Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: xJLA3GJuE42lYicmod3AlUvJ0CCV8FgDZbGz9Qrc3tc=
Subject key identifier: 96:99:74:39:04:E5:55:79:0E:A3:AE:4E:35:87:3E:BF:E7:2F:16:54
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019F943682FC837C5F29AFF8637796D323B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0C7F
Signing time: Fri 24 Jul 2026 13:00:28 +0000
Manifest this update: Fri 24 Jul 2026 13:00:28 +0000
Manifest next update: Sat 25 Jul 2026 13:00:28 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: EWcmMzW1wYfHYpN4gyEMutLrFQf+bWlpLjxIG8j+E4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:82:fc:83:7c:5f:29:af:f8:63:77:96:d3:23:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Jul 24 13:00:28 2026 GMT
Not After : Jul 25 13:00:28 2026 GMT
Subject: CN=9699743904e555790ea3ae4e35873ebfe72f1654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:a0:cb:ee:6d:b9:99:eb:2e:11:fc:3c:40:
35:4d:0d:26:fa:80:0f:b6:f2:a7:bd:bd:72:fc:ca:
a3:b6:b3:5d:20:11:ce:1c:bb:f5:4b:a1:d7:ec:c0:
42:5e:1b:73:89:58:d0:2c:96:24:57:95:c1:0f:c0:
59:1d:2c:8c:f7:a3:38:ea:df:8f:e1:78:04:85:1c:
d4:a6:85:94:ca:16:b6:47:8e:7a:a9:a7:76:96:20:
b5:00:69:bc:f3:7c:81:0a:25:62:84:f9:39:7f:6a:
0d:4c:67:74:69:bd:47:32:a1:57:25:37:a0:5a:4d:
af:e9:30:b8:4a:fe:ef:ac:38:02:d0:fa:4a:95:bc:
a6:de:82:40:4d:b3:74:43:9d:9d:da:04:68:cf:46:
e9:e9:ea:f3:84:03:c0:93:cb:e3:3b:96:74:ea:2e:
8c:38:45:7a:93:eb:70:e1:90:2a:b7:e8:5d:ec:53:
13:95:81:8c:5f:67:a3:72:b2:6a:03:0c:6b:18:6e:
47:6c:b5:c3:98:88:8e:95:ff:c9:82:19:1a:77:f1:
f4:e7:10:e8:31:93:d2:bc:4e:e6:90:df:b9:ac:ba:
28:f5:1e:d0:5a:da:3c:b7:86:b1:2d:36:32:c8:47:
d3:67:f5:e5:2b:60:ee:46:5c:3e:02:d3:4d:a1:8c:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:99:74:39:04:E5:55:79:0E:A3:AE:4E:35:87:3E:BF:E7:2F:16:54
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:51:f8:2b:43:b6:06:fd:26:3f:2d:e2:88:11:b8:02:cb:cd:
60:9e:08:3f:ea:dc:08:a5:34:4a:e1:88:57:d9:2d:80:f1:44:
5d:80:15:39:6e:6a:a0:86:91:ca:f4:bd:db:0a:79:90:0e:bb:
41:3c:1b:1f:2b:b6:e9:e6:4b:f3:ef:6c:82:91:67:d5:42:77:
e4:e6:d8:3e:8c:51:93:d5:3c:8e:71:cb:36:a7:96:21:17:c7:
40:32:59:c8:c8:fe:56:64:68:5e:e6:5d:19:d0:9b:c1:89:7e:
4e:b0:2a:4d:fb:e8:ef:66:b8:1d:ab:eb:bf:0a:a0:99:fc:9d:
25:ec:34:bb:c2:83:8e:36:16:d4:43:ba:ed:ae:0d:c3:c5:98:
cf:d9:43:3d:fc:da:b8:35:ab:e8:61:a2:55:d2:28:54:82:4a:
1c:7b:cf:0d:9e:c6:9a:4e:43:9e:86:99:fb:0f:58:59:35:d7:
74:72:d2:bc:cc:9b:3e:d6:72:48:a0:36:23:49:28:82:6c:29:
ad:82:fc:c6:16:60:0e:a5:a8:44:9e:0f:be:dd:1f:b2:d0:a8:
29:96:63:0d:d5:22:8a:49:47:16:4e:bb:0a:9c:05:69:be:fd:
91:fa:f2:e5:04:51:5d:4e:5f:59:39:bf:f8:b9:4d:3d:52:3a:
5a:12:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:22 2026 by rpki-client