Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: lDhnaxXXLJb6tkyibJtqX7YoYqr10kOS7VH8yHZlaNA=
Subject key identifier: DB:DB:72:5C:CB:63:9C:1D:AA:A9:B4:A7:97:58:CF:BF:98:CE:AF:2C
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 019F848CB91AE5DB534B63132F2DBF734FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 0A0F
Signing time: Tue 21 Jul 2026 12:00:42 +0000
Manifest this update: Tue 21 Jul 2026 12:00:42 +0000
Manifest next update: Wed 22 Jul 2026 12:00:42 +0000
Files and hashes: 1: h02F20m-HtlrYP1IvxDBcCyL25o.roa (hash: aEq2H+PemeJ+vZCbIyEhHoWK4ZLPYe1mqTH4CSucVMs=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: 96aO21IYHIxpmiDls6i9Zrqbng7M0lNFCwokaRkOh5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:b9:1a:e5:db:53:4b:63:13:2f:2d:bf:73:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Jul 21 12:00:42 2026 GMT
Not After : Jul 22 12:00:42 2026 GMT
Subject: CN=dbdb725ccb639c1daaa9b4a79758cfbf98ceaf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:c9:f7:14:91:87:63:91:49:c4:6b:cd:68:
16:68:e4:c2:1b:d9:6d:17:96:7a:41:ef:f5:75:ad:
ee:7f:7c:60:e5:db:02:4f:d6:1d:c6:3e:ff:cf:f7:
6e:03:f5:06:23:99:7f:62:93:ee:c6:e9:a1:1e:26:
35:9d:42:74:46:fc:24:1b:bb:a0:32:f7:21:98:11:
c5:4d:ad:0e:6a:9e:88:54:f1:f6:2c:24:d7:7b:47:
67:93:ce:6e:11:a0:e2:09:bd:17:a1:7c:2d:94:b8:
76:aa:3f:98:e8:a2:00:9f:48:5f:af:06:a6:ed:46:
0d:82:35:d6:3d:db:21:12:3e:ef:dc:54:2f:0d:76:
8c:1f:e3:97:e3:47:2f:dd:3a:ea:2c:c2:20:2c:f5:
f2:f2:ab:72:99:d3:ac:b5:80:ae:72:7e:a7:83:0a:
70:c7:14:7b:0e:d4:80:2b:bf:5a:a4:92:4c:c7:86:
96:07:f7:e0:1c:9e:ca:0c:fd:e5:1e:f6:12:66:39:
c3:3d:a8:90:7a:50:3a:47:49:0b:74:1b:6c:db:69:
05:44:b3:18:62:20:b1:49:5e:f3:10:e7:99:a7:66:
2e:b8:b0:1a:0a:ba:ac:dc:cc:40:33:3b:ba:d0:04:
24:44:eb:cd:2e:6b:57:2d:ed:79:f7:dd:84:d0:1a:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DB:72:5C:CB:63:9C:1D:AA:A9:B4:A7:97:58:CF:BF:98:CE:AF:2C
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ee:79:c2:dd:3f:86:57:40:ec:14:34:76:75:38:3e:83:d2:
23:c6:a0:bd:f7:c5:2a:dc:63:1c:21:34:95:fb:d6:e3:9a:af:
56:89:11:66:18:d5:de:18:4c:a2:c8:90:00:b4:f8:af:d4:9e:
3e:08:04:68:72:ff:1a:f5:d9:03:87:27:6f:89:43:86:e7:00:
f8:67:4e:e4:fe:58:81:69:d2:e9:8a:64:98:c1:65:68:1b:50:
e5:6a:cc:ba:33:f1:3d:aa:6a:aa:64:88:7d:d4:0a:30:48:7f:
1f:10:0b:58:21:77:d6:72:ce:88:cb:f8:55:e9:30:f6:94:b6:
ea:e8:61:90:07:ac:86:84:5e:f2:0b:67:00:35:c1:c9:59:d5:
81:e9:6a:7d:57:ac:2d:17:e4:9a:e9:80:de:bf:db:52:df:13:
d8:02:b6:f9:3f:19:87:2d:29:ec:37:a9:7b:d6:3e:79:db:fc:
15:61:ab:7a:99:87:8c:c2:e4:03:5c:0d:75:21:37:67:6b:db:
2e:68:01:1f:ee:f5:20:e0:2a:9c:08:44:a8:23:c6:7f:a3:c5:
69:02:4f:f6:98:1e:7e:8a:79:e6:b8:e0:58:87:2f:dc:12:59:
8f:cd:49:39:6d:3a:d7:16:61:0c:ae:09:1e:d2:f8:81:95:fa:
94:5c:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:55 2026 by rpki-client