Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: g2ugn3h52J0SyE6pH43ef2b+6baZWGtch5977m+Wrnw=
Subject key identifier: 35:9C:8A:B1:4A:C4:CE:49:D7:D5:10:DD:72:34:CC:42:BE:B3:40:F0
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 019E1ED9F43BCA004150C523D2B707EF2BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0F54
Signing time: Wed 13 May 2026 01:01:00 +0000
Manifest this update: Wed 13 May 2026 01:01:00 +0000
Manifest next update: Thu 14 May 2026 01:01:00 +0000
Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=)
2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: z0Il7+XBXKk31fvgGeFTHnEYFPyy6mm74h/+hboF2T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:f4:3b:ca:00:41:50:c5:23:d2:b7:07:ef:2b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: May 13 01:01:00 2026 GMT
Not After : May 14 01:01:00 2026 GMT
Subject: CN=359c8ab14ac4ce49d7d510dd7234cc42beb340f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:3b:af:b5:23:b1:09:23:ed:d9:eb:d2:ac:
e5:8e:d9:dc:47:29:b5:54:fd:97:c7:3b:fd:a1:8f:
78:11:d1:5a:b9:11:c1:26:a2:2c:f3:d2:93:a6:c0:
50:b6:ac:41:25:0c:70:8d:88:84:b3:83:e8:2e:68:
07:67:2e:89:cc:54:f9:9f:c6:6a:ab:0d:54:e1:40:
06:9a:b6:3a:40:98:1f:2f:65:7d:e2:f0:6e:a5:75:
ff:17:08:2c:eb:55:cb:e3:7c:5a:e6:7b:fa:9c:69:
3d:f2:44:13:3b:1d:be:16:29:c5:ca:90:6d:dc:09:
93:3a:70:ab:67:2f:1a:af:56:d0:a7:52:41:af:6c:
77:54:10:81:8b:a7:fd:2f:94:56:20:ae:af:ba:e1:
96:6f:fe:ee:29:26:4e:76:d5:b3:49:5b:fd:8b:9e:
55:77:c3:ab:bf:45:86:4f:cf:ec:a2:f3:af:3b:be:
04:37:04:5a:e4:25:ff:80:ab:ac:de:3c:9e:95:68:
50:71:d7:06:bd:7c:1c:86:7c:38:11:79:c0:b6:98:
bb:9d:5d:33:cc:d9:af:9b:76:6f:2b:2f:3d:63:81:
25:77:bc:4d:77:a8:9d:37:d1:07:eb:58:6f:3c:c4:
f2:65:41:3b:23:be:89:9b:f3:3a:91:f3:ac:8b:db:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9C:8A:B1:4A:C4:CE:49:D7:D5:10:DD:72:34:CC:42:BE:B3:40:F0
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d2:73:1f:e3:3e:56:d3:5f:50:30:38:e0:7e:e1:87:ef:0a:
c5:10:fd:8d:0c:22:ee:5e:ad:37:7a:86:f2:f1:55:c4:c8:42:
a2:10:b0:99:a7:c2:2a:36:9c:b2:a5:94:6c:4d:fd:c1:d1:4a:
44:ae:98:36:b9:e3:fb:a1:c6:3d:01:ee:6a:60:80:64:b7:ba:
03:9a:0e:37:9e:7d:33:37:16:8f:34:fb:70:e5:d0:ae:dc:88:
b4:f9:76:42:2c:52:4f:ec:1a:c6:bb:c3:db:49:15:63:bf:c8:
51:37:81:8f:9c:c2:9f:01:27:f9:df:b3:60:ba:34:e0:73:ed:
84:bf:07:4e:21:54:9c:90:a4:81:e7:e1:41:19:7a:77:76:72:
fd:8e:a7:e7:d1:2f:6d:a9:e0:5b:ed:77:93:9e:ef:40:6f:d0:
f9:c3:74:ab:7d:61:28:a5:71:88:91:99:82:e3:3e:91:0a:cc:
70:a7:68:b7:f8:ff:e1:51:a8:a4:cf:2b:1f:81:3f:4c:26:e4:
5d:98:21:0c:b0:81:15:96:75:be:ef:5c:63:b2:17:42:fe:0d:
29:ce:73:9a:02:15:f6:4f:3b:8b:8a:0e:31:53:7c:38:2e:5e:
12:23:a6:e7:cc:93:90:4d:55:37:a7:a5:c8:d1:cc:07:3d:48:
e3:89:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:31 2026 by rpki-client