Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: NhfcDnCgTHbF/XAkkiIKTlnvdnHq2HXCGlrtossOzk4=
Subject key identifier: 1A:3F:03:13:6F:47:63:54:0D:5A:B8:0F:AD:72:8F:33:02:FF:68:69
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 01A0D8A8EA35E6733EDE329688BADEAD8B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 0D88
Signing time: Fri 25 Sep 2026 13:02:23 +0000
Manifest this update: Fri 25 Sep 2026 13:02:23 +0000
Manifest next update: Sat 26 Sep 2026 13:02:23 +0000
Files and hashes: 1: LsSYewZqoEloekxN9olY0ZWErpE.roa (hash: yniEZZxbWYUya3z1wPxXhEtgwAHbS0sqm3BUjgu913A=)
2: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: 5P4eEtd815SPwcf0XhjtB58Vyoqu7Iis9ov+sooXQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:ea:35:e6:73:3e:de:32:96:88:ba:de:ad:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Sep 25 13:02:23 2026 GMT
Not After : Sep 26 13:02:23 2026 GMT
Subject: CN=1a3f03136f4763540d5ab80fad728f3302ff6869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:f5:fe:ca:f2:5b:28:23:c0:a5:bd:9e:ea:
9c:aa:b8:a9:49:44:bf:3b:56:25:43:a2:1c:71:14:
ac:3c:09:27:b8:6f:d6:8b:d3:28:79:63:ed:17:65:
aa:98:16:bc:2a:5b:4a:61:1c:a6:76:27:a7:bc:ae:
89:d5:87:8d:17:fa:e8:89:c2:e1:38:27:1d:c8:9d:
55:b3:61:87:b3:86:11:f0:fd:eb:b7:26:7b:0e:2b:
76:04:1e:85:9e:9f:16:0b:55:df:ac:34:23:e8:b2:
73:ac:90:18:f0:b2:39:fe:83:98:7b:a4:a5:6b:d3:
05:b9:5e:ab:46:e1:8e:d7:a3:ff:7f:b9:cb:c3:94:
fa:e0:24:b6:b6:d5:6a:36:08:93:bd:d4:d2:a0:8e:
c3:0c:dc:fe:7d:fe:71:66:bb:0d:6b:44:41:d0:8e:
3c:af:f4:a2:92:62:3a:15:4b:e4:0f:bc:6d:a0:69:
7c:e7:e0:46:9a:d0:49:ae:e4:e8:0f:e2:44:fb:e8:
f0:ca:5e:d0:fa:b1:33:a9:c9:04:72:d2:91:b4:1a:
73:0a:92:f2:b4:b8:2b:72:de:fe:62:45:1b:30:1e:
06:17:e1:b2:e2:8d:49:17:e4:44:50:ec:5c:85:bb:
3e:19:5a:56:b9:b3:bb:db:49:ae:36:32:3b:fc:8b:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:03:13:6F:47:63:54:0D:5A:B8:0F:AD:72:8F:33:02:FF:68:69
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f3:04:23:d2:c5:4a:ef:34:92:2a:95:58:48:03:b6:3d:e2:
7a:27:23:f3:81:2b:63:02:5b:0b:2a:eb:33:65:00:ac:d3:a1:
dd:b3:42:d7:75:bc:a6:68:c8:f7:4c:4b:29:ea:d6:b8:ef:86:
28:5b:2c:29:93:ae:1b:a9:dc:ad:d2:58:f1:e8:79:be:3b:85:
ef:fc:65:ee:c7:66:fe:a4:f1:f1:ca:27:a5:3a:5a:e9:80:e8:
8f:97:f7:77:6b:bd:cb:88:c2:35:d0:02:67:25:66:7c:b8:35:
1d:4a:10:1b:76:4c:82:b2:4b:7b:3c:31:b7:95:83:39:b3:f7:
4f:e1:74:25:e2:73:af:bb:49:53:5d:85:5a:b8:bb:b7:41:1a:
4f:78:f7:a2:b5:89:da:5f:4f:b6:99:cb:60:bd:d3:97:c9:fd:
f9:97:09:7d:62:06:74:96:84:1d:0f:30:c6:23:5d:45:ba:b9:
81:c3:87:c5:6f:94:2a:1c:b7:6f:50:f0:5d:31:8a:dd:3e:b5:
77:a9:d0:83:5f:fa:82:b5:ee:62:47:66:84:89:51:b1:bf:54:
58:24:da:5e:4b:9e:ae:d5:e6:00:02:98:70:50:0c:c5:38:50:
c8:6b:4e:db:2c:35:c2:3d:c0:89:ef:52:8b:3b:75:06:99:c1:
a7:e5:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:17:28 2026 by rpki-client