Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: fz7/qwlv2GO7YAEuRBtxv/3LdFQDlxUsPb8c3G7PuOE=
Subject key identifier: B7:E4:16:6E:53:7B:F4:DD:F7:5B:C3:1B:4D:AC:1B:B7:47:1B:6C:26
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 01A0F1C30CC368D7C38BAD02E54E68BF6A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0D34
Signing time: Wed 30 Sep 2026 10:01:26 +0000
Manifest this update: Wed 30 Sep 2026 10:01:26 +0000
Manifest next update: Thu 01 Oct 2026 10:01:26 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: bHU91w9t+QlVFSa83+E4gO33N7wbTjw2Fsd6cs6wkYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:0c:c3:68:d7:c3:8b:ad:02:e5:4e:68:bf:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Sep 30 10:01:26 2026 GMT
Not After : Oct 1 10:01:26 2026 GMT
Subject: CN=b7e4166e537bf4ddf75bc31b4dac1bb7471b6c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:e9:34:03:7a:0e:a7:fc:84:98:03:39:18:
21:7b:2f:d1:58:bb:18:9a:32:ac:3e:39:1f:69:31:
58:7b:ad:9f:30:46:36:ef:35:24:13:01:d6:ba:63:
f4:5b:51:af:f1:8e:cd:7b:e2:6d:f0:74:33:f8:a3:
0b:55:00:5e:9b:a8:f1:c6:b7:ff:b3:ed:03:72:08:
12:17:6c:3d:01:bd:a0:88:60:f9:32:eb:18:43:cc:
a2:0e:2e:37:ac:ea:bc:97:1f:4f:01:43:7d:96:c7:
d8:87:e3:85:5b:26:4f:62:b8:fa:3a:4b:4c:05:d7:
d1:1e:04:92:d1:56:1d:61:2c:8a:8e:d0:c7:bc:e7:
8f:58:a9:18:c5:7d:d7:83:54:d2:23:78:61:a2:0e:
b6:31:00:95:20:b5:e9:f7:68:78:4b:7d:26:49:7f:
c2:fd:e1:9c:2d:56:07:4c:65:54:e8:ea:20:d5:01:
4c:5e:6b:27:87:aa:f1:01:02:54:76:31:da:6a:10:
ed:75:9c:00:a1:45:b4:db:0c:48:1b:3d:fb:9f:86:
65:29:8d:8a:00:85:f9:a2:b6:36:75:3d:8b:bf:34:
4d:5b:09:6b:69:93:65:1a:f3:bb:ab:42:8a:01:db:
a0:42:df:28:8a:52:cb:c1:20:93:75:7a:b7:41:97:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E4:16:6E:53:7B:F4:DD:F7:5B:C3:1B:4D:AC:1B:B7:47:1B:6C:26
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:72:26:d2:27:6c:8f:99:ac:3d:36:81:d4:4d:e9:1d:40:f4:
c5:07:e6:96:58:74:3d:9c:3e:b4:0f:77:86:69:ab:a9:bc:5b:
06:c3:98:80:67:95:a7:b3:ba:b0:2e:e6:e4:da:99:6f:af:9a:
10:19:4c:37:28:80:b7:40:12:21:9d:92:8c:73:c6:34:90:46:
01:8a:1e:54:46:05:75:f7:f2:de:8b:08:39:fa:9a:7c:18:39:
70:56:d5:48:b2:5b:75:7f:4c:89:4e:0e:7b:d8:94:a9:55:57:
8e:35:a1:b0:eb:9f:01:ca:7c:d8:8d:8d:65:e7:a2:19:1b:dd:
8c:97:70:b2:d9:10:e2:da:cd:5d:4b:1f:6c:cd:c7:29:32:91:
54:10:b9:bd:49:ad:94:80:8a:23:02:74:6d:bd:eb:b2:72:46:
fb:8a:8d:28:94:29:97:2e:a9:fe:6a:f8:cf:84:89:b2:4e:06:
46:df:94:90:1f:79:8e:93:65:d0:3a:91:f9:04:44:07:42:34:
37:15:ed:54:30:86:dc:ed:9f:6d:c9:f2:ed:a6:c2:1e:4e:bf:
d9:e1:f6:6f:d7:3a:ca:b8:80:12:1f:8f:3b:54:17:cc:be:66:
26:32:35:e9:3c:1e:11:f3:79:5e:9e:76:bb:4d:f1:5b:46:dd:
53:f3:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:46:48 2026 by rpki-client