Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: URQt5jOZZ7sRb6+DJy6W7MZg3Xxr8v3PsG0XAJ+vYYc=
Subject key identifier: 80:48:2E:4E:E1:6A:E4:56:83:D3:69:F5:90:80:40:60:65:99:78:EF
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 01A0D6B959597AE40C1DBAFED0B775E408A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0D26
Signing time: Fri 25 Sep 2026 04:01:06 +0000
Manifest this update: Fri 25 Sep 2026 04:01:06 +0000
Manifest next update: Sat 26 Sep 2026 04:01:06 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: 2kT8YRNuRJmjdqLqaifaWRwWEIFrq1atq3wO+JaWTxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:59:59:7a:e4:0c:1d:ba:fe:d0:b7:75:e4:08:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Sep 25 04:01:06 2026 GMT
Not After : Sep 26 04:01:06 2026 GMT
Subject: CN=80482e4ee16ae45683d369f590804060659978ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:db:a4:fc:a1:cc:28:84:3d:83:c0:f1:a9:
94:e0:4a:83:6e:f5:6d:f2:29:9b:6d:59:ec:d5:91:
de:96:a6:84:0d:cc:04:02:6d:c2:49:c5:4b:c3:98:
cf:13:d2:5c:e9:a1:92:5d:b1:e8:d9:60:f3:1a:f7:
4e:4b:7e:e5:da:e0:02:f6:29:cf:e3:4e:67:74:c7:
0e:20:ad:32:d4:c8:1f:a3:da:d4:35:3e:9f:01:e1:
81:05:75:be:9e:e1:84:b8:cd:9e:7d:2f:83:7e:35:
e8:37:22:1a:c3:c0:13:30:30:ba:28:61:78:b7:5c:
77:e0:28:75:73:9c:16:50:ec:5e:51:90:95:68:46:
7a:1d:ff:3e:d8:25:f9:ef:9b:67:0e:07:73:93:7e:
b5:a9:6a:e8:af:65:8c:2b:2a:f7:05:34:e9:62:ba:
65:94:a0:90:ed:fc:f8:91:b8:42:c2:fd:58:61:94:
97:48:f4:21:fc:be:35:3c:06:d1:2c:23:70:63:d0:
06:e6:5d:bd:fd:94:13:3a:af:c6:19:43:1e:53:85:
5f:94:89:f1:5b:ba:0b:de:f5:03:57:19:92:c2:c4:
d3:52:58:0c:fc:7f:4d:e0:02:81:ca:a6:a3:74:2a:
57:39:27:75:58:c9:c4:3d:8a:91:55:b5:eb:2e:45:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:2E:4E:E1:6A:E4:56:83:D3:69:F5:90:80:40:60:65:99:78:EF
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:66:0d:82:82:da:32:51:c5:2f:5a:8b:e3:fd:a1:26:a0:31:
7c:82:57:86:cb:ef:a1:7d:cb:b4:a5:6f:a0:88:b6:19:0d:fb:
91:f9:84:29:69:70:ab:0b:b8:ca:7b:09:08:83:22:d9:c5:85:
41:51:aa:b5:51:d9:4c:c6:63:30:40:c7:1b:e0:2a:70:a6:3c:
b0:10:8b:ee:d6:bf:22:c6:0c:33:a1:4c:86:6e:0d:a4:bf:ca:
36:07:1d:5c:52:b2:60:f8:5c:20:62:93:c3:93:fc:31:e9:b0:
c8:f8:4c:3b:86:67:d7:b6:94:13:31:25:9a:c9:d0:0e:08:a7:
06:6c:c5:7a:48:05:e6:c2:f0:bf:2d:bc:12:ad:ab:e6:5b:f5:
70:7d:d0:a0:92:46:be:8a:5b:31:31:68:5c:92:f7:86:b0:1d:
ff:07:92:97:5f:01:46:05:29:8a:2b:9e:20:43:00:d5:f0:55:
4b:51:cd:a1:bd:27:69:ae:40:61:2b:00:2a:ca:62:4f:0a:6b:
9a:4b:d1:71:34:bf:9d:49:6f:2c:65:8b:9f:08:f8:ca:22:b8:
bd:c5:35:db:d8:70:95:0a:df:35:94:0d:c0:44:36:2e:87:86:
3d:8d:a9:35:c9:6b:10:37:b1:4e:42:e1:af:63:0c:7c:24:0c:
cb:b8:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:59:39 2026 by rpki-client