Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: 0X8KfHx6KH+asgAF4bCxuHEPWvHeStdJG7bTC+u91+s=
Subject key identifier: 45:83:B9:36:6E:4E:30:81:77:14:FF:BB:29:08:C9:FE:EB:46:D2:76
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019E1F112319B791F017E6A255777CC023D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 02:01:17 +0000
Manifest this update: Wed 13 May 2026 02:01:17 +0000
Manifest next update: Thu 14 May 2026 02:01:17 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
4: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
5: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: CwYzdahJIs8RdxoMLBX4ZFq+Lm9A1SeQy4uNCIqYFF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:23:19:b7:91:f0:17:e6:a2:55:77:7c:c0:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: May 13 02:01:17 2026 GMT
Not After : May 14 02:01:17 2026 GMT
Subject: CN=4583b9366e4e30817714ffbb2908c9feeb46d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:63:b4:bd:5a:27:2d:d8:1b:99:05:28:2d:
83:6b:ea:55:0c:1e:80:83:91:26:bb:26:83:00:b2:
4a:26:1f:6c:49:24:14:e0:44:98:29:7c:1d:88:e7:
3a:b4:68:c5:ea:3a:b5:7f:b9:a0:7a:88:2f:b7:63:
5b:d9:7b:9e:96:43:da:99:f6:74:b9:63:46:04:44:
d1:16:05:a9:38:bc:21:f1:08:5f:8b:fb:79:33:7d:
b7:fa:38:76:e4:21:59:60:8c:e4:0f:0e:c5:a1:11:
c5:e9:89:30:95:39:d9:35:b3:ad:a5:7b:ac:30:85:
1f:2b:9c:9c:01:fa:1d:6b:d3:cf:5b:31:a4:80:17:
8a:7f:a8:89:b2:a1:23:84:51:7f:82:41:a0:6e:83:
75:82:40:41:a4:8e:24:c8:a6:b0:7a:14:db:2b:f3:
c3:56:02:99:2c:db:c5:17:33:a8:46:20:20:67:84:
61:d1:44:95:00:70:51:72:cf:0c:9b:18:8f:74:46:
74:fd:25:1c:a0:1a:cd:17:41:02:6c:f0:90:6d:c3:
da:d4:1b:81:d2:22:8b:d9:71:56:d0:dd:68:9a:91:
1e:0a:2b:2a:2d:cb:0a:4e:70:28:fa:36:de:60:a9:
49:97:86:8b:79:22:87:f3:c1:a0:17:35:cf:76:23:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:B9:36:6E:4E:30:81:77:14:FF:BB:29:08:C9:FE:EB:46:D2:76
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a3:0b:3d:ca:58:d1:1c:10:61:d5:ad:3e:b2:2b:d5:0d:f6:
7b:35:ab:8b:0a:15:5e:04:c2:07:cd:fa:3d:78:83:74:5a:17:
31:1f:6f:85:b5:d2:7b:c3:23:80:03:0b:55:b4:05:a9:16:7c:
5d:bf:54:96:57:f9:44:85:9d:6c:c0:eb:7a:dd:e9:b8:f3:6f:
17:35:be:68:61:9d:df:32:d1:b8:18:d6:28:cc:16:aa:ad:56:
27:59:1d:bf:19:44:b6:18:7d:30:84:2b:48:c2:0f:09:33:c0:
8c:ed:50:60:13:3e:6e:70:d7:10:29:23:3e:f8:4c:79:b9:5e:
9b:50:de:34:24:d0:96:7a:ae:7f:d7:3f:d9:40:3b:46:39:03:
21:d4:fc:2c:e7:54:6e:0f:a6:14:3e:ab:3a:07:2b:22:d4:5a:
44:61:15:f8:12:a0:ae:fb:41:a1:b7:44:28:32:14:c7:82:9f:
6e:ff:02:22:3a:c1:67:bf:81:a8:04:97:13:16:95:54:b1:c3:
c3:32:a1:62:c2:d1:c2:22:04:05:dd:e0:18:30:9c:54:a3:cb:
e6:bd:ff:ce:d3:2f:db:2e:45:53:50:b4:47:dd:bc:b1:4c:df:
b7:99:e6:c7:dd:bd:a4:32:0d:c3:bb:ad:af:71:c3:89:15:81:
01:34:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:25 2026 by rpki-client