Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: IFoML90X4acrHvy3oo9n4ej0FR047LFks+RF1nNFkj8=
Subject key identifier: 19:D8:64:0F:11:17:71:CC:DF:42:A8:3B:59:71:51:A0:22:EF:02:2B
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 019D265F9D87E07EFA94F9D69DE54FD3995A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:33 +0000
Manifest this update: Wed 25 Mar 2026 19:01:33 +0000
Manifest next update: Thu 26 Mar 2026 19:01:33 +0000
Files and hashes: 1: LggB48-j7YY9SCWaA8exH9VEaUk.roa (hash: q3ynPTcziyC9bHjFnAz0n/dVRFiqqPc4LI87XhrGp+g=)
2: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: wgFJarnxK+Da/m0Qje/rfnQqdWAExxUUkQYvPg666zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9d:87:e0:7e:fa:94:f9:d6:9d:e5:4f:d3:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Mar 25 19:01:33 2026 GMT
Not After : Mar 26 19:01:33 2026 GMT
Subject: CN=19d8640f111771ccdf42a83b597151a022ef022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:58:20:ef:9a:cd:3b:c6:6c:f2:83:c5:62:
d4:14:f3:d8:33:8d:40:91:7c:50:31:5b:a1:6d:46:
c7:0d:f9:07:ad:79:8c:a9:c9:47:cc:b2:f2:d1:7f:
35:ea:5e:25:a7:95:fa:45:f7:1a:d9:58:e4:43:69:
65:50:bd:2a:9a:5e:30:52:87:c9:00:55:d3:1e:e1:
eb:f2:96:c1:49:a5:6c:f6:ad:a6:b2:d5:ce:7f:21:
60:d4:9d:67:1b:35:34:f5:23:58:22:4f:05:af:0f:
b3:d8:56:cb:60:16:b5:b5:e8:64:05:63:be:19:f9:
cc:6c:84:da:41:c5:88:50:56:fd:df:73:b8:e8:08:
80:34:b2:3e:09:05:91:93:81:3c:71:95:bf:f8:ee:
27:0f:02:de:dc:29:80:17:6d:1f:9f:81:0e:79:f4:
7c:1e:7e:d8:b5:9c:0e:93:02:82:3a:c7:77:b0:e7:
5a:7d:ea:81:2c:20:b5:aa:c2:b1:93:05:39:46:48:
90:fb:8b:6d:a7:1c:a3:f1:b6:1f:99:40:59:7b:e3:
83:b5:85:88:46:23:d3:24:4c:79:0a:7b:c0:e3:66:
ca:59:50:ac:13:d2:94:33:d8:16:54:09:3f:5a:03:
07:29:8f:1a:91:7c:03:44:73:dd:66:bb:06:da:fe:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D8:64:0F:11:17:71:CC:DF:42:A8:3B:59:71:51:A0:22:EF:02:2B
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4c:2c:33:43:38:72:fd:fb:9e:52:ee:f3:b2:49:b4:3b:ee:
d3:c2:e3:9a:bb:41:5a:b2:53:25:ff:ca:c2:c1:8a:93:08:0a:
f6:49:63:21:89:61:b0:24:11:2d:73:ed:53:8b:ae:19:02:07:
7f:2f:1a:2f:eb:e5:d9:98:6c:37:ea:b1:25:83:c2:12:95:e0:
b0:bf:2e:7d:f0:a8:e4:2f:6f:4a:8d:30:10:b7:8e:c5:7a:93:
1a:16:8b:18:53:a3:24:97:36:c8:ca:71:f9:fd:7e:c6:d0:35:
5d:7a:97:b4:b5:3a:62:d0:57:72:9c:b5:5d:8e:0b:00:c6:eb:
83:dc:76:fa:1d:22:ff:44:3e:59:84:2f:15:a9:f4:65:1f:a1:
ea:03:ad:08:1e:eb:9f:f9:64:bf:2a:5a:6e:fe:1a:29:47:df:
37:63:4e:5c:74:35:32:1c:70:16:e2:6c:f6:ca:8f:75:85:b3:
26:3f:3a:f3:0e:f5:30:73:89:a1:77:db:f1:c5:ad:47:64:9d:
8d:bd:41:06:12:55:e5:dd:c9:e8:c4:cd:ae:57:39:3f:88:b5:
2a:32:19:29:71:e5:4e:0d:ee:bc:77:5c:fc:e5:eb:91:8d:ec:
6f:d7:46:b5:f8:48:9e:7b:e0:49:bf:1e:74:53:8b:de:28:9b:
18:3b:4a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:15 2026 by rpki-client