Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: BAJSQcCo1rAQrn3fjl+SfmW8ByWIJau1gExvONKyh5w=
Subject key identifier: 1B:9D:75:C9:8B:71:B8:C5:03:AA:BB:EF:89:F4:90:2E:24:4E:3E:C4
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019E1EA2E4B0F8A50AA585F2C0FA5BA01C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 1095
Signing time: Wed 13 May 2026 00:00:52 +0000
Manifest this update: Wed 13 May 2026 00:00:52 +0000
Manifest next update: Thu 14 May 2026 00:00:52 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: PgwRRgVrjDy595r2H/iVYJdpHICFu7BiANEoajzK8Mw=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:e4:b0:f8:a5:0a:a5:85:f2:c0:fa:5b:a0:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: May 13 00:00:52 2026 GMT
Not After : May 14 00:00:52 2026 GMT
Subject: CN=1b9d75c98b71b8c503aabbef89f4902e244e3ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:1e:af:1b:0a:97:77:12:04:21:2c:2c:f4:
98:c5:4a:65:0c:4b:c9:b0:1e:89:ff:26:9e:88:e4:
a8:8e:26:d9:12:c5:c1:c9:4c:b0:63:ad:30:c1:45:
94:f2:b6:c0:2b:d5:e8:b0:d9:b0:78:c3:d1:52:ef:
3a:80:5c:d3:84:07:35:5b:54:0d:3f:95:59:20:bd:
ae:d8:bc:cc:57:38:f5:28:e8:ac:a8:03:3e:8f:93:
57:fd:1d:2d:b4:9f:74:38:66:a6:31:ba:e6:b8:34:
b9:29:25:27:62:14:3f:ef:59:e5:ec:fa:ec:26:f8:
9e:a6:ec:40:e1:d4:e8:cd:6a:78:81:be:0f:8b:cf:
d3:6e:5f:0e:73:36:57:7d:63:75:fc:e1:cc:ba:27:
da:fa:9b:f2:00:0f:c1:ae:aa:26:38:95:ee:ba:d9:
56:8b:b4:7b:ec:97:be:9d:cf:b7:9d:da:52:2d:2e:
5e:59:26:4d:1d:3a:ea:ba:b6:8f:00:31:81:e8:6e:
1c:d1:26:18:d5:24:a3:59:5c:11:a2:25:2f:4f:86:
e2:d1:eb:80:7f:b6:ef:53:a8:3e:33:a2:1b:0e:a6:
16:0a:ef:3d:47:52:63:56:37:63:a0:ca:0b:85:88:
11:43:0b:01:3e:99:63:79:33:d7:0a:aa:c8:79:a6:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:75:C9:8B:71:B8:C5:03:AA:BB:EF:89:F4:90:2E:24:4E:3E:C4
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e4:c4:98:58:69:67:12:bb:30:79:97:e7:c1:68:81:eb:d8:
9d:43:48:43:4e:48:d0:cf:68:d8:0b:4c:fd:f9:c4:66:43:5e:
06:71:df:85:56:57:be:ec:bf:ed:0d:97:15:9d:f3:e5:75:9c:
9e:c8:2f:3d:6e:d3:e6:b2:2e:07:bb:7b:52:dc:9f:d2:47:32:
2c:19:80:25:6e:f4:08:d9:be:a5:43:7e:17:a4:54:b3:5d:e3:
7e:a9:54:2d:96:94:e7:62:31:46:01:7d:0b:22:f6:ad:47:0d:
dc:c7:bd:4d:37:8b:cb:7f:4a:cd:2c:a9:46:c6:22:34:8d:f1:
8a:a4:57:bc:a5:ef:3f:af:2b:22:1f:a7:5a:45:7b:e1:91:46:
5e:1d:07:05:54:eb:f8:c6:77:19:c3:cd:38:b4:e1:f1:b0:d2:
8c:9f:b8:93:05:ae:5c:48:c3:a4:c3:9f:f1:0b:c0:19:fd:7f:
56:f1:2d:a4:47:ab:34:d1:6e:40:40:0b:92:e5:88:57:34:f9:
13:2d:63:73:e9:d9:ea:13:ad:e7:03:63:a7:df:7c:48:1f:b4:
38:78:d5:b7:bf:64:d1:fa:17:8e:ce:ad:85:de:3c:a0:04:66:
2c:47:6d:36:55:2d:3b:93:ce:85:fa:b0:ab:e8:78:44:d5:93:
3e:da:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:34 2026 by rpki-client