Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: xoFexwRT1dbUOVW56LO2fkPBWrtDjetnWn+wG5uIFCY=
Subject key identifier: F9:3E:70:14:2D:78:63:8D:54:A0:0F:F8:10:CA:66:A7:C2:F2:C2:B8
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 019D37C065E96E217D5268CC755FE48DB0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 17C7
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: VzfIK8QwIT8L32LI/Y8wlRElKsetEvq3W+mBXdZsmSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:65:e9:6e:21:7d:52:68:cc:75:5f:e4:8d:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=f93e70142d78638d54a00ff810ca66a7c2f2c2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:a3:71:c7:22:0e:d6:6b:91:e6:40:34:35:
37:07:77:48:25:5b:48:fe:dd:b2:c6:4f:46:14:39:
f0:f5:be:08:e9:ad:33:0e:6b:93:fd:6b:c5:48:3c:
7b:11:45:fc:2d:ee:96:5e:fc:b0:fe:c7:3b:16:90:
db:41:48:fa:2c:57:85:50:13:28:6f:26:e4:8c:d8:
6b:e8:dc:a9:36:0e:f0:33:6c:f1:99:a5:77:14:43:
65:3d:d8:db:cb:73:92:4b:43:60:09:ce:40:78:b7:
a2:9f:fd:00:46:fd:c7:11:d9:66:69:19:02:73:fe:
d2:57:fa:38:cf:37:83:c3:b2:08:37:ea:67:4d:fc:
4c:54:00:07:df:1b:db:d7:48:ac:83:71:65:4d:4a:
fe:6f:18:ad:25:d7:ee:5b:26:15:20:57:42:c6:60:
b6:64:94:9f:66:3a:5c:44:a2:f5:e8:2b:06:b2:c2:
7a:e1:b5:b0:eb:97:2e:21:05:ca:ea:2e:a8:de:79:
ec:18:fe:b2:9f:f5:c4:fe:42:95:66:59:b8:18:9b:
89:03:a8:dc:fa:1c:de:81:74:48:c8:7b:4b:bd:0d:
0d:32:cd:ea:c3:19:aa:d8:46:8b:b2:f2:89:b4:b0:
0e:88:96:70:b2:65:b2:0a:04:d7:01:6e:04:36:ab:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:70:14:2D:78:63:8D:54:A0:0F:F8:10:CA:66:A7:C2:F2:C2:B8
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:75:d4:5e:48:f8:a8:4f:24:de:7f:ad:3b:b1:b5:ec:64:
01:9a:9e:fc:8b:6f:0d:4c:1b:3d:20:6c:91:fc:4b:4b:67:bd:
2e:91:97:d5:7a:31:94:a5:73:c8:d0:6e:e8:55:8d:98:ce:99:
e8:1b:b3:dd:fc:c2:c1:f0:c0:a4:90:0c:fc:56:7d:00:99:af:
3f:a3:66:51:53:ca:5b:10:16:69:4a:3c:c2:a5:a3:6a:bf:ef:
68:c0:4f:ae:1e:37:45:0e:8b:a0:19:29:4b:d1:af:dc:cd:d6:
ab:3d:5b:fd:db:42:59:24:15:9c:cf:4b:46:4b:9d:79:d5:f1:
26:f7:86:8e:d4:7a:4a:e7:fd:3d:ff:14:f1:6b:8d:70:46:7c:
f4:03:f5:ff:4e:6d:fd:93:e7:02:f7:40:9a:a4:1e:69:14:b7:
a9:b3:71:df:b9:f6:f2:02:3e:49:d3:da:93:12:72:53:07:19:
5e:a1:11:0b:cc:37:98:b6:e1:7c:8a:bf:b0:d9:76:14:fd:b1:
bb:50:01:0b:89:8c:2f:fe:50:2c:fc:60:f1:85:aa:28:92:16:
ae:60:40:b5:fb:44:61:f4:2a:e2:72:43:34:06:e7:8c:09:81:
e4:f4:f5:fb:bd:7c:88:af:1f:44:da:ef:6a:d6:61:3b:1c:3d:
9b:66:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:02 2026 by rpki-client