Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: cYuarR1O/gcded9dqcxfMVaV3UeYuFixJgexShge7mg=
Subject key identifier: 95:EE:D4:11:FC:DF:CC:D0:87:6C:90:2B:3F:83:3F:F7:9A:B3:86:B3
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 019D39AECDAC69CD1FFFCCA35D39D64C6A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 16BF
Signing time: Sun 29 Mar 2026 13:00:50 +0000
Manifest this update: Sun 29 Mar 2026 13:00:50 +0000
Manifest next update: Mon 30 Mar 2026 13:00:50 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: 2i82GILwKP4bM2ePDZTqkoRMAlK0jWAkgAYaMw9EnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:cd:ac:69:cd:1f:ff:cc:a3:5d:39:d6:4c:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Mar 29 13:00:50 2026 GMT
Not After : Mar 30 13:00:50 2026 GMT
Subject: CN=95eed411fcdfccd0876c902b3f833ff79ab386b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:1b:5c:b9:8f:88:56:39:92:6a:af:ba:1c:
1b:6a:85:ed:b8:1e:b2:34:bf:0a:3d:b5:32:47:7b:
07:b6:a7:e4:70:e1:47:16:c5:e3:7e:6e:73:8a:69:
b9:4d:98:30:96:b2:43:ef:96:2e:5e:c1:c3:6f:e5:
45:13:37:4f:a3:fb:be:bf:6a:75:ec:76:19:c9:92:
4a:43:79:03:67:3a:47:3a:6f:3b:2d:fd:49:66:ad:
eb:ed:f1:46:7e:9b:f3:12:12:b8:f8:7d:07:5d:a8:
39:a3:c3:bc:5a:9a:05:fc:24:71:fd:13:c3:38:30:
66:f9:dd:61:69:53:11:c2:9e:93:96:14:06:89:52:
87:dd:d8:dd:ce:6b:64:f9:10:4d:2f:c7:ac:95:84:
e3:1d:2a:1f:9e:53:e4:35:b7:1d:c7:72:3b:57:f8:
fb:ad:8f:68:95:46:ba:28:38:e5:e4:28:23:a7:6e:
a8:c6:4d:b1:b9:ce:d0:ea:51:ce:e9:bf:2e:a4:61:
de:bd:5a:02:70:ce:1f:1b:c2:69:b4:08:21:92:c9:
9d:ff:ff:2f:20:02:92:fa:c1:a1:94:a3:2d:25:c6:
69:3b:8e:5f:05:60:f4:86:15:69:5e:30:fa:23:51:
bf:57:7e:b0:46:2a:ef:d9:7d:bf:1d:da:f9:d8:48:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:D4:11:FC:DF:CC:D0:87:6C:90:2B:3F:83:3F:F7:9A:B3:86:B3
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:98:ec:f1:5a:e6:15:13:1f:17:d5:8f:42:d8:b2:ae:17:14:
ef:b2:50:98:d7:13:bb:20:77:f1:42:05:73:de:85:19:fb:1c:
83:3c:2b:3c:69:81:7a:c8:20:f5:9e:90:42:43:9a:37:63:75:
ed:ab:34:2c:a3:00:a6:40:1e:00:68:a5:3a:9c:5b:07:55:32:
c9:2d:75:e0:1a:b5:86:cf:f5:62:3e:16:cd:c6:5b:ba:2d:db:
cd:e3:6d:90:4a:e5:23:40:8f:23:46:9d:b6:63:0d:20:35:0c:
a3:ff:0a:62:92:c0:b6:e3:39:24:18:30:7e:34:c1:3e:bf:ac:
4f:9c:27:42:bc:26:3e:35:3c:e5:b9:c5:f3:52:57:85:f7:71:
e0:8d:2e:d2:d9:9c:71:a7:2b:ee:5f:b1:d3:8e:e8:24:ce:e3:
40:92:32:6c:55:57:38:a7:e0:b7:f6:0f:c2:60:d2:11:e7:c7:
17:04:47:2a:fa:26:f7:d4:39:31:0f:ed:80:f3:ae:36:65:a4:
3d:d2:3c:b7:0d:a5:5e:51:a4:77:3d:7a:d5:f9:6d:c6:e0:80:
76:2d:b1:63:d7:21:32:b5:65:45:04:f1:d9:11:5f:03:b0:a8:
ef:3a:48:f7:2a:88:b8:ee:d9:32:a7:31:12:df:ae:35:a9:a8:
3d:61:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:53 2026 by rpki-client