Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: atZwWJZiPM7B/cOrX/T+gOaXzwKKsAeOIDN494MIruU=
Subject key identifier: 56:80:AD:05:E2:EF:49:9B:B1:95:95:CB:23:92:11:67:3D:71:B3:DC
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019F935BA674D9145EB0AE5326C18219253B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 1156
Signing time: Fri 24 Jul 2026 09:01:24 +0000
Manifest this update: Fri 24 Jul 2026 09:01:24 +0000
Manifest next update: Sat 25 Jul 2026 09:01:24 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: RsWvfB7Q7i2kPlwkGrsLmsYhLCuOXrO+boccMUEyYwo=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a6:74:d9:14:5e:b0:ae:53:26:c1:82:19:25:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jul 24 09:01:24 2026 GMT
Not After : Jul 25 09:01:24 2026 GMT
Subject: CN=5680ad05e2ef499bb19595cb239211673d71b3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:c6:8f:5f:f6:13:d4:37:6a:66:d9:37:36:
09:69:d9:28:64:cf:ba:65:24:62:88:5b:43:65:a6:
1f:dc:cc:31:04:a8:0a:62:0e:f5:b3:56:b8:01:ca:
d3:a7:ba:ee:a9:59:ba:5d:bd:d7:0b:7a:18:56:7a:
75:a3:de:32:1f:05:8c:b9:ff:61:7b:ac:39:ba:79:
9f:bb:cb:cd:cd:83:8d:4e:1d:83:d7:8d:01:34:b3:
06:9a:b5:b1:43:3d:fe:60:5d:f4:39:01:c1:f9:00:
4d:76:cf:a9:86:b3:10:bc:e0:de:38:b4:6a:89:c2:
77:b6:b8:27:33:a7:d3:84:a0:9b:3b:50:8e:24:db:
78:0a:43:38:19:25:4a:e9:09:c1:44:13:c5:0d:90:
67:2f:95:0b:8b:72:87:5d:f8:e6:2d:d2:1d:b7:73:
d6:78:77:e2:f3:28:3f:99:ce:2a:94:b5:df:12:bb:
8e:72:34:4b:13:9f:ff:88:01:b8:38:a8:d3:2d:64:
ee:0b:05:48:c1:58:d2:76:32:47:00:a9:a6:26:f9:
25:6e:22:60:03:cb:e8:a2:9c:a4:60:fc:62:4c:3d:
e6:c6:7f:91:50:81:67:95:60:60:50:02:fd:8b:e1:
0a:2e:f8:dc:65:a5:9f:55:7f:0f:ad:c8:bf:7f:ea:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:80:AD:05:E2:EF:49:9B:B1:95:95:CB:23:92:11:67:3D:71:B3:DC
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:76:b4:1f:22:f7:dc:b6:83:c2:cb:ad:dc:0b:10:b3:91:21:
d1:72:7d:3a:53:f0:91:24:3d:34:82:9a:93:9e:3c:ef:db:4a:
d0:6a:f6:89:b2:fc:ae:9c:39:52:94:c6:35:4f:3e:54:4b:98:
f0:52:51:9f:e9:b3:8e:f5:60:49:6e:3e:dd:22:7e:bd:9f:c6:
30:20:48:d2:45:07:24:52:59:43:82:3f:d3:c4:69:60:00:12:
7d:f3:13:eb:97:a3:e5:22:7b:0b:a8:25:4b:47:a6:30:a8:c3:
73:dc:7d:f0:76:a5:b9:ba:8e:d0:3d:e0:d4:89:b7:6d:ec:39:
e5:d8:02:fa:76:81:7c:96:f1:63:bb:24:0e:43:c1:da:a9:07:
c6:91:90:63:2a:58:3c:b2:d2:f7:d3:31:0f:1e:68:01:1a:65:
10:b6:84:62:f2:68:c7:12:81:3b:bf:b3:7a:4d:5e:49:71:f4:
cf:67:e6:d7:4f:fb:38:f3:2f:b3:43:6a:ee:9d:0c:4f:e9:6e:
55:d7:3f:1a:19:2b:3d:19:dc:e6:bc:90:c9:97:74:42:48:e7:
20:d6:c0:55:d6:8b:e7:b9:47:01:83:52:6a:e5:67:51:af:2f:
20:ea:33:82:a3:8a:1c:49:15:39:60:e2:a5:ba:fa:d1:80:bf:
f9:d6:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:55 2026 by rpki-client