Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: cPSb6MaFZ7tsaIXSElyCpqFbZQKglxIrf4P3N+lmMdM=
Subject key identifier: BB:43:64:11:A1:08:2B:4D:BB:BC:D9:29:99:29:FF:42:6D:79:40:FB
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 019D27DF876A14F768C58651028365FA8155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 17DC
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: od6HTbRFhmo0OmtuAcTadyxqJ_o.roa (hash: SE94fynzE1e+OXZNnakIBjjoFgfDLh4YMFdsKZ0xbjs=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: RO8dAfLboLs/0udGLalmLTu+mBASFKxdCTAdTLqCL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:87:6a:14:f7:68:c5:86:51:02:83:65:fa:81:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=bb436411a1082b4dbbbcd9299929ff426d7940fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:25:f0:99:cb:aa:09:8b:ce:e6:ae:52:5e:
50:30:aa:5a:cc:c0:1c:86:73:6c:ea:46:f5:7f:f9:
c1:24:cd:a6:c6:15:a1:62:4f:6b:92:7a:ed:31:88:
7b:c1:aa:b7:26:01:07:af:ae:fe:e8:7e:64:7b:4e:
79:02:4c:99:a0:74:11:ac:5f:2f:24:56:fd:dc:74:
00:eb:66:a9:6d:64:fc:6c:6e:49:72:56:22:9e:cb:
44:d9:4b:37:58:ea:b0:91:4c:83:d8:a5:c7:d7:67:
bc:aa:cc:99:c1:b7:13:ae:7f:d4:11:1a:e9:74:57:
ee:66:03:c4:1d:dd:dd:9e:d5:8d:cc:b4:3a:05:02:
78:d9:a1:22:95:2b:c8:bc:e3:ad:3d:a1:9a:6f:c1:
71:26:86:7d:f0:83:a8:32:de:d2:d6:c0:6e:c3:8b:
43:e6:f2:c7:71:f3:ff:53:05:30:ec:b3:3e:ae:fb:
35:2a:18:14:ca:e0:f2:4c:cc:b4:51:9f:32:29:a4:
b8:cc:51:35:1f:79:ec:e6:f5:47:99:4f:21:1f:fb:
e5:fb:0a:7f:3d:f7:1a:2a:f5:09:12:1f:46:63:9e:
ea:62:20:3f:ca:6d:55:c6:67:97:08:a7:13:0c:69:
05:2e:8c:ce:91:4c:6f:bd:d5:81:2e:5f:c7:1c:c4:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:64:11:A1:08:2B:4D:BB:BC:D9:29:99:29:FF:42:6D:79:40:FB
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2a:78:70:6a:fa:fa:8b:43:58:13:de:a7:a7:03:75:a4:75:
fa:f6:85:45:5d:2e:51:c7:f9:f6:e7:06:cc:1f:3b:33:ca:cf:
37:94:63:85:24:17:ef:b3:74:5f:99:1f:87:c1:da:b1:bc:a1:
6c:7a:f6:58:b1:f9:6a:2f:98:ee:6e:8b:24:7a:9e:8f:15:cc:
5d:94:f5:d8:a7:85:8c:d7:43:9d:61:30:4d:61:92:21:7c:da:
5b:d5:58:06:49:e4:61:39:88:74:54:4e:a5:e0:da:56:d6:9c:
f5:85:c8:d4:43:95:87:c9:3d:e7:f8:ba:19:1c:89:93:bf:e7:
25:70:af:e5:a2:8c:74:bf:1f:a2:08:c5:11:41:e6:4b:0f:ad:
6f:67:4d:be:5a:8a:df:6e:1a:1a:b5:02:38:a4:e1:dc:c2:1a:
61:2d:02:e2:62:74:dc:55:96:31:5e:5b:e8:68:25:8a:01:a1:
92:e3:8f:f5:62:cd:4d:23:f5:cb:6a:43:50:4b:f9:bc:3d:9b:
1d:22:c5:eb:81:f0:8b:fb:70:b6:c9:5f:70:68:b0:68:ea:2d:
00:ff:9e:34:00:60:1e:23:6d:19:65:a2:2c:03:fa:cd:14:2c:
41:ae:1d:3b:c1:64:0e:56:ab:4b:ea:ce:0e:4e:2e:94:ba:8e:
5d:61:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:36 2026 by rpki-client