Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: 5PYkNS7cqJaAs3xt7jnpca7NB9hQddcyHt0lU3iJiSQ=
Subject key identifier: AD:87:2A:4C:36:23:4F:6F:91:D1:31:77:7E:AB:57:28:55:55:DE:B5
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019D265FC6C204784030992FFEB5C4BD58A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0B3D
Signing time: Wed 25 Mar 2026 19:01:44 +0000
Manifest this update: Wed 25 Mar 2026 19:01:44 +0000
Manifest next update: Thu 26 Mar 2026 19:01:44 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: 5kta8kUWZ6OaW6SKJJ095ACQXucYM8Jvva2tVIJRejc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c6:c2:04:78:40:30:99:2f:fe:b5:c4:bd:58:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Mar 25 19:01:44 2026 GMT
Not After : Mar 26 19:01:44 2026 GMT
Subject: CN=ad872a4c36234f6f91d131777eab57285555deb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:99:78:c9:40:7e:0c:31:f0:96:42:32:05:
a5:b7:35:cf:01:d5:b1:d5:39:e0:da:54:47:04:b4:
a9:15:a5:03:83:77:8e:29:dd:b9:f3:b1:86:ea:d8:
48:a3:24:13:93:71:82:f0:8b:ac:b7:bc:e6:bb:4f:
63:9f:bf:79:31:28:39:be:ca:96:85:6a:3c:ca:86:
e9:69:6d:98:46:8b:db:83:4b:45:09:fa:f7:4a:c0:
fd:a3:ae:c1:ca:d3:c8:48:54:7a:f0:fb:94:2a:e6:
ab:fd:63:f9:15:70:37:69:d0:df:f5:9d:ce:38:d6:
77:e2:3a:e2:ad:86:65:3c:e9:be:83:c6:d5:03:95:
ca:82:16:09:78:10:cd:ef:df:d9:ec:85:4a:b1:14:
71:0a:06:6c:92:67:67:25:57:09:cf:b6:e4:6c:a2:
6c:74:39:07:e4:0a:fc:a5:5a:93:f5:88:70:dc:ba:
fc:8c:34:bb:1c:5e:c5:58:92:03:a0:ae:95:65:43:
9c:9f:ea:37:ad:51:14:50:12:a2:0d:8d:b7:18:16:
6c:6a:f0:a4:e5:bd:5c:13:c3:fd:e9:a7:7a:3b:b6:
a1:83:b6:45:76:89:c9:0b:20:1a:2e:dc:38:ee:c8:
03:30:5f:6e:9a:52:ad:a6:84:7b:33:0a:59:d0:cf:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:2A:4C:36:23:4F:6F:91:D1:31:77:7E:AB:57:28:55:55:DE:B5
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:31:c1:c7:1b:e6:75:b8:40:0e:0c:63:a5:6d:ba:51:12:81:
30:de:59:8b:89:db:82:7d:e5:cb:e4:ba:db:85:04:cc:f8:82:
57:25:e8:88:89:05:ec:e9:63:24:b0:65:ef:d3:e8:dd:80:cb:
10:77:6b:ba:44:a7:9a:c6:db:e1:88:54:86:6b:61:a5:29:50:
55:f9:61:f3:4e:61:9b:b7:e0:9d:c6:10:dc:a1:e4:91:65:ba:
16:8b:81:0a:ca:7e:df:84:c8:3a:d7:33:da:e7:b5:1f:d7:ce:
2b:21:8f:8c:e5:09:8a:fb:a0:86:da:49:43:e7:0e:c4:f4:29:
a5:1b:1c:a0:4f:0a:24:f0:40:d3:77:9e:3c:0c:3f:67:e9:c8:
a3:0c:3a:67:83:8b:9d:1b:e9:db:6b:c4:df:1d:82:be:40:08:
59:cc:64:27:6d:dd:23:74:6d:43:0c:ef:9d:6c:16:52:af:79:
a6:80:b6:5b:38:45:a1:24:c0:b4:f4:ca:72:83:96:c9:ce:e6:
29:4c:76:dd:ce:59:f8:ed:7b:11:bb:3f:dc:64:98:0c:f4:25:
00:3c:4f:98:5a:ba:18:c3:e6:db:65:2b:95:10:26:e6:fd:23:
3c:fa:12:ec:f2:a7:32:b7:26:32:e4:4f:6f:18:bf:fc:84:5c:
2a:95:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:51 2026 by rpki-client