Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
File: pMqKz4g4TsU94Z4om10mQqEf9_0.mft (raw, json)
Hash identifier: ks9PY6KEWebpYl6+faE4ikOrYqTi1l1DLD+FJImopmw=
Subject key identifier: 53:A2:79:64:5A:80:53:7F:3D:2D:55:38:A4:FF:52:A4:7B:12:4F:9F
Authority key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Certificate issuer: /CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Certificate serial: 019D27E04C8B6951ACE9833AF61A5391F554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
Manifest number: 0658
Signing time: Thu 26 Mar 2026 02:01:44 +0000
Manifest this update: Thu 26 Mar 2026 02:01:44 +0000
Manifest next update: Fri 27 Mar 2026 02:01:44 +0000
Files and hashes: 1: pMqKz4g4TsU94Z4om10mQqEf9_0.crl (hash: M8Vi6s5pP1KTS4NTM6F32QP+BLjnhPfs1KAPNWUUxkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4c:8b:69:51:ac:e9:83:3a:f6:1a:53:91:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Validity
Not Before: Mar 26 02:01:44 2026 GMT
Not After : Mar 27 02:01:44 2026 GMT
Subject: CN=53a279645a80537f3d2d5538a4ff52a47b124f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:0b:07:22:c8:38:29:8e:6e:72:4c:7c:73:
21:44:b2:ca:cc:eb:2a:27:dc:d3:1f:d3:51:e2:64:
c8:53:9c:f9:fe:2d:b5:67:f4:47:3e:ed:cd:f7:aa:
c4:fa:84:29:02:d1:f1:e5:9b:39:90:a3:a1:b8:41:
c6:40:9d:56:e6:ac:d8:82:f7:58:64:f7:b4:64:ce:
89:cf:43:97:f8:22:3a:13:9d:c3:e5:1f:30:a6:09:
58:80:0a:7c:7c:10:62:23:a6:d0:0d:06:1b:8f:6b:
f2:90:38:14:65:99:d8:a6:c5:5d:28:a3:72:d5:3d:
60:8b:2f:8c:77:0c:c7:40:5c:11:dc:c4:a2:80:19:
f4:31:5d:76:f7:53:2d:60:1a:55:55:33:9e:a9:58:
6a:c9:18:70:d5:e2:3f:bb:c4:34:5c:4d:ab:88:d6:
1d:17:32:bc:9b:b5:e8:c3:2e:1c:aa:07:e6:9a:04:
77:5a:ad:79:36:e4:a5:83:0c:e6:50:3a:e9:c8:d5:
af:cb:4a:40:97:34:39:ef:72:8a:7c:a5:48:f6:ae:
a1:33:3c:64:57:61:4f:1c:3e:d9:21:82:fd:01:77:
2e:be:4e:fb:51:34:8e:6b:ad:70:c3:9b:f1:69:66:
60:ff:8f:bd:56:c1:dc:b1:87:79:88:8e:b4:ca:f3:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:79:64:5A:80:53:7F:3D:2D:55:38:A4:FF:52:A4:7B:12:4F:9F
X509v3 Authority Key Identifier:
keyid:A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e4:e9:bc:ec:6e:4f:24:a2:56:f1:c4:a9:ef:80:c7:6c:4e:
2c:52:d6:d7:2c:25:28:64:b9:83:4d:ee:d9:ed:5b:fe:23:0d:
59:eb:1f:62:fe:35:b1:10:be:a5:71:55:86:d6:d0:d6:a2:0d:
1e:fa:46:c5:be:16:ec:c8:09:70:04:44:ab:e2:8c:3b:5d:51:
55:ea:92:cb:6a:1b:b7:94:a8:4a:c4:4b:f4:a6:b7:17:7b:eb:
ac:66:6a:9f:69:6d:f1:35:c3:64:23:d2:c2:7c:c3:41:67:68:
ed:20:9f:91:07:61:cb:95:e0:6f:aa:4d:f2:04:68:fd:db:25:
bf:8e:8b:8e:1a:89:6b:2c:b7:63:2d:b0:04:da:53:ad:8c:e8:
ae:0c:64:a7:e2:e8:47:e1:44:6c:61:44:2e:a6:f3:23:16:3e:
53:88:0c:3a:72:ee:d9:6e:bc:95:1b:1d:fb:88:e1:c2:c8:08:
1c:ba:83:49:2d:b3:4c:bd:c2:f9:9d:b7:8c:c3:5c:a0:33:d1:
0d:20:b3:eb:15:d4:3c:47:31:a3:a3:fa:52:97:a0:75:24:01:
20:8b:a3:11:c4:f3:65:c3:05:c4:57:41:d2:ad:c6:32:cd:5e:
30:88:be:30:e5:83:b3:52:30:c6:b2:00:01:40:fb:d4:3a:6d:
a0:2f:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:58 2026 by rpki-client