Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: lTU+fKh2sOMnjicbAU1lCfGb/6okGbR1XN46eqCmR5M=
Subject key identifier: 72:BC:2E:A2:4A:CA:1E:DB:AF:4D:1A:4C:B6:99:D4:AF:87:C8:F3:FA
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 019D27A8E5DD47DEA2A391559C1FC80D4EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0ED4
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=)
2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: Rdlqiaj9GabkCWQnBfGJfX4p5M5Ao63fjDjLzH7u+3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e5:dd:47:de:a2:a3:91:55:9c:1f:c8:0d:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=72bc2ea24aca1edbaf4d1a4cb699d4af87c8f3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:f1:32:bb:bb:6c:2b:1b:e4:5b:72:30:21:
be:76:79:03:4c:86:23:e1:41:95:d2:0c:80:eb:46:
9e:24:77:8b:e7:44:72:33:c0:02:3d:d5:d9:42:3c:
15:2f:b6:f2:e4:79:0a:83:76:16:19:f0:8f:04:cd:
41:f0:e1:69:3a:5f:4e:70:e5:f1:96:a5:87:80:e6:
32:92:1b:89:60:76:2f:cc:dc:a5:1e:23:3a:c7:c6:
67:b8:b0:a5:fd:15:f1:b1:74:b8:38:30:6f:08:4a:
cb:5c:87:79:22:31:fb:51:99:f6:ff:7a:66:cf:8d:
8a:37:79:fd:b2:0d:c2:0f:64:c0:6d:72:fb:c1:2a:
d3:35:07:a7:ac:68:df:a3:6e:20:f2:6f:8b:ad:e9:
a5:1c:90:4c:0b:5b:dd:f1:70:5e:ff:05:de:eb:5f:
8c:fc:d9:54:e2:75:84:6a:d9:c4:f1:ed:02:cc:0c:
31:65:9e:18:61:ca:12:75:4e:2b:ad:c1:29:bf:8c:
46:51:11:78:f9:a5:59:08:92:3d:54:c8:f8:a6:48:
ea:8d:46:10:27:f0:1f:80:47:21:70:85:8a:59:8e:
1a:c5:00:39:16:fd:40:6e:5e:b5:fd:5f:d2:6c:2e:
45:19:b3:1e:66:32:f7:46:85:97:f4:ac:ea:f9:8a:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:2E:A2:4A:CA:1E:DB:AF:4D:1A:4C:B6:99:D4:AF:87:C8:F3:FA
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8a:93:f9:91:e1:f4:43:4b:7a:90:90:0b:46:dc:cd:c1:c2:
70:6d:bc:4e:82:a6:78:53:27:63:a5:b1:d9:0c:83:a0:7e:d0:
ea:5e:c8:59:e3:e2:cc:a3:03:f1:36:b0:db:6d:d4:62:16:07:
e7:d2:df:57:d8:8a:ff:e4:d0:15:f3:a6:ca:ed:03:a7:0c:4c:
8a:29:d8:2b:93:a4:89:b5:2a:0e:95:ab:28:34:33:55:c1:f5:
75:95:61:f0:05:5b:97:ee:5a:98:57:f0:bb:bd:ad:f6:7b:3f:
9e:83:76:1e:41:1b:80:43:b3:16:fc:77:32:87:9b:db:db:2f:
99:75:68:02:a9:c7:55:f3:3b:38:c3:cb:5c:fb:9d:6d:72:9c:
c6:ce:e0:77:8c:c9:49:b8:8a:49:a4:f9:d1:75:b4:b8:d8:d2:
f2:f4:4d:cd:ba:40:7f:74:52:e8:3d:3d:05:32:54:85:b5:c9:
8c:43:82:2f:0f:24:6e:1a:b8:f4:c2:88:5c:89:8c:59:40:5e:
10:89:af:6d:bb:3d:fb:3d:2d:e2:0a:ee:a4:fa:e9:1f:94:b0:
37:5d:a1:ee:73:5e:dd:4d:31:a1:49:f8:41:97:f1:20:e6:61:
1a:81:9b:df:60:fa:73:be:fc:50:19:13:31:21:6c:7a:fd:15:
64:c9:85:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOXdR96io5FVnB/IDU7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm
YzI4YmUwHhcNMjYwMzI2MDEwMTEzWhcNMjYwMzI3MDEwMTEzWjAzMTEwLwYDVQQD
Eyg3MmJjMmVhMjRhY2ExZWRiYWY0ZDFhNGNiNjk5ZDRhZjg3YzhmM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKLxMru7bCsb5FtyMCG+dnkDTIYj
4UGV0gyA60aeJHeL50RyM8ACPdXZQjwVL7by5HkKg3YWGfCPBM1B8OFpOl9OcOXx
lqWHgOYykhuJYHYvzNylHiM6x8ZnuLCl/RXxsXS4ODBvCErLXId5IjH7UZn2/3pm
z42KN3n9sg3CD2TAbXL7wSrTNQenrGjfo24g8m+LremlHJBMC1vd8XBe/wXe61+M
/NlU4nWEatnE8e0CzAwxZZ4YYcoSdU4rrcEpv4xGURF4+aVZCJI9VMj4pkjqjUYQ
J/AfgEchcIWKWY4axQA5Fv1Abl61/V/SbC5FGbMeZjL3RoWX9Kzq+YpI6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHK8LqJKyh7br00aTLaZ1K+HyPP6MB8GA1UdIwQY
MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt
M2I3ZWYyNWNmZTgzLzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz
LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4qT+ZHh
9ENLepCQC0bczcHCcG28ToKmeFMnY6Wx2QyDoH7Q6l7IWePizKMD8Taw223UYhYH
59LfV9iK/+TQFfOmyu0DpwxMiinYK5OkibUqDpWrKDQzVcH1dZVh8AVbl+5amFfw
u72t9ns/noN2HkEbgEOzFvx3Moeb29svmXVoAqnHVfM7OMPLXPudbXKcxs7gd4zJ
SbiKSaT50XW0uNjS8vRNzbpAf3RS6D09BTJUhbXJjEOCLw8kbhq49MKIXImMWUBe
EImvbbs9+z0t4grupPrpH5SwN12h7nNe3U0xoUn4QZfxIOZhGoGb32D6c778UBkT
MSFsev0VZMmFZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:25 2026 by rpki-client