Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: C3vyB8EryBM5dKdJUSdHUQ6QrEp9b44hVKL/qPFurp0=
Subject key identifier: 26:7C:85:57:58:2E:DB:E5:C7:64:28:F1:D8:41:E7:34:06:18:FB:7D
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019F91DA296F0648D9140807CF17BFB73983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 02:00:21 +0000
Manifest this update: Fri 24 Jul 2026 02:00:21 +0000
Manifest next update: Sat 25 Jul 2026 02:00:21 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
4: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
5: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: CzQ8JKuabjeoKhvucNoGqp4/SKvaxwoorzJwYdBZxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:29:6f:06:48:d9:14:08:07:cf:17:bf:b7:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jul 24 02:00:21 2026 GMT
Not After : Jul 25 02:00:21 2026 GMT
Subject: CN=267c8557582edbe5c76428f1d841e7340618fb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:bc:8c:9f:37:69:3b:92:f3:d0:13:3b:6a:
fc:47:e4:7c:91:61:b8:b7:eb:c5:be:1a:0d:72:d0:
d3:f4:af:98:45:49:48:ce:f2:9f:56:6d:12:73:ae:
b5:68:97:d1:ba:29:46:18:b7:e8:77:0d:ac:7f:a1:
30:47:4a:34:79:74:63:60:03:8c:d4:b1:d0:bd:26:
5e:d3:82:e1:cc:53:c8:49:7d:be:f9:0a:0e:84:d4:
0d:27:82:e4:f6:6c:9a:59:d8:38:bb:11:c8:93:40:
c7:83:50:e6:bc:fb:8c:26:04:e3:cb:0d:e0:29:a3:
34:a5:c1:c4:b9:ac:0a:16:45:16:ca:68:d0:a1:3e:
c6:9a:33:d6:e7:09:72:4f:bf:74:79:5c:7d:bb:6a:
8d:7d:4e:5c:fd:3d:a7:c7:70:99:43:b2:62:d2:f6:
1e:38:c5:b2:54:dd:1e:c8:e7:38:57:c3:4f:dd:69:
b6:e2:e3:4b:17:1c:0d:e4:13:0d:5f:48:5e:38:77:
b8:51:18:f7:a1:ab:18:05:84:bb:e6:f7:ab:cf:f2:
2b:ed:83:f6:4a:ff:3d:3c:94:b2:3e:84:b3:8e:cf:
79:e4:21:99:8c:97:c0:47:9c:ce:36:85:da:15:fa:
9a:07:a5:b8:e0:8c:a8:c5:f9:14:3a:2a:bf:05:20:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:85:57:58:2E:DB:E5:C7:64:28:F1:D8:41:E7:34:06:18:FB:7D
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c8:c5:c0:fa:59:03:c9:42:c3:bd:6d:e1:c8:40:dd:1c:61:
a9:fb:ea:6b:59:c7:86:9d:21:79:dc:56:de:35:30:d4:e1:14:
22:58:46:38:60:42:25:8b:70:27:26:81:69:7b:13:57:f7:7b:
20:7b:45:4d:36:11:86:05:03:e9:f0:7a:f3:5d:ba:31:5d:8d:
fd:e0:1b:95:bd:d3:b2:9b:42:7c:10:7c:e4:ef:a8:ac:94:95:
3d:89:ce:54:d8:2b:82:4d:8d:89:d5:92:5f:ef:bb:e1:ef:1b:
42:c0:84:f2:bb:fe:c6:4a:53:7d:d3:50:6d:8e:87:a5:97:40:
61:55:cd:8b:d0:3b:f9:89:f3:0e:88:7d:62:f0:05:69:2d:7b:
ff:6b:ae:a0:6b:cb:3b:00:de:e7:b0:e1:4d:2e:6d:7a:2c:b8:
57:67:ea:7a:16:1f:79:9a:0e:f7:38:32:32:ba:cf:2d:77:19:
f9:15:58:83:a4:73:86:59:93:4b:91:cf:6e:ef:fc:f7:4d:18:
1b:88:de:fc:0a:e5:45:25:d5:e7:c8:0c:50:27:11:1e:44:99:
5d:2b:61:44:d7:67:3f:3c:f0:cd:05:69:98:ab:0f:08:ad:10:
5d:a1:e3:df:0b:86:ea:c8:19:e9:80:38:a1:bc:57:eb:f3:91:
09:d0:8d:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2ilvBkjZFAgHzxe/tzmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5
YWM1NjAwHhcNMjYwNzI0MDIwMDIxWhcNMjYwNzI1MDIwMDIxWjAzMTEwLwYDVQQD
EygyNjdjODU1NzU4MmVkYmU1Yzc2NDI4ZjFkODQxZTczNDA2MThmYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nu8jJ83aTuS89ATO2r8R+R8kWG4
t+vFvhoNctDT9K+YRUlIzvKfVm0Sc661aJfRuilGGLfodw2sf6EwR0o0eXRjYAOM
1LHQvSZe04LhzFPISX2++QoOhNQNJ4Lk9myaWdg4uxHIk0DHg1DmvPuMJgTjyw3g
KaM0pcHEuawKFkUWymjQoT7GmjPW5wlyT790eVx9u2qNfU5c/T2nx3CZQ7Ji0vYe
OMWyVN0eyOc4V8NP3Wm24uNLFxwN5BMNX0heOHe4URj3oasYBYS75verz/Ir7YP2
Sv89PJSyPoSzjs955CGZjJfAR5zONoXaFfqaB6W44IyoxfkUOiq/BSDejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZ8hVdYLtvlx2Qo8dhB5zQGGPt9MB8GA1UdIwQY
MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt
ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm
LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8jFwPpZ
A8lCw71t4chA3Rxhqfvqa1nHhp0hedxW3jUw1OEUIlhGOGBCJYtwJyaBaXsTV/d7
IHtFTTYRhgUD6fB68126MV2N/eAblb3TsptCfBB85O+orJSVPYnOVNgrgk2NidWS
X++74e8bQsCE8rv+xkpTfdNQbY6HpZdAYVXNi9A7+YnzDoh9YvAFaS17/2uuoGvL
OwDe57DhTS5teiy4V2fqehYfeZoO9zgyMrrPLXcZ+RVYg6RzhlmTS5HPbu/8900Y
G4je/ArlRSXV58gMUCcRHkSZXSthRNdnPzzwzQVpmKsPCK0QXaHj3wuG6sgZ6YA4
obxX6/ORCdCNSA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:33 2026 by rpki-client