9:7c:82:d1:d3:
f1:e8:89:5c:ec:b6:14:09:69:be:d2:0c:d6:ff:b8:10:07:d1:
20:17:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:03 2026 by rpki-client