Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: WegUOiKxhZ1gbU+K2waPBFmEkN3WCLrfIZnCxBHR654=
Subject key identifier: 1D:B3:34:10:75:79:F7:CB:88:6F:16:D5:B9:B9:0A:47:6E:FD:6A:77
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 019D2816F33862D45EDED5D86F1758F7E9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 08D6
Signing time: Thu 26 Mar 2026 03:01:25 +0000
Manifest this update: Thu 26 Mar 2026 03:01:25 +0000
Manifest next update: Fri 27 Mar 2026 03:01:25 +0000
Files and hashes: 1: h02F20m-HtlrYP1IvxDBcCyL25o.roa (hash: aEq2H+PemeJ+vZCbIyEhHoWK4ZLPYe1mqTH4CSucVMs=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: b52IUGHPqKjSUaTicy/Iala8hU6WcXkafR2qndueGCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f3:38:62:d4:5e:de:d5:d8:6f:17:58:f7:e9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Mar 26 03:01:25 2026 GMT
Not After : Mar 27 03:01:25 2026 GMT
Subject: CN=1db334107579f7cb886f16d5b9b90a476efd6a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:bc:a4:b3:cc:3b:e3:73:6f:d6:99:81:af:
17:89:47:6e:c9:2e:11:c5:42:03:27:e2:5b:7f:0d:
c4:ec:61:ba:52:45:d9:03:13:db:3c:00:8b:f3:e2:
a1:d0:82:99:3f:66:33:15:bc:ec:af:8c:50:d0:f0:
83:89:4a:2e:d3:a2:2e:64:bf:4b:ec:27:59:ef:79:
28:e7:d1:d1:fd:c0:d7:bb:1c:ac:8f:7d:4d:14:44:
ff:4b:7e:63:9e:20:c1:4e:49:da:aa:60:d4:ba:34:
91:70:ca:4f:a4:f1:65:18:ab:47:3a:7c:63:31:23:
6e:fa:bc:28:5b:17:0d:7b:24:d2:d7:57:63:fb:6d:
6c:01:e0:2b:cc:01:c2:83:0c:d0:63:bc:0e:e6:c0:
d3:df:f8:65:10:33:22:de:e8:e3:0f:88:58:2d:9b:
ee:66:6b:96:53:2d:24:f7:86:44:6c:6b:4e:c0:4f:
ef:e2:f0:d3:3e:1e:91:f8:30:c3:ff:02:e8:2f:ca:
2f:d0:b0:22:1e:e5:85:27:f0:99:88:ba:25:d5:ca:
be:dc:76:ae:7b:e9:be:44:7f:4e:ec:c6:72:76:95:
87:cc:36:ba:78:0c:f2:92:f6:73:ac:b4:8c:1a:8d:
f2:60:da:6e:ea:ea:b5:82:b0:5a:c0:49:33:03:48:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:34:10:75:79:F7:CB:88:6F:16:D5:B9:B9:0A:47:6E:FD:6A:77
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:9e:77:03:19:cb:55:21:f2:e6:4d:af:c0:45:ca:40:7d:
9c:a2:d2:9c:8f:67:96:dd:fb:7b:5c:3f:e3:8c:ce:db:21:3d:
80:3a:a4:d7:14:5f:73:e9:f1:32:84:32:cf:40:90:1e:33:54:
f5:2b:a9:97:38:fd:8a:e4:8f:5b:e7:14:ce:95:35:82:93:4b:
ff:0f:20:6a:78:42:68:a5:53:e1:ce:00:92:29:75:fa:89:6e:
04:2f:b4:ea:07:10:f3:6d:8d:67:b4:6c:6d:5c:32:f9:12:22:
95:29:e4:f0:2f:b7:77:49:2c:00:5d:b4:32:78:4c:4a:8e:09:
d7:8e:e6:83:6e:19:2a:27:c5:4d:d9:c2:ea:c3:92:79:ec:46:
0c:7c:bb:d9:8e:19:67:d3:ce:31:bd:3f:61:ea:2a:a7:41:c0:
4c:79:ae:2a:73:26:cd:86:54:07:f7:63:31:34:90:f7:95:86:
84:2e:99:37:2b:9f:07:78:ee:1b:a2:4a:a9:e6:8b:49:f4:32:
43:49:05:e2:71:e7:17:1f:3b:20:94:85:4e:07:1a:c8:ab:a9:
b3:e6:66:3b:4e:d9:90:b8:10:a6:27:29:de:5b:67:74:0b:9f:
38:47:9c:c8:14:9c:63:b5:88:2d:87:65:a5:38:3b:3a:4e:53:
78:cd:59:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:37 2026 by rpki-client