Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
File: pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft (raw, json)
Hash identifier: cuf9yHU1r2sMBSS/j9zmcWUntb36AYlj3nEbzHki2BA=
Subject key identifier: 95:50:1A:E1:B0:A4:DF:07:AE:CB:B4:1A:92:27:9E:05:34:CE:68:4B
Authority key identifier: A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9
Certificate issuer: /CN=a64b46871c64ddae40442fc9216676c5407438f9
Certificate serial: 019D386600F774F84043E653FEA90CD06797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
Manifest number: 0236
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl (hash: Y5ScnJwFIyGVbVSjDLz4EhPYh5aRLkLb6cWaW9Hclsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:00:f7:74:f8:40:43:e6:53:fe:a9:0c:d0:67:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64b46871c64ddae40442fc9216676c5407438f9
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=95501ae1b0a4df07aecbb41a92279e0534ce684b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:b2:ca:fe:31:df:16:9a:c7:fa:72:c1:8b:
ba:c8:a7:73:24:25:b8:3e:ca:83:7e:af:be:d4:5d:
c6:a7:c8:37:29:96:af:f0:f0:a4:1d:35:9f:b7:92:
dd:91:c7:77:41:cf:3d:01:8d:f1:a8:55:04:7d:ff:
7a:37:df:d7:7f:4e:0d:1c:56:fc:b9:65:2e:19:1a:
4b:36:d1:b6:6b:fe:f0:a9:41:43:59:3f:db:b6:d5:
0d:bb:a6:9f:eb:a8:07:7f:c1:c5:88:3a:c9:35:16:
64:98:cd:b7:61:96:15:da:65:06:f6:0f:35:86:9a:
9d:b7:54:63:55:79:bb:80:98:5f:6a:f0:b7:31:81:
3f:8a:cb:d5:d4:a2:9b:44:2f:95:f0:df:b0:57:d9:
53:97:e6:df:07:35:3c:d0:42:18:24:05:bb:5b:fc:
0f:72:3c:15:b9:0d:43:57:b6:cd:b8:27:4a:3f:2e:
7c:84:a6:76:33:48:82:49:91:d4:32:3c:c5:90:d4:
91:ed:2a:04:20:9e:ed:3a:5a:da:44:65:76:82:1a:
1c:4c:d5:2c:2f:e4:86:6d:67:6b:0c:42:17:d4:93:
8b:f9:a3:24:84:a1:32:71:3a:e6:36:36:eb:2a:eb:
f1:6d:3f:7b:4e:30:09:17:cc:83:a3:cd:79:13:b2:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:1A:E1:B0:A4:DF:07:AE:CB:B4:1A:92:27:9E:05:34:CE:68:4B
X509v3 Authority Key Identifier:
keyid:A6:4B:46:87:1C:64:DD:AE:40:44:2F:C9:21:66:76:C5:40:74:38:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pktGhxxk3a5ARC_JIWZ2xUB0OPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d04124-77b1-4816-a77c-cc91ca18011f/1/pktGhxxk3a5ARC_JIWZ2xUB0OPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0c:25:d5:fd:1a:4b:2d:56:c7:65:0f:26:75:a5:0a:3b:ca:
cf:76:1a:c3:03:a6:a6:04:33:67:f4:b2:c6:82:3a:c9:7b:66:
a0:1d:09:f5:26:8d:72:77:75:b9:5b:b5:96:10:91:3b:1c:73:
ba:76:97:85:ab:97:4e:d7:a0:93:9f:56:d0:f3:f1:c0:84:c6:
16:b4:cc:68:cf:47:69:14:b6:c9:0c:88:17:09:84:06:14:ec:
5b:75:d9:b6:a2:57:62:da:b7:73:c8:e1:87:c6:36:58:11:af:
44:77:de:ec:f5:9d:ef:ef:0d:f4:a2:85:8e:e0:5e:c0:77:ca:
aa:42:49:0a:41:54:15:c3:18:4e:fc:73:d0:08:1a:53:14:fd:
1b:46:3e:7b:70:3f:24:58:9b:fd:d8:0a:8d:9c:d2:54:88:f0:
bb:82:8f:ff:a2:3a:f5:f3:07:5b:d3:3f:8e:53:1b:78:8d:7a:
0f:cf:54:34:17:72:b7:a8:98:97:9d:a5:cd:0e:33:39:1c:8a:
02:62:9b:fd:f4:03:bc:fe:d8:fe:90:81:e5:65:5c:a6:8c:56:
ce:ac:b5:eb:27:25:22:76:cf:62:cc:69:47:07:a5:e3:f9:a0:
ea:4b:3a:89:f2:22:44:e8:41:b3:43:28:e6:f6:6b:53:9f:0a:
ee:d6:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:34 2026 by rpki-client