Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: gz37fIz/anGgerkw6RD0sh3ZwJ0aLHdIM3+gehTfoRc=
Subject key identifier: D7:64:5D:51:4A:B9:52:F9:9A:19:4B:CA:5A:76:2E:B4:1F:01:65:4C
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 01A0F3443B23F1296239C897CC45205D26EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 1A81
Signing time: Wed 30 Sep 2026 17:02:09 +0000
Manifest this update: Wed 30 Sep 2026 17:02:09 +0000
Manifest next update: Thu 01 Oct 2026 17:02:09 +0000
Files and hashes: 1: 0cXxJ5BrjDm6rReB_iGqGCIVB64.roa (hash: 3z1rKVdZaeGfXgSTMjxBzti3FlrMlqldx9sJbZNGjcw=)
2: dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa (hash: AS2PEdg4UVrkHexwfvP85NaTExj06DZhVZRZTbTSV2U=)
3: kDKCm91Tbaw73dVnmzFp37RT9JM.asa (hash: HF6I1ZAwNCGIhZy2jtfp5rBAqX13BMqlCfTQwytOUo0=)
4: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: Q56I1012cCpbtEVXLTY93xY3JO9gVeIZdMFhkHFBRiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:44:3b:23:f1:29:62:39:c8:97:cc:45:20:5d:26:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Sep 30 17:02:09 2026 GMT
Not After : Oct 1 17:02:09 2026 GMT
Subject: CN=d7645d514ab952f99a194bca5a762eb41f01654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:28:ad:1d:b5:46:bf:1f:ff:73:82:dd:5c:
05:76:3e:7f:d1:8f:e0:cf:e8:e7:78:2c:66:39:0f:
1f:5f:c3:11:68:39:df:37:55:92:66:c3:dc:4e:c4:
24:b2:5d:d1:70:ab:fa:b7:f2:e0:b4:f6:b8:47:54:
68:ce:9c:a6:31:5a:d2:0f:6a:65:17:88:62:58:3f:
f9:a3:cf:fa:61:ac:6b:1f:02:9b:c7:ac:51:92:a1:
90:25:31:54:61:5b:0b:36:81:ae:8f:9e:c1:0f:a4:
a1:c0:46:ea:8c:5a:7e:d8:23:c0:04:17:56:fa:ec:
a4:2c:86:08:e3:89:be:2e:ea:b2:6a:44:c8:5c:65:
6b:e3:e2:ae:87:63:1e:37:d8:d7:ff:ba:35:dd:4e:
4b:23:28:b8:2f:e8:a7:ed:87:40:3d:5d:63:e8:0f:
3c:86:b6:d6:12:9c:cb:78:64:c5:ad:27:74:17:bb:
e7:fd:d8:62:4b:a8:20:23:c2:e1:38:15:6d:00:9c:
3d:e0:35:ac:fe:0a:4f:06:8b:da:42:89:c5:46:0e:
6a:bb:80:ee:0e:8d:f1:50:2c:ce:20:e8:b6:7e:44:
b2:a7:9d:3d:00:05:e6:25:29:f9:06:3d:77:22:0f:
b1:7c:82:f6:0c:04:38:59:46:b2:68:b1:48:49:45:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:5D:51:4A:B9:52:F9:9A:19:4B:CA:5A:76:2E:B4:1F:01:65:4C
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:93:22:fb:7b:16:4b:68:4a:a6:2b:4e:1c:33:81:16:90:15:
59:6e:c3:73:3e:81:76:dc:cf:bb:9b:59:1d:04:4d:f7:a0:0c:
08:2c:35:65:e2:ff:cd:9f:14:6f:a3:34:46:4f:34:52:23:69:
51:be:8b:0c:aa:6f:7a:a2:ad:aa:11:30:da:41:ed:55:95:06:
3a:5a:cc:f8:fe:87:26:7d:61:f8:34:f7:f1:0e:a1:dd:c4:f5:
26:97:77:f1:8b:67:5e:a4:d6:31:c1:4e:1d:84:87:41:07:28:
54:db:0c:d1:b7:9f:0f:9e:8a:f9:8e:30:dc:e9:4b:fd:63:0a:
6f:a5:11:c4:00:e8:b3:b3:13:05:5c:2f:68:4b:b1:d9:56:d0:
41:5e:8e:24:8a:b1:1b:3f:da:a5:51:a2:24:ac:bb:e7:3c:2f:
6a:b0:a0:3e:50:bc:68:b8:a3:0e:ae:8b:71:c5:b4:5d:d6:f4:
fb:7e:28:55:15:76:8e:5d:5a:b5:59:d4:a2:be:b9:10:11:9a:
00:3b:17:ab:a0:86:98:28:23:d2:83:e4:9a:a2:2c:ad:2e:74:
4d:31:d1:72:7e:c4:93:71:9b:01:cb:58:2d:70:86:39:85:75:
7f:55:68:e8:bb:dc:cb:e4:d8:33:d4:15:0f:ee:4a:96:30:8e:
a6:1d:8c:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDzRDsj8SliOciXzEUgXSbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDBmYzk2NDA0Mjg5YWM1OGI2MTA0N2RkZjg2MjE4N2Y1
YWIyN2UwHhcNMjYwOTMwMTcwMjA5WhcNMjYxMDAxMTcwMjA5WjAzMTEwLwYDVQQD
EyhkNzY0NWQ1MTRhYjk1MmY5OWExOTRiY2E1YTc2MmViNDFmMDE2NTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSAorR21Rr8f/3OC3VwFdj5/0Y/g
z+jneCxmOQ8fX8MRaDnfN1WSZsPcTsQksl3RcKv6t/LgtPa4R1RozpymMVrSD2pl
F4hiWD/5o8/6YaxrHwKbx6xRkqGQJTFUYVsLNoGuj57BD6ShwEbqjFp+2CPABBdW
+uykLIYI44m+LuqyakTIXGVr4+Kuh2MeN9jX/7o13U5LIyi4L+in7YdAPV1j6A88
hrbWEpzLeGTFrSd0F7vn/dhiS6ggI8LhOBVtAJw94DWs/gpPBovaQonFRg5qu4Du
Do3xUCzOIOi2fkSyp509AAXmJSn5Bj13Ig+xfIL2DAQ4WUayaLFISUVYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdkXVFKuVL5mhlLylp2LrQfAWVMMB8GA1UdIwQY
MBaAFKYA/JZAQomsWLYQR934Yhh/WrJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2Mjkt
MjEyOGQ4NDBjNDI5LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZDdiOGEtZTA3NC00ZjE2LWE2MjktMjEyOGQ4NDBjNDI5
LzEvcGdEOGxrQkNpYXhZdGhCSDNmaGlHSDlhc240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5Mi+3sW
S2hKpitOHDOBFpAVWW7Dcz6BdtzPu5tZHQRN96AMCCw1ZeL/zZ8Ub6M0Rk80UiNp
Ub6LDKpveqKtqhEw2kHtVZUGOlrM+P6HJn1h+DT38Q6h3cT1Jpd38YtnXqTWMcFO
HYSHQQcoVNsM0befD56K+Y4w3OlL/WMKb6URxADos7MTBVwvaEux2VbQQV6OJIqx
Gz/apVGiJKy75zwvarCgPlC8aLijDq6LccW0Xdb0+34oVRV2jl1atVnUor65EBGa
ADsXq6CGmCgj0oPkmqIsrS50TTHRcn7Ek3GbActYLXCGOYV1f1Vo6Lvcy+TYM9QV
D+5KljCOph2Mig==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:02:53 2026 by rpki-client