Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: gaoTnceDqYRkXD1isDrjJUWvFOX9WRLKLSbBoJj2Rhc=
Subject key identifier: 15:89:5E:04:FA:60:D4:E5:52:AE:CB:AF:81:46:C0:35:79:E0:4C:B2
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 019D265FC3473169DF6F52902B2DD61C0129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 17BE
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: tYUvEprwIycnG1O9gTLK/73lN8JI0VbM3xxoiCkiXu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c3:47:31:69:df:6f:52:90:2b:2d:d6:1c:01:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=15895e04fa60d4e552aecbaf8146c03579e04cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:c0:44:90:9e:74:ab:7f:ae:74:3a:e5:2b:
d4:1f:fe:a3:f0:e7:6a:5f:d8:ea:c8:b7:03:c9:bd:
1a:b8:fd:2b:20:5e:eb:f3:29:94:41:1a:a7:cd:d6:
fa:50:bc:9c:92:bd:cd:7f:03:08:60:c1:de:e5:3d:
93:26:fc:af:ab:a8:e7:90:b8:97:85:67:27:ad:30:
5f:ca:55:05:8b:67:1e:91:e0:f7:45:21:db:ee:58:
e9:f9:16:ec:28:77:be:c5:b7:5f:52:c9:36:8f:02:
e5:7f:81:09:fa:7e:fb:a6:2a:7b:c3:67:f1:06:12:
12:f4:a4:4c:86:00:3b:1b:90:09:fd:80:4f:0c:48:
ed:3c:0e:e0:98:c5:fd:9a:dc:b8:1b:72:b1:7d:f3:
59:34:39:d3:a8:f9:72:1f:67:dd:8a:b7:4e:10:49:
82:1c:5f:e2:68:a5:6b:f5:7c:38:d0:3e:63:7d:a1:
7a:b9:44:88:cc:e3:22:9d:9e:86:e2:a1:d5:58:6e:
79:28:6e:fe:ec:93:c2:43:b8:2c:ab:ab:fc:36:72:
92:f7:0e:ed:49:f2:9d:a0:20:d8:1a:6a:52:40:6b:
34:4d:e4:28:87:a3:e0:23:f0:72:bb:43:d0:0f:e2:
d9:eb:6b:9b:2d:86:86:7c:fb:63:45:b6:e3:85:70:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:5E:04:FA:60:D4:E5:52:AE:CB:AF:81:46:C0:35:79:E0:4C:B2
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:11:7c:b1:29:9d:a4:d3:b5:80:ec:55:71:e1:b7:03:04:
75:61:33:39:5d:a6:aa:63:ea:6e:0f:36:08:40:42:e0:98:0b:
45:16:63:ad:a5:1d:19:b9:79:c0:4d:dc:c5:7d:6a:72:9a:aa:
d9:3e:29:76:57:35:b1:7b:fc:b8:84:56:21:e1:0d:db:3f:49:
1c:67:44:16:b8:ee:c7:2d:02:12:fd:7b:07:ac:0f:f1:2c:e3:
ff:e2:e9:7c:4b:d7:b3:d2:1f:05:d2:7d:e8:70:6b:b0:0e:4e:
82:68:58:52:42:ca:bc:f5:69:2b:01:df:ef:46:fc:85:2c:d8:
76:3b:47:86:7c:d8:78:ab:81:4c:c4:4f:7e:7f:a5:3f:15:8b:
88:7c:aa:b7:ad:07:6a:b7:95:17:6d:79:4c:3a:f6:97:1a:22:
d4:f2:82:87:5c:0d:34:97:ef:2d:60:2f:24:21:6b:43:93:4b:
74:f3:f0:b0:ca:68:01:3e:e8:2f:69:5d:59:1f:de:e8:28:93:
41:b7:cd:fe:54:a5:52:1d:f6:a5:e5:27:bf:d6:4d:49:24:23:
66:b6:f1:8f:1c:2b:7b:e9:e5:b3:f8:23:4c:4e:64:45:f9:5a:
cf:a1:15:b0:4d:50:80:bf:8c:9b:3e:59:6d:67:46:85:eb:79:
0e:e9:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:27 2026 by rpki-client