Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: nzjDPJOhW9+IhVChRl7z8uF2LWR21n8MAsChVUUnr4w=
Subject key identifier: AD:C8:22:3F:78:31:81:AB:F7:9F:47:B8:87:89:5A:E6:50:35:7E:1D
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 01A0DA28AABD47362A01EC664D5596BE3D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 20:01:33 +0000
Manifest this update: Fri 25 Sep 2026 20:01:33 +0000
Manifest next update: Sat 26 Sep 2026 20:01:33 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
4: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
5: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: I2M0nNk+tkMj1MLyi/fgX6x2M5E1/ZC/hK1g6v3JnaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:aa:bd:47:36:2a:01:ec:66:4d:55:96:be:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Sep 25 20:01:33 2026 GMT
Not After : Sep 26 20:01:33 2026 GMT
Subject: CN=adc8223f783181abf79f47b887895ae650357e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:4e:ea:c3:e7:4f:d2:8a:60:c3:ba:3a:28:
c9:c8:03:34:95:50:0c:c1:3c:c2:08:4e:fa:d9:4b:
ae:88:a9:74:78:ed:ec:a8:36:8a:ba:b7:06:74:ed:
10:d2:8f:dc:fd:90:50:0d:84:20:12:bf:7f:03:7d:
33:72:4f:a2:96:19:a6:6d:73:01:88:79:56:b4:c4:
04:20:ef:89:58:37:43:7d:0b:d7:89:99:5e:ed:78:
3a:00:33:3b:af:fb:8f:97:18:39:76:77:c8:79:3c:
d7:74:59:1a:e4:b1:c5:fb:5f:83:61:28:54:c1:a7:
95:c1:94:0a:b5:7c:03:48:3c:0f:01:83:cb:64:c4:
54:fb:d7:1b:57:7e:86:3d:15:27:6d:43:0e:de:49:
db:52:03:30:a5:38:7f:11:26:63:ab:01:f4:06:9b:
cc:cf:ec:8a:f4:d6:dc:6b:2c:8e:71:86:81:c3:45:
e5:7c:5c:1d:db:c6:3f:1e:33:82:1b:ab:23:01:23:
29:41:ed:09:4c:7f:8b:01:2e:c4:54:24:ff:a6:55:
6b:96:aa:2b:04:6f:69:31:19:d8:18:d9:2c:26:af:
19:18:2b:d3:48:be:a1:80:13:86:18:6e:35:01:20:
6b:76:66:2d:18:a6:77:23:ce:91:1a:ff:b9:1b:7e:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C8:22:3F:78:31:81:AB:F7:9F:47:B8:87:89:5A:E6:50:35:7E:1D
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1f:00:87:b1:d3:0a:b8:16:0a:22:35:41:12:7d:39:cc:bb:
a2:c2:4a:ed:02:a3:7c:9c:dd:e7:d7:13:89:5b:5a:59:82:9c:
21:39:e1:56:12:86:2e:b6:de:1e:8a:21:0a:07:5b:4b:28:73:
7e:ef:ff:92:d7:cb:6e:50:21:61:c1:e3:58:e2:6b:32:98:14:
57:82:29:3a:8d:70:a3:dc:36:a2:59:da:e5:6d:73:da:aa:21:
19:d8:f3:4a:b3:e3:94:16:6c:f4:6c:2b:33:ce:22:79:dd:24:
ab:72:ff:36:6b:b3:a0:d3:8b:44:d4:b2:12:d1:8e:a4:37:42:
5b:03:26:2a:17:1d:c6:64:b2:6f:71:e1:b7:65:20:00:be:04:
dd:2d:8e:d8:54:6a:dd:4c:ef:2d:af:8b:86:d8:fe:08:7b:3f:
f0:bb:9d:bf:ff:ec:62:37:d8:0b:f9:fd:57:dc:e4:02:d9:51:
a1:b0:1d:d5:60:6a:32:32:6f:e9:3b:8d:7a:74:0c:dd:d7:eb:
30:02:73:6a:c6:ca:ec:c0:d6:ff:ba:dc:ac:b2:90:20:af:95:
de:f4:7d:b0:ef:34:55:f8:21:72:59:f9:ea:51:19:65:43:3d:
ac:ce:d9:fc:6b:eb:8c:5a:6c:b7:d0:f1:80:42:55:a6:0f:bd:
81:8c:d4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKKq9RzYqAexmTVWWvj0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5
YWM1NjAwHhcNMjYwOTI1MjAwMTMzWhcNMjYwOTI2MjAwMTMzWjAzMTEwLwYDVQQD
EyhhZGM4MjIzZjc4MzE4MWFiZjc5ZjQ3Yjg4Nzg5NWFlNjUwMzU3ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YhO6sPnT9KKYMO6OijJyAM0lVAM
wTzCCE762UuuiKl0eO3sqDaKurcGdO0Q0o/c/ZBQDYQgEr9/A30zck+ilhmmbXMB
iHlWtMQEIO+JWDdDfQvXiZle7Xg6ADM7r/uPlxg5dnfIeTzXdFka5LHF+1+DYShU
waeVwZQKtXwDSDwPAYPLZMRU+9cbV36GPRUnbUMO3knbUgMwpTh/ESZjqwH0BpvM
z+yK9NbcayyOcYaBw0XlfFwd28Y/HjOCG6sjASMpQe0JTH+LAS7EVCT/plVrlqor
BG9pMRnYGNksJq8ZGCvTSL6hgBOGGG41ASBrdmYtGKZ3I86RGv+5G350nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3IIj94MYGr959HuIeJWuZQNX4dMB8GA1UdIwQY
MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt
ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm
LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch8Ah7HT
CrgWCiI1QRJ9Ocy7osJK7QKjfJzd59cTiVtaWYKcITnhVhKGLrbeHoohCgdbSyhz
fu//ktfLblAhYcHjWOJrMpgUV4IpOo1wo9w2olna5W1z2qohGdjzSrPjlBZs9Gwr
M84ied0kq3L/NmuzoNOLRNSyEtGOpDdCWwMmKhcdxmSyb3Hht2UgAL4E3S2O2FRq
3UzvLa+Lhtj+CHs/8Ludv//sYjfYC/n9V9zkAtlRobAd1WBqMjJv6TuNenQM3dfr
MAJzasbK7MDW/7rcrLKQIK+V3vR9sO80Vfghcln56lEZZUM9rM7Z/GvrjFpst9Dx
gEJVpg+9gYzUow==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:05:35 2026 by rpki-client