Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: GdNFB0+b0mwbGqhh2zRwjuo5RkbsHM5o9Nl7kwJ4gbg=
Subject key identifier: 25:FE:5E:FB:83:4B:BE:4A:9E:A2:8A:DB:6B:E5:89:D5:F6:2F:27:CA
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 019D33E387F4BFD21BBC0ADB42CE70A8601C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 0943
Signing time: Sat 28 Mar 2026 10:00:42 +0000
Manifest this update: Sat 28 Mar 2026 10:00:42 +0000
Manifest next update: Sun 29 Mar 2026 10:00:42 +0000
Files and hashes: 1: K7W2HCvsA8JxFMmzeilzEcsyppo.roa (hash: jiMWX4J6RYOzWaNm/5z8OYJi7Equ31upjXJ+Jtp8KZY=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: RuYciUeuuTp587xENJugNZy0UHsDAziY2HILJ/3NEhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:87:f4:bf:d2:1b:bc:0a:db:42:ce:70:a8:60:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Mar 28 10:00:42 2026 GMT
Not After : Mar 29 10:00:42 2026 GMT
Subject: CN=25fe5efb834bbe4a9ea28adb6be589d5f62f27ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:f3:18:f6:51:10:ed:36:70:a0:8d:78:17:
13:ef:15:2e:54:1e:e7:fe:e2:67:62:12:82:a4:6a:
0f:13:4c:a5:2e:e3:bb:be:82:ad:ea:5f:fd:52:61:
8d:8b:fd:0a:0d:d0:b5:12:1c:a1:a7:e2:b0:93:36:
c0:76:13:7e:2e:15:50:d6:89:9a:da:85:41:98:1b:
9c:62:dc:8c:1d:45:8d:79:ed:ee:38:29:62:73:14:
57:6c:03:fd:79:78:90:c4:af:dc:30:32:1e:bf:17:
b1:44:e8:0c:96:10:25:c4:99:a0:67:d2:fe:a7:77:
a1:f3:00:88:96:c1:16:be:ee:43:d3:10:1d:fe:4f:
31:fa:81:1d:ea:a3:b7:5c:09:7d:6f:a7:97:cf:80:
29:4f:5c:0d:e7:89:aa:d3:8c:c5:5f:81:45:a9:5f:
fe:1e:fc:f1:bf:c7:d0:c1:14:64:ff:63:a2:6e:d4:
fb:2b:b7:f6:e0:c1:b8:d9:a8:e6:00:0a:98:48:11:
57:5e:05:52:03:50:cf:a8:c1:ab:af:77:ef:f4:b8:
98:b9:cd:4e:98:3d:b5:8d:55:e8:72:d5:7d:59:96:
47:d8:77:9b:ba:c6:be:37:9a:61:10:e4:58:55:ff:
49:ae:b7:a3:c7:ae:92:39:49:cc:16:94:a9:a7:87:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FE:5E:FB:83:4B:BE:4A:9E:A2:8A:DB:6B:E5:89:D5:F6:2F:27:CA
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a6:d2:a0:9e:c7:c2:03:e7:5e:95:76:66:23:eb:3c:4a:b2:
25:1f:b8:f3:7f:6d:30:6d:4d:56:80:53:18:7e:81:b3:57:8e:
34:b9:9a:b6:dc:11:57:50:e6:76:65:50:b6:10:17:48:ab:7a:
12:d5:a5:10:ca:7c:70:25:21:ff:64:f1:d9:c2:ee:f7:93:d6:
8d:b4:96:69:55:6f:98:2f:97:3e:6e:84:37:4d:1b:1b:ce:06:
89:3f:e4:c6:4a:16:ac:e2:5c:df:59:44:99:14:80:ca:f5:47:
b1:09:ea:19:60:85:f4:50:7d:89:f0:8b:32:72:04:69:48:1a:
55:51:95:39:30:19:f2:94:13:49:64:4a:49:fa:4f:e0:d3:78:
c9:66:c6:0a:b5:7b:b8:fd:ac:2e:37:a5:87:98:e6:53:4a:14:
4f:b7:92:83:f6:ef:93:ca:0e:5c:28:09:7c:b2:25:32:b2:c5:
91:0a:f7:5b:b0:1f:02:42:f4:6d:ee:c1:ab:ca:3b:95:47:b3:
27:5f:b7:e3:96:de:d4:09:40:bc:43:7e:f1:34:22:96:47:12:
09:d3:27:bb:cf:f2:f8:62:f4:28:49:31:f1:bf:9b:58:dc:ad:
d4:6e:aa:bc:bc:ca:f0:1f:12:df:8e:a4:78:59:05:27:02:a1:
df:1e:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:29 2026 by rpki-client