Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: EIF1g2z6Uch681SyL4r2itDJGVOkfGOJjj3cck/pP7s=
Subject key identifier: 17:4D:D9:BA:24:71:3B:F0:46:35:01:7D:D7:AB:EF:58:47:27:AF:BF
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 019D984FDF1D352F7B33B8C47A043F839EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 17F9
Signing time: Thu 16 Apr 2026 22:01:04 +0000
Manifest this update: Thu 16 Apr 2026 22:01:04 +0000
Manifest next update: Fri 17 Apr 2026 22:01:04 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: FgLE5EREWS0YAC820OdBQn92XrOtFn/CCHg3JXaiPus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:df:1d:35:2f:7b:33:b8:c4:7a:04:3f:83:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Apr 16 22:01:04 2026 GMT
Not After : Apr 17 22:01:04 2026 GMT
Subject: CN=174dd9ba24713bf04635017dd7abef584727afbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:3a:5b:f3:97:61:a3:c0:3c:ae:18:62:2c:
36:f8:19:a3:2c:6d:9d:97:c3:7a:cf:5d:73:69:98:
1e:69:1c:39:a1:b9:ec:91:14:b0:70:3d:92:79:16:
fe:25:7a:6f:89:12:3b:c8:22:9c:94:f0:18:81:bc:
d7:2d:76:09:0a:a7:97:e5:9c:37:1e:25:ab:87:55:
f1:f2:f2:19:f4:15:0f:61:fd:ac:bc:e5:85:6f:f8:
a9:3c:22:1a:c8:7b:66:83:f9:92:05:9c:33:00:e9:
e5:9a:ec:d8:ce:9b:06:08:b4:47:fc:a6:0d:56:2b:
8b:42:90:31:5d:e9:81:8f:bf:09:a4:cf:5f:39:14:
7c:b3:16:4e:8b:9d:de:e0:8b:17:01:62:99:ab:9c:
3b:58:45:4f:bd:b9:cc:27:3a:47:b8:87:4c:ab:c2:
c7:15:6e:70:66:4d:f5:21:44:db:7f:c9:bf:b5:38:
e8:cb:b2:25:4c:5c:c6:fc:ef:c2:55:e1:ea:31:82:
bb:1e:94:a2:7a:8c:8c:91:53:73:52:cc:85:50:0f:
a8:16:e8:28:86:19:ea:f6:66:11:fb:cd:4b:ba:cd:
6d:f7:d3:43:8c:17:ff:7d:b1:53:15:7e:15:0a:16:
1b:5f:04:ea:bc:be:7a:d7:dd:94:d8:2b:e4:18:77:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:D9:BA:24:71:3B:F0:46:35:01:7D:D7:AB:EF:58:47:27:AF:BF
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0d:c8:ed:6b:3d:cf:19:d7:a9:71:6e:85:5b:e6:f0:d2:74:
a4:cb:9c:29:47:a0:23:e6:75:ea:6d:93:4c:32:94:5e:46:c2:
ec:e4:c4:13:9d:d7:c5:e2:78:94:b4:82:13:ad:9c:3c:70:b7:
9d:0c:5c:56:a7:34:b1:f9:50:3b:10:39:23:0b:2c:64:81:fd:
c4:6c:9c:a9:98:62:ab:ce:67:a8:3e:a7:dd:a9:78:b1:05:5e:
31:91:9d:b3:9e:c8:77:3d:c5:00:46:49:53:60:a2:59:cc:b7:
d0:c1:44:eb:f3:d4:87:f9:5a:a5:b9:c9:cc:01:33:9d:30:40:
64:7b:af:e5:22:18:19:be:80:27:3d:f7:81:c0:d8:42:b0:70:
6c:b2:97:6f:cb:d4:d4:f2:80:ff:a5:97:1b:b6:7e:af:c8:c7:
d0:e7:fe:e3:66:de:4b:eb:de:74:47:c7:11:a5:e6:90:bc:94:
be:36:5b:9f:28:fd:c6:aa:ef:04:37:cc:b6:a4:50:01:3f:c1:
bd:17:90:58:c6:55:c0:e8:3a:ec:e9:fa:23:fe:d0:74:47:bb:
05:c5:c4:98:50:25:24:12:f6:b0:d1:2a:d6:c6:9e:7a:4d:c1:
51:07:e9:10:67:e6:05:9e:b7:94:24:be:64:76:99:06:bf:5a:
3d:fd:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:22 2026 by rpki-client