Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: mRLEsE9CGiN6B6vH5bgr0BwJkGAesO0X+pJ/qwLpQdU=
Subject key identifier: 8B:06:93:E8:B9:4B:8E:CC:6C:9A:64:4D:16:D0:5D:33:87:D3:DC:E1
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 019CE6A42C9F3F5559A1B0B55729438D4D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 10:00:44 +0000
Manifest this update: Fri 13 Mar 2026 10:00:44 +0000
Manifest next update: Sat 14 Mar 2026 10:00:44 +0000
Files and hashes: 1: dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa (hash: AS2PEdg4UVrkHexwfvP85NaTExj06DZhVZRZTbTSV2U=)
2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: qhVuirlvAoaJlKoc4c59IsybshA65730Ze7kt5v77E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:2c:9f:3f:55:59:a1:b0:b5:57:29:43:8d:4d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Mar 13 10:00:44 2026 GMT
Not After : Mar 14 10:00:44 2026 GMT
Subject: CN=8b0693e8b94b8ecc6c9a644d16d05d3387d3dce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:8b:75:a0:fe:5d:41:74:18:89:87:0d:5b:
ea:05:39:c2:81:fe:3f:16:8c:4d:0e:22:6d:0d:67:
95:c4:21:89:f0:65:06:9b:7d:9e:00:7e:7d:61:78:
b9:47:cb:db:7a:3b:71:26:28:d0:20:08:8f:bf:7a:
e2:6f:1d:a8:a8:21:8b:79:69:5c:63:84:4f:28:c1:
69:dd:6f:10:c0:c1:1c:f6:5d:9b:f7:dc:c1:4e:d4:
e6:89:70:44:42:70:b1:03:3f:57:58:a0:ef:a0:54:
28:77:8e:32:d8:5e:ab:3f:c2:72:c3:b3:e9:45:68:
0f:dc:c5:3e:5a:39:a7:bd:11:f1:87:a6:cb:63:80:
88:df:1c:93:16:35:da:26:09:b8:20:4a:1b:d4:4e:
eb:53:df:1e:dc:df:a2:47:8c:5a:75:c1:08:9e:cd:
a7:b6:f7:f6:28:9c:24:1e:a4:52:fb:63:15:de:78:
85:47:91:47:a0:a0:ae:96:52:45:96:d5:cc:78:f4:
60:af:78:2e:c4:3c:42:f8:ba:ad:5f:a1:97:63:20:
e5:9c:d5:5c:49:fe:b7:74:b5:9a:10:95:74:f0:13:
06:47:52:65:0a:06:14:f1:3e:9f:41:74:5d:f2:bd:
fa:ac:55:d9:08:48:3c:ed:25:5b:e3:52:52:1c:89:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:93:E8:B9:4B:8E:CC:6C:9A:64:4D:16:D0:5D:33:87:D3:DC:E1
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e6:54:fc:e1:fc:15:0c:b0:a1:0c:62:47:6f:42:9f:f6:83:
b5:c4:e6:0d:42:a7:08:a6:4c:cf:6b:1e:42:28:55:c5:19:79:
d4:55:ad:d4:b0:d1:6c:ae:20:2f:b1:f6:70:1a:e1:9b:53:43:
c9:80:76:44:f0:18:a7:f7:e2:71:ec:61:d6:3d:77:f5:4a:48:
e9:25:eb:c9:1a:8b:56:58:73:42:50:a7:14:33:75:5d:bd:4f:
94:f2:cf:c6:e7:af:8d:c2:93:08:05:33:df:94:e7:bc:44:f5:
0d:19:bb:c8:ad:cd:4e:5d:3d:3a:a1:e1:2d:8f:f6:8a:0f:73:
74:73:22:b6:e7:1d:1b:11:c1:4e:1f:4f:7b:63:6f:27:9b:91:
2f:92:e8:88:18:e6:32:79:cb:03:2e:36:f6:39:18:1d:4f:e1:
77:94:3e:1d:30:df:57:83:50:f4:4b:c6:4c:cc:23:5a:83:c4:
c9:b0:b4:c0:87:72:17:82:00:26:14:e5:88:4f:76:07:a4:16:
e4:37:99:5e:96:5b:61:3d:8a:68:cd:4c:a3:13:44:19:56:6c:
1d:73:74:61:30:86:0b:68:4c:73:e8:9a:ac:c4:9a:cc:a1:2b:
e3:32:af:40:02:63:57:8b:68:5b:df:07:ad:7a:ea:ad:23:60:
0f:ce:77:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmpCyfP1VZobC1VylDjU0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDBmYzk2NDA0Mjg5YWM1OGI2MTA0N2RkZjg2MjE4N2Y1
YWIyN2UwHhcNMjYwMzEzMTAwMDQ0WhcNMjYwMzE0MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg4YjA2OTNlOGI5NGI4ZWNjNmM5YTY0NGQxNmQwNWQzMzg3ZDNkY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN+LdaD+XUF0GImHDVvqBTnCgf4/
FoxNDiJtDWeVxCGJ8GUGm32eAH59YXi5R8vbejtxJijQIAiPv3ribx2oqCGLeWlc
Y4RPKMFp3W8QwMEc9l2b99zBTtTmiXBEQnCxAz9XWKDvoFQod44y2F6rP8Jyw7Pp
RWgP3MU+WjmnvRHxh6bLY4CI3xyTFjXaJgm4IEob1E7rU98e3N+iR4xadcEIns2n
tvf2KJwkHqRS+2MV3niFR5FHoKCullJFltXMePRgr3guxDxC+LqtX6GXYyDlnNVc
Sf63dLWaEJV08BMGR1JlCgYU8T6fQXRd8r36rFXZCEg87SVb41JSHIluiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsGk+i5S47MbJpkTRbQXTOH09zhMB8GA1UdIwQY
MBaAFKYA/JZAQomsWLYQR934Yhh/WrJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2Mjkt
MjEyOGQ4NDBjNDI5LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2MjktMjEyOGQ4NDBjNDI5
LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuZU/OH8
FQywoQxiR29Cn/aDtcTmDUKnCKZMz2seQihVxRl51FWt1LDRbK4gL7H2cBrhm1ND
yYB2RPAYp/ficexh1j139UpI6SXryRqLVlhzQlCnFDN1Xb1PlPLPxuevjcKTCAUz
35TnvET1DRm7yK3NTl09OqHhLY/2ig9zdHMitucdGxHBTh9Pe2NvJ5uRL5LoiBjm
MnnLAy429jkYHU/hd5Q+HTDfV4NQ9EvGTMwjWoPEybC0wIdyF4IAJhTliE92B6QW
5DeZXpZbYT2KaM1MoxNEGVZsHXN0YTCGC2hMc+iarMSazKEr4zKvQAJjV4toW98H
rXrqrSNgD8535g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:22 2026 by rpki-client