Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: sNmejYRorPPRhd4RpMJSFAL8zvOBovCnI6t7OFOSp/Q=
Subject key identifier: A7:E9:C7:1E:59:BE:EB:3C:D2:8D:48:E9:42:74:0A:C0:0B:C9:71:B2
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 019E30E015DDF85F7F42283462A89F85DA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:00:52 +0000
Manifest this update: Sat 16 May 2026 13:00:52 +0000
Manifest next update: Sun 17 May 2026 13:00:52 +0000
Files and hashes: 1: dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa (hash: AS2PEdg4UVrkHexwfvP85NaTExj06DZhVZRZTbTSV2U=)
2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: vpxMqDwPLKPeEDFZiVIMpc6HI7qFq/BEFIWipB18usk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:15:dd:f8:5f:7f:42:28:34:62:a8:9f:85:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: May 16 13:00:52 2026 GMT
Not After : May 17 13:00:52 2026 GMT
Subject: CN=a7e9c71e59beeb3cd28d48e942740ac00bc971b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:3d:a6:4b:d8:ca:f3:7c:0d:9d:48:d3:d2:
11:bb:12:b5:2e:f1:fc:24:c2:6f:ff:e2:fb:6d:31:
a2:b8:71:d4:a3:76:f0:13:a5:d9:0b:e8:f6:1f:c7:
48:5b:e6:79:81:76:cd:6f:4c:cd:07:3f:b2:e0:7e:
69:b9:27:9a:ab:4a:6f:2b:a0:55:7b:39:d8:55:c2:
26:68:58:26:7b:06:13:4a:65:f3:60:55:d8:83:36:
d5:57:e0:9e:ee:2e:aa:31:cd:c7:22:8f:db:13:6b:
56:58:39:53:02:9d:43:98:66:8b:cf:a9:47:11:54:
8e:47:b1:4b:c2:db:6f:24:fa:3e:dd:ae:e1:65:de:
95:c5:d0:f0:4d:90:ef:75:10:2a:e8:9a:64:65:fb:
09:67:07:dc:69:64:1c:c6:ab:8f:59:63:2b:e5:f8:
38:80:d0:00:d4:01:35:38:ea:88:1e:07:69:bf:3c:
8b:f2:dd:b5:82:bd:bc:a8:8d:5f:b1:11:26:13:ad:
d1:4d:3e:0c:80:26:f9:68:38:57:bb:76:f5:f4:40:
74:1d:f0:7e:0b:b5:71:5d:19:b9:fd:35:df:ad:b7:
04:06:bf:22:bc:d6:9a:2f:98:d4:69:d4:48:55:f7:
c3:18:b2:5e:e7:b3:88:d6:87:a8:7c:3f:6d:38:dd:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:C7:1E:59:BE:EB:3C:D2:8D:48:E9:42:74:0A:C0:0B:C9:71:B2
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0b:71:fc:30:5c:21:4d:f2:1a:18:d0:65:d8:4f:38:56:34:
81:7a:3a:31:b2:37:c1:a1:6c:df:ef:fb:bd:7a:be:22:de:0a:
55:93:67:99:f7:23:59:b4:1b:f4:b3:62:a5:13:72:d9:3b:15:
e2:e6:1e:fa:f9:82:2e:97:1e:04:8a:89:6c:9c:05:f0:15:86:
96:1e:f1:f9:f4:65:5f:31:e1:0a:eb:40:65:3a:9a:79:ba:45:
8d:8c:84:1c:a3:d2:30:65:d9:66:0d:3d:61:77:ee:81:f2:8a:
23:a5:27:1d:5d:e4:e7:6c:2b:f0:f6:6b:e5:f6:69:54:8d:07:
a9:83:03:a2:a7:c5:b5:b9:bf:df:31:e5:3f:f7:58:93:e6:c8:
50:75:06:59:07:5c:5a:9d:10:12:03:77:62:2d:61:a3:4b:bb:
a1:25:8c:11:e3:42:8c:0e:5a:13:da:3c:2c:d4:57:f3:6d:77:
16:3f:14:31:32:91:b9:2d:a1:3f:ea:24:4c:ac:bc:ff:bd:c5:
24:d4:ab:3d:a3:da:e3:c6:af:7b:f0:f3:8e:fe:e7:eb:3d:34:
f5:97:96:cc:88:cd:16:75:45:88:be:be:80:fd:49:e1:07:d5:
26:53:26:d5:af:8e:2e:35:74:53:58:08:ed:e8:3f:13:fa:be:
76:44:be:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4BXd+F9/Qig0YqifhdoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDBmYzk2NDA0Mjg5YWM1OGI2MTA0N2RkZjg2MjE4N2Y1
YWIyN2UwHhcNMjYwNTE2MTMwMDUyWhcNMjYwNTE3MTMwMDUyWjAzMTEwLwYDVQQD
EyhhN2U5YzcxZTU5YmVlYjNjZDI4ZDQ4ZTk0Mjc0MGFjMDBiYzk3MWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljU9pkvYyvN8DZ1I09IRuxK1LvH8
JMJv/+L7bTGiuHHUo3bwE6XZC+j2H8dIW+Z5gXbNb0zNBz+y4H5puSeaq0pvK6BV
eznYVcImaFgmewYTSmXzYFXYgzbVV+Ce7i6qMc3HIo/bE2tWWDlTAp1DmGaLz6lH
EVSOR7FLwttvJPo+3a7hZd6VxdDwTZDvdRAq6JpkZfsJZwfcaWQcxquPWWMr5fg4
gNAA1AE1OOqIHgdpvzyL8t21gr28qI1fsREmE63RTT4MgCb5aDhXu3b19EB0HfB+
C7VxXRm5/TXfrbcEBr8ivNaaL5jUadRIVffDGLJe57OI1oeofD9tON3E8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfpxx5Zvus80o1I6UJ0CsALyXGyMB8GA1UdIwQY
MBaAFKYA/JZAQomsWLYQR934Yhh/WrJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2Mjkt
MjEyOGQ4NDBjNDI5LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2MjktMjEyOGQ4NDBjNDI5
LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgtx/DBc
IU3yGhjQZdhPOFY0gXo6MbI3waFs3+/7vXq+It4KVZNnmfcjWbQb9LNipRNy2TsV
4uYe+vmCLpceBIqJbJwF8BWGlh7x+fRlXzHhCutAZTqaebpFjYyEHKPSMGXZZg09
YXfugfKKI6UnHV3k52wr8PZr5fZpVI0HqYMDoqfFtbm/3zHlP/dYk+bIUHUGWQdc
Wp0QEgN3Yi1ho0u7oSWMEeNCjA5aE9o8LNRX8213Fj8UMTKRuS2hP+okTKy8/73F
JNSrPaPa48ave/Dzjv7n6z009ZeWzIjNFnVFiL6+gP1J4QfVJlMm1a+OLjV0U1gI
7eg/E/q+dkS+0Q==
-----END CERTIFICATE-----
Generated at Sat May 16 22:40:14 2026 by rpki-client