Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: 51ZcTcNKoBOs06s4N+LQf/2V6DygOnnry6NG1KB5NXg=
Subject key identifier: C4:30:4B:15:84:1E:4A:81:44:6F:C0:70:36:CD:31:0A:F6:DE:E8:77
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019E1F7F29187F0A2C19BD90B5A82BFF9F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0BBE
Signing time: Wed 13 May 2026 04:01:27 +0000
Manifest this update: Wed 13 May 2026 04:01:27 +0000
Manifest next update: Thu 14 May 2026 04:01:27 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: bf7517dZuGBWf6RgpSVvRNFzJocqcSVYt/0p0YDEZuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:29:18:7f:0a:2c:19:bd:90:b5:a8:2b:ff:9f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: May 13 04:01:27 2026 GMT
Not After : May 14 04:01:27 2026 GMT
Subject: CN=c4304b15841e4a81446fc07036cd310af6dee877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:f3:04:46:69:8f:98:0c:1a:70:d9:59:2c:
8b:db:03:1b:7f:b8:de:34:34:63:31:ea:a8:f6:1c:
fc:54:f3:d9:10:68:e9:e0:35:14:1e:b5:a8:86:b0:
38:18:4c:40:de:8c:22:ee:d1:58:e6:b9:fd:86:40:
f2:5f:e9:33:e6:8e:35:3a:a2:4c:67:50:d1:30:28:
09:5a:3a:5b:5b:94:67:9c:d8:e8:aa:f1:1c:4b:0b:
68:cf:3b:a3:93:e8:4b:eb:2e:70:9e:a9:01:bf:4f:
d0:66:e7:6b:60:aa:02:c3:da:93:c7:56:38:69:96:
25:5f:b3:86:6d:05:4d:1f:d7:0c:a3:23:84:5b:bd:
69:5b:59:96:db:8b:eb:cd:bc:c9:26:7b:8e:c3:53:
c1:28:89:3f:55:75:24:b4:c6:e2:eb:ae:60:0d:ff:
30:a0:20:f2:3f:bc:39:6c:64:8e:53:57:b2:2d:12:
ac:87:70:24:26:59:aa:f6:2b:0f:e0:ac:7c:c4:03:
ec:cc:16:8a:08:b9:47:84:6f:e5:53:85:99:e8:2a:
5f:f9:cd:52:e5:e9:52:af:54:86:7e:71:ed:28:b9:
d8:28:2e:3f:f2:43:64:a3:14:2a:40:51:67:64:e6:
e3:9a:ee:4a:c1:49:23:23:dd:e9:c9:29:91:56:72:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:4B:15:84:1E:4A:81:44:6F:C0:70:36:CD:31:0A:F6:DE:E8:77
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:5d:8f:cd:ab:21:9a:3d:c4:3e:14:b1:d2:24:c7:e6:e9:
00:98:96:66:5b:93:8e:9e:5a:b9:96:3f:58:47:f0:c3:9d:e9:
38:34:6f:77:84:34:23:87:8e:e4:e4:59:78:57:d8:81:d7:a0:
5f:b9:14:65:93:2a:d0:56:27:c7:36:9b:93:30:91:86:75:2d:
4e:3c:bf:1b:1b:95:47:d6:59:24:5b:cd:a2:9f:41:08:67:d8:
ea:a6:cd:00:6f:b4:6f:64:51:e5:31:40:e2:05:71:5d:64:d3:
ca:5a:a1:39:ca:ce:a9:6d:9a:81:f6:40:1f:77:7f:02:bb:9c:
c4:12:f6:ca:58:7b:9d:6f:f9:8f:57:07:19:ad:aa:73:0f:31:
14:72:79:69:63:68:55:d9:8b:73:58:4f:95:43:8d:ff:d7:2f:
d4:36:a0:40:93:73:8e:32:35:5e:56:65:7b:18:31:f0:98:d8:
f2:df:44:83:8c:9a:ea:2b:1d:9d:12:e8:5b:20:d8:5b:18:47:
f7:c1:55:3a:8b:19:7a:d3:ee:5b:10:0c:39:ec:4d:f3:04:99:
7d:e6:14:2b:43:69:99:17:49:4a:dc:3b:57:d0:b9:71:7c:a2:
4b:03:43:c9:b0:8d:db:1e:ba:08:8e:8a:7d:15:76:11:ed:8f:
fc:98:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:21 2026 by rpki-client