Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: lU38wLg0kw9gjMtUTDMPbpSriIZdHQ0Bum2GfoKdrS8=
Subject key identifier: B7:D0:1E:68:D3:81:93:00:19:1E:49:BD:93:8A:DF:E5:CD:50:32:28
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 019D27A92ABC13E2305877BF25FBCBCCA2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 0768
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: 5Jta0wUT+mobo8hJjjQ8UoFvGmZ/GSdkfozxSaR6aDM=)
2: dNajQCUoGaoowLS9HpOXxA6vUe8.roa (hash: hhwbI1QROgF/W8q/u8jmMb63ziVKKIX34GLWc4neSDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2a:bc:13:e2:30:58:77:bf:25:fb:cb:cc:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=b7d01e68d3819300191e49bd938adfe5cd503228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:5a:65:52:f0:63:6b:cf:e4:46:67:8f:3a:
28:05:f0:63:f6:65:2a:69:f5:34:9e:9c:d8:f6:aa:
d7:11:7c:92:21:bd:fa:32:84:fe:fc:a8:7d:9a:10:
62:2f:e9:69:3d:5a:48:e4:73:dc:2e:f1:0c:f4:ac:
20:98:3c:d1:99:da:a4:ed:1d:69:52:b3:a2:98:7d:
33:c0:d8:76:9b:b1:44:c9:f4:62:e9:0d:fc:42:fe:
12:da:55:ae:7e:ba:56:4f:da:e4:6d:17:dc:6b:49:
72:74:89:da:1a:e6:a8:56:17:28:07:b5:f8:2a:f8:
21:2d:15:56:0a:ff:f8:b7:8c:15:13:7e:80:da:04:
1e:38:c4:14:2f:e0:94:20:34:cd:cd:d7:20:38:9f:
20:e8:11:33:ca:5d:42:c4:9e:9c:ba:7a:10:8f:78:
3f:61:74:6a:56:37:05:80:7c:5e:5e:dd:38:a5:3b:
0d:2f:2f:0c:87:05:2d:ab:9a:36:ab:07:b0:5b:aa:
b1:2d:3a:c3:55:30:17:a4:e9:c9:f0:68:52:7e:f0:
73:08:3d:65:c9:e7:f9:a3:0f:fc:2e:50:cc:e4:9a:
12:c2:32:b3:af:88:ca:16:7e:57:3f:44:12:8a:ad:
f0:a3:13:60:25:12:24:2d:31:19:c1:79:55:1c:1a:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:1E:68:D3:81:93:00:19:1E:49:BD:93:8A:DF:E5:CD:50:32:28
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:27:c7:3b:e2:20:ac:e5:84:fa:f0:c2:08:8e:e9:af:79:
c9:38:8e:06:45:eb:72:3b:7b:c3:c9:d9:12:35:24:e9:6a:2e:
e8:00:db:10:7b:66:66:cc:c7:16:20:37:60:10:19:e7:88:ad:
6e:4b:63:59:29:9b:32:e5:2f:b8:4e:07:f5:b1:eb:df:6c:b3:
c4:40:ab:f5:81:70:0f:16:51:fd:25:4d:ba:f8:f0:c6:bb:65:
66:32:16:5b:8c:d8:80:45:2f:6c:26:0c:13:76:77:d5:d4:3a:
7c:fe:44:19:7a:f7:d4:21:89:af:ea:89:d6:b5:5f:18:ea:8c:
7c:12:11:6e:5e:d8:d3:1e:de:46:70:a8:b2:b3:b5:e4:89:90:
95:38:0b:f8:5b:b7:0c:ab:38:4a:6e:87:bc:fe:6d:11:62:2b:
f9:9c:5c:73:0f:b2:16:37:b3:37:23:d4:3c:44:19:8f:85:db:
ae:11:c7:5f:3b:bf:46:09:d5:33:e4:d5:a5:34:cd:2d:c6:19:
7e:ef:a0:4d:fb:35:ba:a6:19:b0:73:f9:d7:31:4a:5a:35:61:
45:31:e5:28:83:66:33:4a:c5:50:58:c8:dd:da:5b:d0:98:20:
45:22:0f:d2:ce:3e:e9:b8:b9:cb:84:32:70:a6:0d:95:5e:ae:
02:ec:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:35 2026 by rpki-client