Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: 2vn1yKVxSntCROdJZ1ntrb+qtVVNl2Ta0r9Gww45zBM=
Subject key identifier: D7:D7:74:9F:85:C9:B6:97:B9:78:5E:66:74:B8:28:90:A2:61:A3:92
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 019D29977373EB3C7BA8F12E2D5D01A92060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 08A3
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: zDEiJQ59eaRuWXBB86PBcWEV/KIGoZIQDdCzAxLw5vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:73:73:eb:3c:7b:a8:f1:2e:2d:5d:01:a9:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=d7d7749f85c9b697b9785e6674b82890a261a392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:03:16:6f:62:40:82:81:28:8f:24:99:c4:
09:eb:17:f1:ad:6a:2a:4b:1b:65:9a:04:d7:32:a2:
ab:01:5d:33:82:0b:66:d6:02:b0:a8:27:56:2d:f8:
dd:a3:c0:b2:32:23:98:5f:8a:cf:96:0c:cc:e5:e6:
12:75:80:2c:80:6a:e3:9c:7b:58:b9:ae:4e:f7:b7:
fa:ef:09:44:04:f8:92:a7:51:bd:b3:a9:63:62:c3:
d4:3f:6b:b4:44:ec:8d:93:6d:18:b0:04:c0:0f:c1:
f9:cb:a8:fa:80:f6:92:65:a3:76:45:a3:83:97:90:
c7:08:eb:fd:95:ad:27:41:56:12:68:cc:9b:34:10:
49:9d:2d:d0:13:96:59:78:a5:33:06:3b:14:3b:a2:
42:0d:3e:3b:82:14:d3:e3:ab:dd:85:9f:f4:d3:b1:
da:9e:f9:c8:2e:89:7f:dc:9f:ab:4e:44:1c:73:60:
41:aa:ae:cc:a9:45:fe:e3:c9:e5:b3:c6:4a:69:06:
d8:9d:7a:e1:cb:4a:95:cf:a5:9d:3b:1f:d4:d0:70:
dc:02:34:1c:34:29:69:e0:97:76:16:b3:7f:e7:d5:
e3:3a:29:e4:13:fb:1a:d5:16:23:bf:db:a4:e8:9b:
1e:06:fa:bc:3d:e2:a8:c5:e4:be:2f:fb:e2:1f:fb:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D7:74:9F:85:C9:B6:97:B9:78:5E:66:74:B8:28:90:A2:61:A3:92
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:fa:fb:69:91:4a:9b:16:b2:f4:2c:05:8a:ab:3d:7a:58:
13:2c:bb:35:f5:53:34:8a:44:7b:fc:9e:ca:ce:47:5a:f9:9f:
eb:23:9e:7f:fe:53:86:90:20:e2:ba:28:2e:47:8d:1f:82:92:
b6:13:3f:99:ac:37:90:62:21:72:1f:ad:da:c2:6a:1a:26:0f:
38:a0:d6:f0:fa:a6:10:1f:72:da:84:bb:db:bf:b4:88:9d:cd:
81:1b:f0:fe:32:d1:e3:65:ec:ec:ac:f4:d5:16:10:94:1d:d7:
32:9a:cb:b7:be:e9:23:c5:e7:92:01:1c:c5:5e:ec:12:15:ad:
90:84:60:ab:81:10:15:7b:2d:e8:34:17:a9:04:f7:39:a0:23:
c9:f8:02:21:6d:5b:ab:1b:d5:36:b6:3a:60:74:2a:c9:e4:9f:
67:bd:2a:55:71:a6:b4:a8:08:e9:91:62:ae:4b:8b:36:c1:be:
d3:ad:57:b0:c9:1f:16:db:d8:55:a8:82:96:cc:6b:81:b3:df:
f3:f8:0e:eb:9e:bd:67:5f:a1:95:86:2f:75:74:04:3c:24:e4:
b9:72:e3:23:5f:00:b8:cb:7b:df:4f:61:0e:5a:7d:77:1b:cb:
65:82:c0:d9:b7:eb:ce:c0:ba:29:bc:c6:32:34:62:4e:c8:19:
f4:c1:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:31 2026 by rpki-client