Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: Kz+YDbkcTnFQdA5qOX0Vyemh5HdjrApup+36Hjrupow=
Subject key identifier: 86:4F:3D:50:EC:26:DD:84:43:49:E2:AA:07:F4:56:9A:38:3C:82:64
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 019F7173D33E0BFBF0BADAFA3AEA42558B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 19B8
Signing time: Fri 17 Jul 2026 19:00:43 +0000
Manifest this update: Fri 17 Jul 2026 19:00:43 +0000
Manifest next update: Sat 18 Jul 2026 19:00:43 +0000
Files and hashes: 1: 0cXxJ5BrjDm6rReB_iGqGCIVB64.roa (hash: 3z1rKVdZaeGfXgSTMjxBzti3FlrMlqldx9sJbZNGjcw=)
2: 74m9EYGy4qV5-l_DcpPzhu8ATQE.asa (hash: iBM8Vj0aeEJGOXYJqExALAsCNX3aqEc1tR0EDLCTd0s=)
3: dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa (hash: AS2PEdg4UVrkHexwfvP85NaTExj06DZhVZRZTbTSV2U=)
4: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: dM/ofEdzFz4MnMlBcnj3eCbCoraipuC8IGreMPSxE84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:73:d3:3e:0b:fb:f0:ba:da:fa:3a:ea:42:55:8b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Jul 17 19:00:43 2026 GMT
Not After : Jul 18 19:00:43 2026 GMT
Subject: CN=864f3d50ec26dd844349e2aa07f4569a383c8264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:d2:22:ac:6f:b7:ea:f8:97:8c:2e:d0:9b:
36:07:a6:1d:13:72:b4:65:f7:1f:8d:1b:9f:6a:8f:
2c:27:35:d3:27:9e:8c:42:9e:2b:87:5e:a0:69:4c:
9d:88:f6:fb:b1:13:0b:cd:ec:ba:2c:76:72:11:6c:
5b:04:c1:47:e8:4f:d4:2a:de:29:d0:0f:31:5d:89:
6d:3f:cc:36:64:6f:57:72:48:48:f6:8b:2a:71:bc:
95:26:85:01:57:19:27:b9:13:1b:f6:e9:df:d1:93:
89:f7:27:aa:cd:05:c1:2a:ed:8b:74:da:06:73:2d:
0f:2b:67:92:17:79:39:70:f0:3d:e1:69:d4:31:3a:
97:10:5b:ba:c5:19:21:d4:5a:6d:d8:88:cb:9a:0f:
f5:08:92:10:45:d3:bd:70:6b:bf:f5:a0:45:9a:ae:
e1:fd:50:c3:54:3f:25:ae:19:e8:7c:f3:b1:f6:70:
40:54:d4:19:35:b4:dc:93:58:58:ae:f2:26:73:78:
dc:08:8d:21:05:12:dc:a4:35:44:96:a6:8a:7f:16:
11:36:72:d0:4f:9d:28:52:de:54:09:10:97:b5:17:
f7:bd:01:d1:ca:87:c1:19:48:0b:c3:c5:15:eb:62:
fa:9d:0f:82:9e:27:2a:fe:6d:47:c4:ed:d7:70:d5:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:3D:50:EC:26:DD:84:43:49:E2:AA:07:F4:56:9A:38:3C:82:64
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:df:31:bf:5f:fa:07:28:f5:a1:c3:aa:76:ec:e7:03:b0:92:
13:42:fb:4a:83:1f:e6:bc:be:8d:c5:c9:b2:5d:8e:27:ec:83:
c5:b9:cb:52:04:c2:1e:88:bc:8f:ee:1f:a2:83:2c:54:79:a2:
2f:85:93:b8:9b:a3:96:dc:bc:5b:00:88:50:c9:70:b7:79:9d:
63:1c:87:eb:8a:b3:12:5b:73:f4:6e:e3:8f:58:24:bb:1b:61:
17:f1:ea:6a:1f:ed:78:d0:23:fa:5d:34:d6:38:bb:f2:e3:b3:
3e:be:f0:91:87:e5:aa:67:04:28:29:81:04:26:1e:88:44:b8:
78:bc:43:14:42:c1:57:5f:2c:4c:2c:07:9e:3e:c3:d3:4c:ca:
a1:37:19:b5:67:10:f3:7c:f2:41:d6:5b:f2:41:00:40:65:27:
7e:b1:8e:2d:83:da:c9:81:a1:ca:df:63:ac:a1:bd:dd:f5:00:
c2:63:87:73:ef:be:b4:e5:12:83:59:4e:b1:f5:dd:16:30:25:
52:b3:00:b2:66:8b:8b:23:78:46:7b:3d:4e:00:1e:28:92:1e:
64:39:c5:e8:f1:17:ab:27:a7:c1:0e:63:ed:7c:d8:1a:2f:73:
8d:aa:83:63:94:df:4f:59:e9:b2:ac:ac:48:4a:55:9c:8f:9f:
1d:93:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:55:44 2026 by rpki-client