Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier: hElqERY7dNrQEz9cUWeB8bCwbuPfTJy+sgnx/k7ZpRw=
Subject key identifier: EF:8A:A7:E1:2F:AF:E3:B5:E3:B9:59:7D:E6:9E:A6:61:84:7A:F9:3B
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial: 019D28F28C44E08303D331F2412F8B7F38CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number: 112B
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: rj2Q9X0/nNTKrqI9TjZoYvDq7nSXEgAR8+XhAlaTCN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8c:44:e0:83:03:d3:31:f2:41:2f:8b:7f:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=ef8aa7e12fafe3b5e3b9597de69ea661847af93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:52:ab:50:05:86:b1:33:63:38:68:df:99:
d2:2f:9c:7b:80:06:e4:bb:fd:5a:e0:af:42:aa:e0:
e7:cd:4f:72:f1:b4:1b:79:2a:fc:02:3e:52:98:d8:
73:25:c3:71:83:e8:8d:bc:6b:d3:e3:37:f8:8e:db:
72:32:c8:c4:66:2b:9b:28:78:00:3b:76:55:80:b0:
22:2b:df:b1:9a:37:87:80:62:98:d5:43:f4:44:18:
1b:b1:80:67:a9:76:64:88:9d:b8:8f:07:ab:33:a2:
28:57:32:93:c5:66:ba:b4:99:45:f4:20:ac:35:a7:
36:d4:80:ca:37:19:fb:cd:48:90:af:3e:47:f9:0a:
86:b7:fb:54:5c:e9:ac:0e:ff:90:48:96:50:ff:50:
ad:13:ea:8d:8b:5a:26:2c:ba:43:69:da:3f:b8:c9:
f0:51:30:14:f5:13:78:0f:ae:89:72:b7:7c:bd:19:
d2:69:26:6c:db:fe:6a:2c:37:2e:bb:92:57:6a:86:
09:a4:8f:21:2a:b9:30:43:8c:73:28:4a:24:f4:0d:
98:1a:eb:05:1a:b3:4c:64:30:df:55:f5:0a:09:f6:
26:18:c6:d8:e7:ba:1a:99:19:e3:92:19:4f:11:30:
03:9e:43:e7:98:f4:d8:ce:b2:c0:81:f6:ac:9d:01:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8A:A7:E1:2F:AF:E3:B5:E3:B9:59:7D:E6:9E:A6:61:84:7A:F9:3B
X509v3 Authority Key Identifier:
keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:70:11:66:43:66:50:9d:d4:8e:47:23:f1:50:b1:71:15:f8:
82:54:3b:07:94:d1:46:02:52:05:07:52:cd:56:ad:b1:7b:93:
4f:d3:94:ad:8b:c7:5f:49:f7:c5:9d:78:31:e8:1d:10:3a:14:
52:5b:4b:68:cf:32:b4:36:7d:dc:c0:bc:f3:ab:9a:e2:9c:3c:
49:a5:3c:94:9e:45:b0:32:0d:1e:77:bc:ea:90:e4:66:fe:c2:
49:3a:b5:cb:90:5a:14:13:cd:8b:ad:f1:4b:30:c5:b3:61:da:
de:e1:aa:46:31:19:dc:c4:d2:92:90:d5:fc:39:30:af:65:0e:
19:49:f6:d1:60:52:0d:d1:b4:9d:4f:73:40:d9:98:dd:40:66:
8a:c5:3b:41:10:fa:fb:27:08:3d:a3:cc:8b:df:d6:19:04:7c:
1d:e7:57:f5:60:25:4e:78:2a:03:ac:35:7e:db:c3:ad:e8:ed:
c1:0d:70:b8:45:28:f7:83:1c:a0:23:48:3d:21:f2:60:3f:6d:
ab:d7:7e:d6:ea:f3:62:21:4b:22:1d:bf:65:07:a2:e7:64:c0:
0f:ce:4b:6c:f8:43:17:d9:8e:c0:cb:0f:59:2e:de:91:93:8b:
e8:3a:ed:84:1b:c7:a4:b0:9f:93:de:12:aa:ff:81:9f:ea:68:
09:4c:db:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8oxE4IMD0zHyQS+LfzjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTgwZDJhZjg2MWI3MGEzN2VjMDUwZTAxM2U2ZGZiYTk0
YzhiM2QwHhcNMjYwMzI2MDcwMTE3WhcNMjYwMzI3MDcwMTE3WjAzMTEwLwYDVQQD
EyhlZjhhYTdlMTJmYWZlM2I1ZTNiOTU5N2RlNjllYTY2MTg0N2FmOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXxSq1AFhrEzYzho35nSL5x7gAbk
u/1a4K9CquDnzU9y8bQbeSr8Aj5SmNhzJcNxg+iNvGvT4zf4jttyMsjEZiubKHgA
O3ZVgLAiK9+xmjeHgGKY1UP0RBgbsYBnqXZkiJ24jwerM6IoVzKTxWa6tJlF9CCs
Nac21IDKNxn7zUiQrz5H+QqGt/tUXOmsDv+QSJZQ/1CtE+qNi1omLLpDado/uMnw
UTAU9RN4D66Jcrd8vRnSaSZs2/5qLDcuu5JXaoYJpI8hKrkwQ4xzKEok9A2YGusF
GrNMZDDfVfUKCfYmGMbY57oamRnjkhlPETADnkPnmPTYzrLAgfasnQE6pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+Kp+Evr+O147lZfeaepmGEevk7MB8GA1UdIwQY
MBaAFKSoDSr4YbcKN+wFDgE+bfupTIs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYt
NjIzNGVhMDllMTg2LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYtNjIzNGVhMDllMTg2
LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXARZkNm
UJ3Ujkcj8VCxcRX4glQ7B5TRRgJSBQdSzVatsXuTT9OUrYvHX0n3xZ14MegdEDoU
UltLaM8ytDZ93MC886ua4pw8SaU8lJ5FsDINHne86pDkZv7CSTq1y5BaFBPNi63x
SzDFs2Ha3uGqRjEZ3MTSkpDV/Dkwr2UOGUn20WBSDdG0nU9zQNmY3UBmisU7QRD6
+ycIPaPMi9/WGQR8HedX9WAlTngqA6w1ftvDrejtwQ1wuEUo94McoCNIPSHyYD9t
q9d+1urzYiFLIh2/ZQei52TAD85LbPhDF9mOwMsPWS7ekZOL6DrthBvHpLCfk94S
qv+Bn+poCUzbxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:59 2026 by rpki-client