Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: 1Us0qqOyxDwD/g0MXwSEUs63hVZFezlfgsDQnYqqBms=
Subject key identifier: 16:99:F3:AA:CB:DE:C8:82:9A:2C:23:7C:84:BD:B5:E8:0F:C4:E7:90
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019E30E086D4B8E815882D82202410651524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0BC7
Signing time: Sat 16 May 2026 13:01:21 +0000
Manifest this update: Sat 16 May 2026 13:01:21 +0000
Manifest next update: Sun 17 May 2026 13:01:21 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: LKImhCWGBQg1wo3fpnrySOjWY3YN81mRFecty3lVENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:86:d4:b8:e8:15:88:2d:82:20:24:10:65:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: May 16 13:01:21 2026 GMT
Not After : May 17 13:01:21 2026 GMT
Subject: CN=1699f3aacbdec8829a2c237c84bdb5e80fc4e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:f7:33:85:96:b1:2c:9a:da:b5:a4:2d:05:
b2:35:5b:75:76:b6:29:01:e3:32:2c:e6:79:89:9c:
84:a8:2d:92:ee:5a:11:7a:75:7f:d5:18:2d:93:8c:
83:26:b8:5a:8e:d2:f7:e2:6e:e3:a3:45:c9:63:00:
d6:f3:04:01:23:2e:5d:ca:4b:e2:ba:81:15:fb:d4:
7b:7e:44:11:c3:52:00:58:18:ae:4c:ac:39:0c:8d:
69:3a:35:47:8e:ba:27:87:12:06:7e:fb:b9:88:0f:
fb:18:2f:48:5b:d8:3d:3f:66:0d:c4:28:23:03:93:
ce:83:32:70:fc:2e:50:a2:7c:42:f5:74:67:83:31:
96:ed:2b:d8:18:d2:ea:2f:f8:19:ab:38:9f:1b:d2:
a4:6a:29:61:33:65:3c:52:ca:ac:e3:db:70:36:41:
1f:92:66:98:af:17:e9:43:60:fa:2d:f2:84:80:e2:
35:59:9c:e9:8f:ba:66:41:bd:d1:ee:2f:51:08:bf:
73:f1:1c:57:a0:a2:30:0a:cb:30:8c:2b:04:a8:2f:
bd:ba:9f:45:58:d8:5f:6f:94:1f:55:1a:89:5f:7b:
42:3e:f1:7a:88:c0:c3:47:27:43:39:01:92:30:6c:
5f:4d:07:bc:7b:ae:b6:db:55:1a:86:86:3f:c5:38:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:99:F3:AA:CB:DE:C8:82:9A:2C:23:7C:84:BD:B5:E8:0F:C4:E7:90
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e7:39:61:55:4e:74:d3:d0:44:7f:46:47:3e:b8:85:e2:3f:
67:5e:54:82:92:64:f3:f9:9a:13:bc:e7:f6:5c:89:22:aa:35:
c1:90:66:c7:c3:5b:64:9e:76:3d:f9:d2:a7:19:9a:5d:a1:a6:
5d:0c:fe:20:8f:7e:ee:8d:df:05:ec:6f:e2:4d:f0:c1:d0:fe:
05:ea:ff:ff:75:7e:23:bb:db:13:76:22:e8:8c:a8:1c:a9:c8:
f3:ab:27:b1:bc:7a:49:17:2b:cc:b5:7d:1b:ee:50:3b:4e:44:
9a:b6:a8:3e:9d:6d:1d:b4:84:8b:6f:3f:06:9b:64:0a:63:67:
d1:8f:93:81:86:7d:78:15:af:d3:ad:6c:c3:e3:1f:ae:67:b6:
22:cd:05:76:ce:20:4c:76:fe:64:29:21:cd:d5:3b:52:e1:5c:
28:46:a8:08:05:ab:5d:b3:51:d7:62:07:e4:d3:59:6d:0b:f5:
ac:4c:b4:8c:b0:41:1d:9a:e2:87:84:53:4b:c2:a3:36:db:e3:
f6:07:0b:f8:c8:06:8c:36:db:d5:80:44:ee:cb:d3:97:8f:db:
d5:ea:2d:7d:cf:63:f4:35:9c:4b:55:1e:d4:eb:ce:e0:e4:74:
11:ed:26:8a:cb:3e:9c:17:f0:19:5e:29:0e:64:52:78:d1:33:
73:4d:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:32 2026 by rpki-client