Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: TkF2YxL7uSvALkShRsm8FIvTVOWTwc63xu+VNIw1qMw=
Subject key identifier: BD:62:4A:9F:FA:E6:37:F7:7D:D5:E9:6E:79:E3:A4:07:83:2E:6A:92
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 019D265F4405288B6E88178CA20A530EB46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 16B5
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: 2oxzjLD2GHWm9f6gYOEWCbQabANm0+7clxOYOxM81+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:44:05:28:8b:6e:88:17:8c:a2:0a:53:0e:b4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=bd624a9ffae637f77dd5e96e79e3a407832e6a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:b3:99:ce:ef:5e:34:fd:76:40:01:32:47:
27:f0:9f:00:cf:35:29:5d:99:33:56:c3:87:25:36:
2c:46:0b:d6:a7:4f:f8:c3:88:fe:c1:e3:5b:d7:e7:
b8:6b:72:2b:7d:2a:c1:39:51:63:cb:2b:c1:19:3d:
fe:de:67:f0:bc:af:4d:20:55:cd:90:d2:c2:73:f5:
11:b9:07:55:9d:9b:d0:37:f1:51:1c:88:23:9a:ac:
9c:ff:46:f6:a7:2e:27:4a:8e:f5:b8:9b:c4:e9:0e:
66:77:fb:27:c6:00:d0:67:5c:60:a9:37:db:d2:60:
3b:2b:84:d1:41:62:46:bd:a6:a8:7b:23:f4:17:c3:
24:c0:e4:b2:8a:ad:9f:26:f1:bb:5c:dd:f0:01:b1:
16:29:30:74:2a:fa:f5:a9:3b:f0:24:96:73:a2:8b:
e1:e4:63:cd:21:f1:01:76:ee:d6:f0:a0:17:4c:2f:
3b:4a:18:3f:d7:ab:55:94:65:c9:19:09:8d:8e:4e:
5f:1c:18:96:00:89:01:ce:a2:2c:6a:7b:eb:2f:86:
f9:cd:5e:f8:f7:92:45:41:d5:3b:b7:c9:92:53:55:
0e:6e:08:74:aa:bd:77:7c:ac:5b:93:81:a3:c6:f2:
d4:d2:18:cf:72:33:94:54:aa:25:13:0a:1f:8f:7b:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:4A:9F:FA:E6:37:F7:7D:D5:E9:6E:79:E3:A4:07:83:2E:6A:92
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e4:27:32:c1:cf:0b:74:67:64:8b:ea:51:2d:b3:29:e3:f1:
99:c2:f4:35:98:20:e9:3a:35:fc:53:75:97:ee:c0:f9:10:cc:
5a:c9:bf:f8:00:53:80:44:7f:43:55:06:66:16:e8:1a:22:36:
3c:71:eb:44:ef:16:c9:e6:ab:a7:fb:50:5f:3e:3c:5a:06:62:
fa:f1:eb:e0:f5:8d:fa:3b:10:ea:51:03:f3:dc:93:85:a0:c8:
5f:3f:e8:c3:a6:81:5c:e2:6c:97:df:57:56:84:71:ef:59:c8:
a7:01:dc:40:29:5a:f0:ff:fb:4a:fe:7c:be:45:b1:f5:d2:13:
c5:30:5a:1a:0f:8e:65:a0:ec:f7:b9:67:ac:e9:8c:d5:6d:aa:
2a:3a:c8:b6:e5:e0:93:45:8b:a2:05:87:db:58:63:4e:48:5f:
14:fe:5a:c3:e3:0d:c0:8a:ad:91:2f:b5:b2:0e:17:4d:91:d3:
28:85:e9:c8:98:0b:24:22:e3:1a:4b:47:91:a6:6d:18:25:9c:
8f:8b:5a:aa:a5:02:e8:ae:75:06:a9:f7:43:d3:b8:49:0b:1d:
56:02:c0:7d:f6:cf:40:25:71:50:10:a8:39:54:24:e0:36:07:
e4:2d:2b:a8:d6:bc:af:de:f1:7e:78:0c:fc:d4:38:4b:ab:05:
4a:54:11:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:16 2026 by rpki-client