Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: j9F43DhWoQih/gVZPn2l5UOKq8HsrKTOczpwPHb2Ad4=
Subject key identifier: 91:FD:EA:35:87:EE:30:26:41:4A:1A:A8:9D:94:58:7B:8D:DD:67:D0
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019D26CCD900F1258F8D6A2173895C273058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
4: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
5: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
6: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
7: kKczWo-3YbCcWORgD8y9IyNeRV8.roa (hash: LVH9yAsyNks89sVKmghut1GryJminUwWlqe58gmKuq4=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: mORWICDosUrwAxKC7M6+F8FXeDmmPaMp7n6hdFL8TWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d9:00:f1:25:8f:8d:6a:21:73:89:5c:27:30:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=91fdea3587ee3026414a1aa89d94587b8ddd67d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:93:f6:bc:10:d9:68:34:bb:ca:8f:71:63:
b9:54:8c:1f:c6:51:ec:49:6b:be:f1:41:83:b7:f6:
c7:0f:13:98:24:ed:6f:f1:3e:fe:89:e9:7b:3e:6a:
c5:e3:09:16:11:2f:51:cf:a0:81:16:76:1e:ee:1f:
42:b8:a5:05:f2:66:4a:88:26:38:92:98:8a:5c:57:
3c:f1:ae:bd:45:64:55:02:85:d8:b5:54:bc:cd:b4:
67:78:8f:47:5b:91:e5:03:ef:f0:0d:29:e5:b8:50:
98:5c:cb:f0:fd:11:f1:34:bc:3b:c0:fb:6c:a3:cc:
ee:92:a8:c6:30:4a:4b:96:f9:bb:a6:6d:0a:e0:15:
9f:08:33:36:d6:a0:0a:3b:37:e4:7e:1a:91:13:d4:
ab:ce:b4:c0:99:f7:4c:29:cb:98:a4:ed:40:54:79:
b9:9b:15:01:91:21:24:a1:62:06:7f:07:73:7b:9d:
7e:a1:a6:c5:3e:ec:d0:54:67:68:12:fd:a7:0a:e5:
d8:db:04:44:43:e0:5c:1c:76:49:92:b0:ed:89:bf:
17:1c:7d:12:96:8f:14:b3:6f:5d:73:31:04:e3:ce:
1a:b1:22:bb:ed:b1:78:b4:71:1d:66:ac:df:5a:0d:
67:5a:ed:c3:ed:5e:ea:96:15:c8:a9:8b:65:f8:27:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:EA:35:87:EE:30:26:41:4A:1A:A8:9D:94:58:7B:8D:DD:67:D0
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:ac:7c:13:98:2b:03:a6:a5:96:e4:bf:d5:57:40:8e:35:
41:ce:e4:ad:0c:da:73:bf:f2:54:11:09:9b:93:6a:17:fd:b2:
51:33:a1:34:71:6b:55:ec:4b:28:fa:33:ca:3b:17:85:95:2c:
4a:46:3f:0b:a3:8f:7a:a3:36:05:a2:f9:4b:b4:0a:e1:35:be:
f2:3b:b4:db:d8:7f:77:16:e7:2f:97:95:c5:b2:1e:de:65:e6:
85:84:12:77:1b:e5:2a:6c:b2:f0:40:5a:8a:ab:e8:bd:d4:af:
4b:10:cc:9a:ca:bd:a5:4a:b1:31:98:84:37:12:2b:9b:31:bb:
ff:79:f9:da:ba:0a:b3:33:ca:22:f7:35:be:b7:fd:ce:bc:6a:
d7:52:18:0f:24:63:94:5d:b9:9e:7b:e3:ef:ab:9b:44:aa:f5:
8b:38:79:a4:94:a5:fe:9d:53:f4:7f:ec:9e:dd:34:03:d6:84:
58:d4:a1:a3:57:54:c6:5e:04:bd:4c:9a:1d:05:f5:6a:b1:21:
d0:f7:65:51:a0:0c:9d:8f:02:0b:50:bc:da:6c:96:af:84:c6:
98:1f:c3:76:93:39:65:43:fe:6a:fb:5c:ef:2b:d0:6f:0e:56:
b6:be:46:d5:29:fa:2e:a8:de:7a:07:f3:98:21:1f:40:27:a6:
53:72:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:13 2026 by rpki-client