Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: +TxbNJGBqZrB8P17hSi+KhNUrArDaNcJLzfqjAF0lmA=
Subject key identifier: 1A:2C:34:61:9C:FE:68:EA:41:85:42:29:9B:7C:80:63:59:F9:BB:1F
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 01A0024B663E5DA572ECF800866D29C6E7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0CB8
Signing time: Fri 14 Aug 2026 22:01:30 +0000
Manifest this update: Fri 14 Aug 2026 22:01:30 +0000
Manifest next update: Sat 15 Aug 2026 22:01:30 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: 19i+rDoC+yQhnKlBu8N6Cr1QXUlQHgvHYnBhxgFNhhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:66:3e:5d:a5:72:ec:f8:00:86:6d:29:c6:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Aug 14 22:01:30 2026 GMT
Not After : Aug 15 22:01:30 2026 GMT
Subject: CN=1a2c34619cfe68ea418542299b7c806359f9bb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:53:f0:d7:97:c4:c7:58:4c:f4:1c:34:5b:
60:5e:38:86:19:15:3a:20:49:c1:10:b5:1c:16:7e:
98:f2:02:a1:b2:a1:14:ad:58:3e:1b:b2:0b:eb:0f:
6b:9b:9f:16:89:9d:9c:43:33:dd:1e:e4:6d:58:65:
16:8f:7b:fe:a4:59:a0:30:8c:a4:8c:2f:ec:25:2f:
b2:a4:b0:1e:71:47:28:d2:23:89:32:ee:0f:c0:71:
35:5c:71:aa:56:d7:8d:11:bc:75:1d:9b:ee:05:f5:
1b:9a:47:32:2e:72:54:30:ce:4e:af:66:16:08:73:
83:51:92:b3:15:17:95:ca:33:c2:25:1e:f3:27:e6:
34:3a:c8:15:b9:77:08:ed:e9:a9:7d:db:aa:25:1e:
ed:c8:c5:73:1e:c4:92:7e:f2:da:b0:90:73:9a:46:
82:34:1b:22:b4:e0:29:4b:6f:aa:e8:ec:8b:54:47:
07:b3:28:47:d3:a9:58:43:d7:fc:03:a8:09:53:41:
f0:2e:cd:a9:45:3d:c7:44:07:a3:da:42:51:42:77:
f4:6b:1a:98:bf:f1:11:a7:90:ab:95:a0:13:09:93:
75:58:98:92:87:df:85:18:c0:66:2d:5f:b8:08:88:
76:8a:61:03:ff:f2:aa:45:fd:02:60:4f:75:b4:d5:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:34:61:9C:FE:68:EA:41:85:42:29:9B:7C:80:63:59:F9:BB:1F
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fe:83:80:99:f0:61:6a:01:83:90:d5:33:eb:33:d7:af:69:
1b:ac:13:02:0f:0b:90:8c:29:8d:53:82:63:95:32:be:fd:a3:
71:b6:5a:99:a3:97:80:a7:b2:cd:32:d2:09:f9:32:ff:23:18:
55:c7:63:4c:85:dc:87:c6:10:63:41:1b:10:1c:55:4d:bb:c5:
fd:fc:4a:21:df:34:89:53:6f:15:b1:c7:5c:58:19:52:70:d1:
04:b8:4a:99:be:7c:9d:bf:cb:68:85:bd:71:f8:c9:b3:03:e0:
c5:71:39:9d:25:b9:a5:ef:a5:c2:4c:51:76:5a:01:01:4b:32:
b8:84:c1:a5:9f:00:7c:ee:08:d7:1b:91:17:29:94:9f:5f:f3:
22:f3:69:ee:53:a3:54:35:06:3b:0d:11:f9:53:8b:6e:f3:f2:
70:07:c8:bd:e7:e7:af:0c:62:7b:5f:ea:28:73:52:b3:7d:12:
48:80:24:f6:a1:62:ca:3c:24:32:c1:a2:9e:12:c7:bf:be:09:
f7:51:52:60:de:b0:18:b5:02:b0:b4:a6:68:ff:93:cc:25:ca:
a9:81:49:d5:cd:a0:26:c4:5e:01:02:ab:15:85:98:d8:a1:a7:
d1:fd:ac:21:bb:4d:8e:df:8f:cc:18:9e:fe:e9:36:a2:7c:12:
1f:32:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:34 2026 by rpki-client