Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: HkvqqqZCskygoJ80b95lEuVTmVaIwu6QXk42DKLXy68=
Subject key identifier: D7:39:8B:CC:7C:15:0A:8F:05:2B:FB:06:E3:DC:C5:EC:C4:12:22:04
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 01A1355A20C9CD992A3B1C68FBD906FA6B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0D57
Signing time: Tue 13 Oct 2026 13:01:01 +0000
Manifest this update: Tue 13 Oct 2026 13:01:01 +0000
Manifest next update: Wed 14 Oct 2026 13:01:01 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: BK16447q8IFTr+vuPhENKhCcyvVH9ziK3mdK5HDM7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:20:c9:cd:99:2a:3b:1c:68:fb:d9:06:fa:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Oct 13 13:01:01 2026 GMT
Not After : Oct 14 13:01:01 2026 GMT
Subject: CN=d7398bcc7c150a8f052bfb06e3dcc5ecc4122204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:e9:41:26:f6:d4:5e:39:af:3c:81:6e:dd:
88:73:bf:49:63:cd:34:16:81:ff:e6:90:38:87:6b:
9d:ae:d2:67:07:3b:09:1b:e8:50:b3:87:6a:a1:21:
69:ea:a3:9d:c5:c4:12:99:32:81:bc:75:06:ac:9b:
39:cd:ea:97:af:be:e4:0f:53:c7:d3:a5:44:6d:a7:
5a:59:17:73:69:67:7e:87:19:b1:a2:7e:e5:5f:8b:
c7:ac:77:eb:cf:bb:1d:ff:8a:aa:c2:58:21:dd:69:
dc:4e:00:9b:c6:6e:a5:17:0e:d3:6e:d1:5b:8e:ff:
bf:a8:0c:c4:72:65:e3:ce:ae:81:46:d1:7d:5a:e3:
b5:51:2d:92:28:2c:fc:c0:e5:e2:ea:e7:8c:61:61:
90:66:d7:10:50:74:c3:fe:22:c6:2a:3d:72:74:a7:
1c:28:d9:cd:64:8e:42:b3:d1:98:e0:af:e4:29:7a:
5e:6c:8c:1e:d0:ec:e8:21:ea:a2:89:1b:3f:30:27:
16:30:48:ab:64:be:23:d4:05:26:bb:e6:be:39:46:
5d:63:33:c4:da:ba:0d:d1:6d:34:0b:72:d7:da:7a:
9c:43:2d:c9:e4:51:c1:d6:d8:9c:12:1d:4e:85:3c:
e0:a0:1c:fc:11:ff:f1:77:9b:ac:3b:41:a9:4b:05:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:39:8B:CC:7C:15:0A:8F:05:2B:FB:06:E3:DC:C5:EC:C4:12:22:04
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:95:a1:d3:f1:f4:2b:7f:78:4e:f7:fd:ab:46:2c:24:58:64:
79:e3:65:37:33:73:33:7f:c5:c3:b6:ab:f5:5f:97:0e:c8:12:
44:68:27:ad:c4:b1:df:6e:1f:1c:d9:d3:2b:f2:00:f5:c2:11:
ff:1f:e9:71:70:b4:b1:e6:b5:db:df:79:56:af:ae:84:4c:43:
e1:a4:8b:d0:37:bd:b0:ef:6b:d9:e1:16:e0:46:a6:e4:09:91:
06:d0:7d:f9:35:50:dc:08:e0:ee:d9:90:9b:4d:70:00:52:b6:
13:94:68:cb:36:f7:df:e5:69:b7:74:88:f3:04:6c:cd:be:94:
b3:ac:2a:e4:bc:f8:29:eb:ab:18:bd:a1:f3:7e:b6:6d:7d:53:
9c:1e:d8:52:b4:89:c5:09:dc:77:41:ec:f8:c3:f3:ea:0c:a0:
43:bb:b7:30:3b:5c:7d:8d:24:ed:8e:ba:cb:c3:b2:24:75:9a:
a3:55:04:f6:c0:25:a5:85:95:b4:6d:9a:28:55:03:75:f4:f8:
5d:2d:22:44:f0:7e:eb:d1:30:d8:e6:3e:24:00:a6:45:7a:38:
0b:9e:d3:27:de:b1:2f:a2:30:59:0c:d4:55:3a:79:dc:51:6b:
6e:c3:fa:6a:ab:54:8d:a2:55:b2:be:c2:5e:b5:2f:27:c1:ea:
f0:90:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:35:48 2026 by rpki-client