Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: ovcw49iI39dFptmcu1b56O6KA+L9qaARH7EgxsIIcyY=
Subject key identifier: 74:14:49:33:03:4D:DD:4C:40:52:C6:04:AD:09:7C:6F:22:22:15:61
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019D2771E8190DCD249E06D58B30E6213F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 1015
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: kL8lPVVx3jrArzgOWin0bA8hHY5K1kq1RTne+uUlWvA=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e8:19:0d:cd:24:9e:06:d5:8b:30:e6:21:3f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=74144933034ddd4c4052c604ad097c6f22221561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:90:cb:ca:4d:71:d3:ce:e4:f0:3d:2e:80:
22:df:7b:49:9e:07:69:33:60:a9:27:7a:f1:91:fe:
bf:44:49:44:0f:aa:84:a1:40:4d:15:58:48:9b:87:
d8:f0:c7:7e:bf:ef:13:3c:1e:3e:e8:0f:dc:a1:ba:
be:be:c9:5e:f7:07:ee:4d:cd:a0:63:34:f8:7c:f3:
1a:67:f3:9f:b6:7e:16:2b:27:7e:8e:f0:c8:ee:d9:
6c:ae:53:59:10:36:72:66:66:d2:8f:26:cd:2c:e7:
1e:59:d9:9c:d4:a7:cb:f2:e0:65:90:a3:a9:2a:99:
e0:69:81:42:33:89:b5:eb:96:39:78:03:02:eb:66:
7c:13:22:4f:f7:7a:7e:88:20:3b:f0:d3:5d:44:d6:
9c:7c:71:47:ed:ed:0b:58:05:1d:8d:9c:86:76:c2:
45:d8:b0:f8:f9:21:34:e5:7a:bf:60:6b:7e:c8:e8:
be:d1:95:27:91:5f:60:b5:6c:92:a3:b5:62:1e:6e:
1f:81:0f:c8:52:39:79:b5:d5:15:a3:88:c9:81:98:
b3:ae:de:0d:be:0c:85:83:df:05:56:a2:73:65:94:
1e:0e:5b:11:7a:84:15:2d:46:89:8d:df:f3:73:36:
f3:a6:05:6c:80:79:d7:88:e8:44:63:78:a7:ce:60:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:49:33:03:4D:DD:4C:40:52:C6:04:AD:09:7C:6F:22:22:15:61
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:33:ef:8b:40:2e:d0:69:f0:09:89:2a:c5:15:ab:56:de:69:
8c:01:0c:bc:0f:07:f9:f9:ed:59:36:a3:da:37:88:17:d5:2e:
24:04:c1:93:67:4f:4b:7c:78:2b:f5:b2:bd:7f:cb:12:29:af:
87:d0:d5:5f:5e:6b:4d:ce:e2:d2:24:21:36:53:c0:d1:ed:85:
dc:83:ef:77:22:26:07:65:84:58:6f:14:8a:db:37:61:cf:cf:
f5:fe:a7:61:2c:67:e1:f7:ed:47:58:91:40:6e:eb:f3:a7:fc:
56:7f:ce:0a:44:a6:2e:3a:40:7e:84:ae:fc:70:f2:8e:e1:9e:
03:ec:7f:14:b6:e9:52:4c:c1:8c:31:e8:1e:e7:57:5d:4c:8d:
3f:ad:3e:16:3e:be:7b:9c:2f:33:b5:83:6f:9b:d5:80:00:13:
57:1c:26:00:5f:ca:69:f0:00:48:9f:d6:c5:e8:3a:ab:81:bd:
c2:93:4b:a8:54:3e:0e:1d:b3:3b:9e:b5:e2:9c:a0:d0:c9:47:
b7:3e:10:42:db:4e:87:40:e3:5d:d7:69:47:3b:8f:1c:3a:ae:
bf:a6:c0:13:c8:37:11:af:f8:10:ee:01:f7:58:08:ce:30:53:
21:90:81:b0:11:b7:d1:d3:a2:b6:a1:98:81:65:50:ed:17:03:
71:02:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:50 2026 by rpki-client