Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: V8UCLFxC84jT+4TRNbR3lLjlN5wmQoBBfBNujQW1uCc=
Subject key identifier: EB:1C:DD:7D:6B:1D:01:92:05:FA:B8:EE:64:79:26:0F:20:96:F1:D1
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 019D38D3146C508F47B8B136215E1DB0F3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: SmDQpqhi0xkDAHnmFg409nPYdkE6aaOy4+oEFy7d9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:14:6c:50:8f:47:b8:b1:36:21:5e:1d:b0:f3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=eb1cdd7d6b1d019205fab8ee6479260f2096f1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:4d:03:d2:e2:af:aa:b8:42:f8:53:90:c6:
e2:d5:29:5f:84:5b:5f:d9:be:ed:c8:0c:3e:61:95:
4a:04:e9:78:2d:3a:a7:60:9b:4d:79:62:c4:4f:3f:
ab:e2:1d:a2:52:e3:db:a2:ec:7a:42:dd:53:1e:f8:
1d:63:01:d4:60:d4:88:5d:26:81:5f:d3:b3:0a:da:
68:3c:ab:a3:22:44:c2:73:b4:59:6f:f0:5d:dc:13:
2f:05:97:5c:20:34:4f:8d:66:35:ca:5c:27:90:c6:
d6:a0:94:8d:2a:c2:f3:42:13:f5:a0:26:5c:21:4d:
ec:79:cf:00:c4:95:92:ad:c8:de:31:cb:93:7a:5d:
ee:7a:19:02:e6:49:16:9f:9a:e1:d9:95:3d:30:6e:
57:48:2c:7d:f6:19:43:b0:ec:82:67:d9:05:68:36:
52:b0:5a:83:a4:d6:81:cf:b8:99:30:9d:3a:70:4d:
03:3c:3c:0f:76:ec:52:6f:d0:87:2d:7f:fa:79:82:
1f:34:91:c2:51:49:77:07:06:eb:af:b7:9d:2d:ff:
b2:83:43:09:b2:38:9f:8e:ed:f5:12:a6:0a:12:66:
84:df:83:d8:bd:14:a8:a8:3a:c9:bb:6b:8f:37:94:
e8:fe:e8:77:76:46:36:7d:08:c9:4a:cf:83:b6:ca:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1C:DD:7D:6B:1D:01:92:05:FA:B8:EE:64:79:26:0F:20:96:F1:D1
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:29:d6:d4:50:ee:2b:61:aa:8d:ed:cc:be:c6:22:10:a5:6f:
0c:02:b8:d6:a7:dc:75:3a:38:bf:98:e4:7e:b6:59:e0:15:54:
6c:63:4b:6a:36:e9:e1:06:78:6b:01:aa:14:f7:bd:74:8e:12:
92:85:12:98:34:70:ff:18:c2:cb:97:61:bc:e8:5f:0a:df:bf:
1b:b1:8f:9b:9e:36:cf:6c:6d:f6:6a:1d:b6:79:ef:17:e9:94:
ca:9c:43:00:00:9e:e7:3c:62:fd:7c:a8:f2:e2:6f:8a:c1:43:
44:e3:5d:b7:08:cd:f3:88:05:8b:83:6e:a5:5d:a6:60:91:07:
55:88:17:57:38:68:76:19:45:e6:aa:ae:02:32:a0:95:e5:e3:
f7:2b:f9:fc:b8:83:09:af:33:70:5b:3b:1a:1e:99:7e:8f:b3:
b2:7b:b8:c8:76:14:3e:2d:15:3f:26:90:6f:6c:8e:b4:86:9a:
7a:93:ec:8b:7e:96:f7:a0:92:bc:53:32:b2:cc:4e:94:76:33:
4b:1f:78:89:da:1d:0c:90:f4:d5:b9:7c:6b:0a:83:a0:6f:3f:
84:b9:bd:40:e8:1c:97:69:8f:80:ad:0a:d1:23:7d:e6:5c:f8:
9c:d4:f9:ee:ed:15:5b:c4:b6:dd:ff:ef:e8:51:e8:0c:d4:d8:
26:f7:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:56 2026 by rpki-client