Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: 6HqQbZzdCuDP0762NR03aHXT9GMSndv5r+PeKX78GvU=
Subject key identifier: 38:62:18:5B:05:62:3E:2F:BF:B8:02:04:E4:61:3A:BC:C4:3B:84:FE
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 01A0D9F1EE605DC86E5D2EA611E8817BDB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 10BE
Signing time: Fri 25 Sep 2026 19:01:46 +0000
Manifest this update: Fri 25 Sep 2026 19:01:46 +0000
Manifest next update: Sat 26 Sep 2026 19:01:46 +0000
Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=)
2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: pNrMC8/8g5TrkiazYDhx2P+UVanOw4prEjYRHqwuvs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:ee:60:5d:c8:6e:5d:2e:a6:11:e8:81:7b:db:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Sep 25 19:01:46 2026 GMT
Not After : Sep 26 19:01:46 2026 GMT
Subject: CN=3862185b05623e2fbfb80204e4613abcc43b84fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:63:c0:c8:0f:57:32:6a:e9:29:77:9f:09:
2c:ff:09:19:94:9c:10:f5:6f:f5:da:2c:3c:e1:ec:
76:28:fd:01:12:91:42:96:46:05:da:a6:ad:0d:b4:
eb:8a:02:26:27:43:55:02:58:34:15:69:ef:1e:d6:
b6:06:cb:0b:b7:ff:db:ae:60:fb:ce:58:08:86:80:
3e:24:ae:2a:eb:4f:c3:cc:41:b4:63:f9:31:2d:52:
6c:97:34:c2:75:d3:88:0b:95:54:a8:54:d9:26:3e:
bd:4a:66:62:c9:e3:7e:bf:6c:fd:5b:84:da:0f:cb:
08:79:79:df:b9:cd:4f:3f:7a:d2:a2:0b:78:c6:be:
6b:e4:5c:95:60:fb:fb:e5:ff:90:3f:f5:31:d3:05:
15:be:d4:a1:e5:40:b1:47:77:89:e7:65:20:53:60:
ca:9f:fd:31:fc:c2:3e:56:61:20:40:c3:85:0d:3c:
48:e6:dd:11:bc:1d:2b:06:86:7d:83:ec:32:e1:90:
22:5f:4d:bf:68:ee:36:b6:b5:c2:60:fa:1b:22:b7:
f8:ba:aa:bc:35:4e:d4:e5:16:73:33:f6:04:ef:0e:
8a:44:a1:5b:d2:09:1f:ac:ab:fd:7a:11:89:03:6b:
f4:34:77:a0:35:23:06:2a:93:41:cf:56:77:0a:bf:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:18:5B:05:62:3E:2F:BF:B8:02:04:E4:61:3A:BC:C4:3B:84:FE
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:56:7b:5c:a6:9f:c1:65:5a:d3:16:d9:bb:1d:58:e9:6b:d2:
14:06:aa:07:1d:34:60:54:d5:69:ee:ef:5c:52:cd:33:88:04:
ca:1a:d5:75:64:2e:90:cd:7a:be:40:36:5b:b1:b7:ce:b4:e9:
db:1c:78:3f:9e:a7:7f:77:08:37:49:ff:19:65:ab:a8:cc:19:
dd:0d:3a:70:0e:5f:c3:ab:84:98:9f:5e:57:89:3a:74:49:e7:
cb:78:4a:0a:af:ca:6c:0f:2b:6e:99:41:84:22:5b:a5:3b:33:
5e:df:78:c9:04:2c:8f:9c:87:50:cd:b9:6f:d1:d3:00:8f:93:
42:b8:ba:5c:67:06:4f:34:95:fa:0b:d4:1f:2f:fa:1c:1e:c0:
0c:4d:98:4f:ae:c0:3a:c9:5a:eb:7d:fd:d5:a7:2f:6e:ed:df:
66:30:b8:6d:b8:95:6b:97:25:38:ef:b6:d7:84:ac:61:e8:37:
7b:f7:ac:49:45:a4:09:88:46:1d:75:4f:e7:f7:ac:07:96:f9:
3f:0b:25:97:97:18:a4:80:27:ea:cd:e0:b9:39:40:1c:63:e1:
2f:b2:b8:a3:bf:21:c7:6c:ba:7a:ed:f4:76:43:dc:59:d7:ff:
87:34:88:4c:3d:8e:43:30:90:01:7f:5d:10:00:a2:01:95:6d:
c7:e3:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:42:16 2026 by rpki-client