Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: 3snIVCdFA239ZmTdq0iwd9aRwbLwyqq4MxsBDuWq+Oc=
Subject key identifier: 1C:47:7C:FB:36:76:26:AB:B7:E1:A5:47:FE:BC:53:D3:46:D3:BD:0F
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 019F92B61618FFA968EA9FEA3993A0701D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0DCF
Signing time: Fri 24 Jul 2026 06:00:34 +0000
Manifest this update: Fri 24 Jul 2026 06:00:34 +0000
Manifest next update: Sat 25 Jul 2026 06:00:34 +0000
Files and hashes: 1: Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa (hash: PsSncA5sbwhm+qYpwUvXOsucHxELXyU7nMC4Byz/38I=)
2: NiXEkFa2OyOUnxfMEcQON6yPoNg.roa (hash: dVvuF0RyYBJRRTECbqhrE8YUyCue+Lh92GIKr6FebqU=)
3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: ZZnhAkwfqWbHsr7HxYgsBClHaFL7B3VOOtN8/z39PdA=)
4: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (hash: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk=)
5: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (hash: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:16:18:ff:a9:68:ea:9f:ea:39:93:a0:70:1d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Jul 24 06:00:34 2026 GMT
Not After : Jul 25 06:00:34 2026 GMT
Subject: CN=1c477cfb367626abb7e1a547febc53d346d3bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:c1:9e:61:1f:a0:73:b5:c9:a5:8b:a8:5e:
5a:f5:bd:14:3b:4c:b6:76:19:65:7c:35:a1:9b:4d:
cb:7d:16:ef:6d:63:75:56:fc:3e:67:0c:42:4a:a2:
7b:3f:20:3b:6c:bd:b5:75:85:0a:0c:a9:24:c3:1e:
53:ed:be:1d:5e:e9:c7:90:97:61:da:c1:31:7e:16:
9f:9b:98:7b:f2:2d:5e:52:78:72:6d:84:96:02:98:
fc:9e:eb:be:b1:d8:bf:f9:22:8e:b0:1b:61:0f:e1:
4a:7d:ba:94:c8:ed:8c:7f:f9:f1:b8:ce:5e:f7:7f:
14:0b:66:03:cf:f0:7e:23:f9:42:3a:8c:15:be:4e:
b1:79:6f:5b:00:59:e4:94:2b:1b:a1:f8:92:9a:bc:
49:b0:bf:4e:c0:3a:3f:85:c6:ca:99:f6:11:0e:c0:
82:c3:8b:ef:ed:a1:70:e0:24:fd:59:d7:c3:3c:87:
f6:8b:0c:7b:ff:db:77:cf:99:4d:c1:39:36:30:9b:
13:98:fd:08:39:ea:5a:a6:39:d2:75:25:60:6e:0e:
19:97:6c:94:21:83:aa:85:3c:dc:af:4f:f0:50:1d:
44:a3:1a:d5:21:0c:42:46:ff:a8:fc:40:5f:48:c8:
92:94:bf:a6:0d:07:ea:ae:4c:4a:c7:72:44:22:25:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:47:7C:FB:36:76:26:AB:B7:E1:A5:47:FE:BC:53:D3:46:D3:BD:0F
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:ff:70:db:3a:ff:60:76:61:bd:74:03:dd:03:7d:bf:76:
61:48:64:00:50:44:27:ea:3c:a8:03:d1:5d:a4:78:31:8b:ba:
6c:05:6f:a8:52:c7:db:84:51:7d:8a:d0:b3:21:d2:45:c1:6d:
8c:d3:9a:6e:d6:d8:ad:a1:4c:fb:7b:be:d2:1a:32:5e:20:2f:
30:0d:3d:56:8b:ca:e3:5a:21:65:86:96:05:6b:f8:c4:20:40:
de:1a:4b:f0:22:f2:af:c3:5a:49:bd:59:78:ff:bf:e3:47:9c:
00:6f:2f:1d:7e:87:3d:d8:f3:49:1f:12:20:55:5e:fa:b6:f7:
e6:e9:18:ba:8e:16:c3:66:1f:2b:bd:0c:64:58:9a:d7:2e:91:
b2:d7:40:72:40:ac:40:07:bf:ae:82:8a:1a:df:6e:6c:b4:9b:
8b:18:4d:7a:31:99:fd:93:03:50:c4:26:62:6c:e1:a5:1b:c1:
ff:85:a9:19:e4:5c:4a:0e:7e:0c:74:cc:0c:39:24:61:fc:a6:
5f:7c:0c:82:06:d7:8c:6b:67:e6:ca:8c:c8:d2:e2:f0:8f:d1:
25:bc:78:22:dc:06:87:fb:70:79:58:8c:0a:27:1b:b2:ff:0e:
73:02:e9:31:02:5b:e8:6a:a3:cb:9b:b7:d5:c1:29:4d:2f:43:
db:3a:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:03 2026 by rpki-client