Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: oD186eMvn7JhnlMmyqW5vkk06iFSusSJ/JlXRsx+vu8=
Subject key identifier: 2E:EB:55:77:8A:E1:34:43:F2:5C:E6:3D:6D:D4:28:F5:D8:AF:F0:B3
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019D37C12EBF149ED52E069F234841EA1445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0B46
Signing time: Sun 29 Mar 2026 04:01:40 +0000
Manifest this update: Sun 29 Mar 2026 04:01:40 +0000
Manifest next update: Mon 30 Mar 2026 04:01:40 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: qu8AwS9yJ8J/CyMZ/bNZwzGAVe1jdCoTJsLHYKrDYaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:2e:bf:14:9e:d5:2e:06:9f:23:48:41:ea:14:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Mar 29 04:01:40 2026 GMT
Not After : Mar 30 04:01:40 2026 GMT
Subject: CN=2eeb55778ae13443f25ce63d6dd428f5d8aff0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:8f:36:2c:a6:b8:7f:2d:83:65:b9:54:7e:
d9:c2:0b:fd:9e:d0:ce:f7:53:26:49:c8:a4:b5:22:
bb:b5:8a:e4:cb:cb:cd:e4:b0:55:c6:99:16:b4:ad:
ac:57:85:db:1f:6d:18:17:86:17:a7:07:d6:d5:15:
44:9e:2e:4b:98:19:16:42:bb:b9:e8:e8:ac:21:83:
84:37:e5:54:88:a7:ba:80:3f:11:b5:bf:9f:39:53:
df:cd:9e:fc:cd:56:17:4a:7b:92:34:de:b4:85:32:
4b:92:5d:1b:b5:87:56:fd:ac:b8:be:3f:24:9e:71:
69:cb:22:a0:eb:31:ba:d5:5b:4c:55:6e:fc:f8:30:
2c:4c:48:39:ec:e6:c7:90:23:f4:2a:ae:89:ac:c6:
3d:8d:0a:1b:01:09:48:bd:44:1d:57:81:ac:11:ec:
87:13:6a:92:75:b2:7b:85:2e:4d:29:41:b9:96:09:
4c:ab:87:6a:4b:3c:ef:44:d5:60:5e:f4:8a:46:80:
e3:6f:3f:25:3c:1e:05:41:35:df:9b:d6:62:44:3f:
2c:1b:c1:1e:fa:27:1d:50:b5:72:25:08:9e:28:c7:
d6:27:3c:11:63:03:10:52:41:4f:a3:20:ca:75:ba:
b3:c5:f0:f5:a3:e5:1e:8d:07:53:51:5a:28:43:f9:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EB:55:77:8A:E1:34:43:F2:5C:E6:3D:6D:D4:28:F5:D8:AF:F0:B3
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:e1:10:71:74:bb:21:16:5c:86:17:36:fd:63:33:c4:a9:
1c:6a:1e:35:93:58:e1:b2:97:d1:3b:89:50:06:f6:03:f0:1b:
d7:76:60:84:c7:d7:33:42:f2:f8:4e:0a:f7:3c:12:94:5b:07:
46:4c:b2:4a:1b:5e:be:53:88:72:2c:b3:0d:1a:7b:8c:e6:bc:
0b:ed:5b:83:54:52:ee:f3:00:28:43:fa:e6:a6:5e:95:be:45:
f5:fe:9c:06:ef:35:d4:40:e3:81:62:b7:25:97:77:12:5e:58:
bc:0d:81:d5:4d:b4:78:42:a9:77:f4:f5:ef:c1:8a:1f:1d:f7:
64:66:2e:2d:9b:c3:4e:c4:8e:50:dc:14:29:eb:e1:62:76:f3:
fc:37:74:50:1d:9e:97:10:5f:6e:e3:28:95:53:15:eb:eb:32:
9b:8c:d5:93:88:55:34:37:9b:86:03:00:20:8f:e1:71:e6:38:
4b:95:9c:30:b1:89:32:f3:d5:bb:60:1c:6e:b9:63:d1:c9:19:
2c:b6:c7:ea:e6:d8:bb:f9:e2:fa:80:3d:48:3a:1d:7a:bb:f3:
69:7f:a4:c7:0f:57:23:df:74:82:74:3d:f1:21:42:d3:46:ae:
61:81:be:fb:97:f1:84:b5:45:78:c7:76:c4:c3:0e:a3:dc:6d:
83:7a:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:16 2026 by rpki-client