Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: d+Iw4U5Lc/VQx4tEB/cc8T7n6DsR4GaS9vMIFPT3B70=
Subject key identifier: B2:81:F7:F6:56:25:2E:32:BB:D3:59:06:8A:90:37:6E:FE:DB:44:F4
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 019D26288786CB394F380A2E3E87F7FDCB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 173E
Signing time: Wed 25 Mar 2026 18:01:23 +0000
Manifest this update: Wed 25 Mar 2026 18:01:23 +0000
Manifest next update: Thu 26 Mar 2026 18:01:23 +0000
Files and hashes: 1: Il9HTm1cbmAODNYnWgviSsE98jM.roa (hash: 1b1CWbUFPO+dEyWsVHF8SzkLadyx+wcJAfCiROD6bO0=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: tRJ8gb+8Xspxf5eXPQdMMdqc4IN+XCmfExeGHs8fP2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:87:86:cb:39:4f:38:0a:2e:3e:87:f7:fd:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Mar 25 18:01:23 2026 GMT
Not After : Mar 26 18:01:23 2026 GMT
Subject: CN=b281f7f656252e32bbd359068a90376efedb44f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:09:25:a3:20:82:b7:ea:4d:a8:c5:53:8c:
8e:e4:83:55:77:67:2a:ba:37:10:ec:a0:de:ea:95:
f6:93:5a:79:49:1f:57:5a:4f:bb:03:fd:17:9a:41:
7c:6b:64:3f:0c:10:ce:96:5f:80:af:9c:e6:cf:72:
04:22:86:57:3d:16:f4:b7:64:0c:89:76:5c:e9:43:
2a:91:58:9d:c7:91:1a:29:1e:58:64:be:86:40:52:
d0:2f:9b:85:7c:04:e2:56:11:a8:3f:10:4b:b6:c8:
a6:27:a6:1c:8b:87:d8:3b:bc:bd:a5:2c:b1:56:47:
6d:58:7e:85:7a:58:5a:9e:45:52:ac:48:48:ba:76:
93:76:cb:4e:7c:e6:00:a8:df:9c:1a:b6:d3:d8:da:
a3:3c:3a:3c:53:b7:bf:fc:b6:26:e3:27:32:fc:cc:
2b:82:ef:f9:04:23:8e:1c:51:c6:8a:eb:8b:6f:ea:
95:43:de:8c:2e:ed:83:10:73:5c:c7:70:90:74:78:
fe:be:30:65:fb:0b:06:43:3c:82:db:7d:20:40:85:
b7:10:d9:ac:5c:19:d6:8f:57:ec:53:73:3d:ce:98:
96:a6:a1:a6:ed:12:8c:2f:3a:d5:62:47:0b:48:22:
34:b5:b2:f2:6a:bc:bf:c0:9a:60:33:03:95:31:c9:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:F7:F6:56:25:2E:32:BB:D3:59:06:8A:90:37:6E:FE:DB:44:F4
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4d:1b:59:04:71:52:e9:18:c1:02:77:a4:fa:6d:8e:36:2a:
42:ca:ae:a3:e5:8d:23:22:78:f1:be:c9:ab:c7:04:5e:e3:d5:
73:0b:e1:99:0e:e2:0f:65:76:13:7a:9a:1b:03:55:a3:3f:17:
e0:36:28:6e:af:28:32:b0:72:c9:fc:7b:51:8b:e0:db:28:05:
a7:87:48:ea:b4:d9:1a:e4:f3:78:df:24:35:91:d3:4b:7c:60:
d5:91:b4:1f:2a:a2:76:ba:45:5d:37:92:05:90:3d:41:db:b5:
3c:23:54:6e:28:c9:6a:a4:43:6e:34:b9:b4:ef:7a:8b:3e:af:
30:a3:33:69:7c:77:23:b7:35:a6:b4:12:d8:c2:ac:b3:0f:7e:
21:c8:42:4d:86:10:12:80:dd:eb:1c:3e:ec:bc:71:6a:36:7e:
0b:d2:7e:76:4f:93:22:4d:27:95:3b:66:33:56:c1:1d:8e:fa:
ce:92:49:7e:9a:87:44:bd:9d:e3:4d:a8:e2:00:6f:ef:5d:e5:
37:7f:4f:e6:8c:7c:c1:f7:cf:cb:22:b2:9a:e4:f8:18:24:4e:
6d:6d:e4:bd:6a:f7:40:9c:60:11:e9:35:a7:2d:37:74:df:99:
d5:27:99:17:3d:e7:31:a6:6c:eb:fa:64:c6:83:34:53:a1:59:
56:e4:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:12 2026 by rpki-client