Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: AiLwyDRmFrDgoVINycEtb4xGM41CP21ApQ7HWouWZB0=
Subject key identifier: 22:9E:97:8F:7E:3D:E0:B0:84:D8:37:5A:EC:CF:2F:83:90:22:08:4B
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 019D2771BD27FF3FD45F503F46D199FC6D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:00:58 +0000
Manifest this update: Thu 26 Mar 2026 00:00:58 +0000
Manifest next update: Fri 27 Mar 2026 00:00:58 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: E8N4+IGpK/GiMW+JOuASbMlTzZUhcVNndkJDHemS6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bd:27:ff:3f:d4:5f:50:3f:46:d1:99:fc:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Mar 26 00:00:58 2026 GMT
Not After : Mar 27 00:00:58 2026 GMT
Subject: CN=229e978f7e3de0b084d8375aeccf2f839022084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:fc:2d:3c:b3:a9:8f:94:33:8f:9d:46:22:
3e:43:04:bb:6e:e4:cf:83:4e:d7:ec:e2:a1:8e:83:
9f:5d:da:10:4d:c3:eb:15:e1:fa:7e:8a:f6:cb:a3:
69:32:bf:30:16:1a:e4:a6:e9:ed:47:af:49:a4:c3:
8c:84:4a:77:1f:c1:7d:ad:db:6c:58:77:f3:d4:44:
f5:68:f3:b4:e6:56:04:2e:02:ee:a5:c9:fc:d6:f4:
7e:c0:9d:a3:ab:24:3d:c1:69:a1:52:90:b3:45:58:
49:69:53:bc:2a:2b:b4:06:8d:84:8a:da:42:79:05:
96:45:5a:50:bb:29:65:99:cf:0e:7d:24:6d:7b:48:
71:09:5a:64:a0:f7:11:0d:b6:52:26:48:ac:d9:6f:
85:e2:da:46:82:0a:33:d3:32:8c:74:ce:41:7f:62:
a4:5e:cd:6a:08:85:4b:52:12:8f:94:76:83:c6:af:
15:8e:50:54:6c:a2:c8:59:7d:3a:cc:e0:5c:1e:ee:
ce:44:82:17:7e:8f:72:77:be:04:4a:0b:76:08:2c:
0b:fd:64:c2:12:c0:18:3a:48:d1:a1:de:69:66:31:
5e:35:09:7e:7c:bd:8b:6c:27:1e:d0:4e:f6:fc:69:
76:da:8d:98:28:65:90:fe:52:cd:2b:73:0e:a3:ed:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:97:8F:7E:3D:E0:B0:84:D8:37:5A:EC:CF:2F:83:90:22:08:4B
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:19:fd:b6:db:98:41:47:e5:db:0a:fc:b1:78:c8:7b:b4:e6:
f5:80:79:6e:01:8e:49:a6:03:83:fc:a2:0a:dd:44:64:82:b4:
e6:a7:24:6b:06:29:63:c9:53:ee:95:02:ef:44:ab:b1:b7:d6:
c9:53:a0:2f:48:7c:9b:2a:34:01:f9:6f:7d:b9:3a:c1:8e:b8:
58:74:9c:24:44:1d:6b:6e:c0:06:9b:5a:a7:75:3e:68:9c:8f:
11:09:cd:e6:74:95:42:20:c6:9a:49:b0:98:dd:be:fe:6e:a2:
a1:69:c7:e3:8d:c1:2e:ce:07:e4:f2:4f:b0:c8:cf:77:30:21:
a0:c1:25:7a:52:1a:93:86:81:b5:10:2d:76:a0:6a:9a:d3:d2:
97:6a:40:c9:b7:4a:79:c7:b0:10:9d:2f:32:c2:5d:47:dd:7c:
6f:bb:d5:2b:90:a3:ab:71:8d:54:55:0e:23:4c:52:dd:26:19:
e1:52:12:1e:ca:27:79:fb:b5:5a:b6:19:bb:35:7b:a8:3f:4e:
c8:75:70:8e:e7:11:a0:c3:cd:97:0f:ac:30:72:b7:a0:91:cf:
ac:e1:03:97:e2:60:cb:2e:c5:e5:4e:4d:e8:0d:21:81:80:87:
79:d4:e2:7c:8f:eb:7e:c9:f9:3b:cb:e1:55:09:97:4e:fa:5a:
25:b0:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:55 2026 by rpki-client