Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: vbWYicGOC+zxv0nmAzQ8iXcuCOxec3pQhCbEBD3aOmg=
Subject key identifier: E7:8D:B7:F3:8E:2A:55:42:88:B6:54:DD:8B:DE:C0:10:C4:01:E3:7B
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 019DB133A9FEFBCCB7635572DDC3A2B15B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 091D
Signing time: Tue 21 Apr 2026 18:00:46 +0000
Manifest this update: Tue 21 Apr 2026 18:00:46 +0000
Manifest next update: Wed 22 Apr 2026 18:00:46 +0000
Files and hashes: 1: h02F20m-HtlrYP1IvxDBcCyL25o.roa (hash: aEq2H+PemeJ+vZCbIyEhHoWK4ZLPYe1mqTH4CSucVMs=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: fFS19w5bb8fNddd+O58IW1Rc3BAQfYIo3Nc7smQueWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:33:a9:fe:fb:cc:b7:63:55:72:dd:c3:a2:b1:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Apr 21 18:00:46 2026 GMT
Not After : Apr 22 18:00:46 2026 GMT
Subject: CN=e78db7f38e2a554288b654dd8bdec010c401e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:c8:89:ba:0e:3d:bf:ae:f6:56:4f:5e:fa:
d5:9c:4b:ca:70:6d:a9:59:a1:22:f0:e9:b2:3d:11:
10:c3:0d:a7:9c:f9:8d:30:d6:8a:e4:24:89:c0:82:
d0:80:d1:6f:66:a5:ab:c2:cd:f1:a8:65:7d:e9:fb:
8d:ca:46:24:c1:8a:4b:e4:4e:79:71:5b:73:b4:74:
47:54:68:57:50:53:24:73:5c:2e:5d:6e:46:02:2c:
46:71:c5:2b:a3:48:79:62:56:8c:8d:ee:5f:06:c2:
72:74:7b:e0:ce:ed:f8:f6:2e:6f:33:4c:1a:92:3e:
20:f8:2d:51:1a:a7:e3:4e:9e:7d:a2:3c:ad:92:43:
19:4c:63:11:bd:42:8c:91:97:5b:2b:73:25:42:7c:
1e:74:1a:f0:62:12:79:d9:91:ce:8d:1e:b6:b1:89:
f9:ba:1f:7d:2b:11:5a:5b:99:eb:1a:2f:a5:75:70:
01:00:8d:a9:59:7a:f6:34:d3:0b:85:3d:a7:d4:69:
ae:42:5f:e6:67:bb:2d:46:80:f7:77:0e:b4:69:cb:
17:45:db:28:8e:ab:27:f6:1a:62:e5:00:0e:20:34:
4c:9c:5e:cf:4a:25:f7:5b:99:8f:f1:5f:f7:f6:9b:
77:6f:a6:84:49:9e:2b:73:d7:c3:f3:55:3d:f5:9a:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8D:B7:F3:8E:2A:55:42:88:B6:54:DD:8B:DE:C0:10:C4:01:E3:7B
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:09:f3:2d:a0:41:7a:85:18:b0:ad:7d:5f:07:05:9a:72:82:
a1:51:ec:34:99:ab:12:29:cd:21:f5:10:81:cd:fd:ef:72:7c:
bb:92:8d:ad:8c:2f:ed:56:ff:59:86:8b:dd:67:bd:09:55:80:
32:26:5e:bd:d2:d1:ad:f6:95:8a:f0:e0:1b:b3:c9:61:92:d0:
5a:f2:4e:61:f5:48:30:e3:97:40:ee:4a:f1:2a:34:85:47:53:
47:4a:c0:62:38:99:ac:b9:11:88:98:72:5a:1f:bf:e1:d0:0b:
79:22:21:8b:d1:3c:b0:f2:40:27:cc:17:d7:a2:14:1d:20:b9:
ff:6c:65:6b:8b:ea:a4:53:bc:2d:f7:f3:a1:de:bd:68:c1:49:
83:0a:93:a4:68:60:0e:a3:fa:1d:d8:b2:90:f8:96:3b:94:ce:
07:7b:41:25:26:bc:07:50:28:15:59:d8:63:5b:50:e4:bd:c2:
12:02:34:7d:2c:cb:7e:fe:11:d0:34:e3:9c:96:b6:9a:4b:c6:
b7:bc:c3:4a:c6:22:96:03:17:44:00:f8:4c:c3:15:2b:ae:fe:
f3:8f:03:d7:ba:6e:39:50:d5:f9:b1:57:46:97:8b:59:e2:83:
9b:ef:88:e2:b5:60:0d:90:8b:8a:9e:35:30:7b:ac:2f:cc:be:
4c:b0:88:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xM6n++8y3Y1Vy3cOisVtiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGFkNGIxNWU1YzFjZmVjMGFmYjFmODE4YTc2YTA4ZjE4
NjM4NmQwHhcNMjYwNDIxMTgwMDQ2WhcNMjYwNDIyMTgwMDQ2WjAzMTEwLwYDVQQD
EyhlNzhkYjdmMzhlMmE1NTQyODhiNjU0ZGQ4YmRlYzAxMGM0MDFlMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq43IiboOPb+u9lZPXvrVnEvKcG2p
WaEi8OmyPREQww2nnPmNMNaK5CSJwILQgNFvZqWrws3xqGV96fuNykYkwYpL5E55
cVtztHRHVGhXUFMkc1wuXW5GAixGccUro0h5YlaMje5fBsJydHvgzu349i5vM0wa
kj4g+C1RGqfjTp59ojytkkMZTGMRvUKMkZdbK3MlQnwedBrwYhJ52ZHOjR62sYn5
uh99KxFaW5nrGi+ldXABAI2pWXr2NNMLhT2n1GmuQl/mZ7stRoD3dw60acsXRdso
jqsn9hpi5QAOIDRMnF7PSiX3W5mP8V/39pt3b6aESZ4rc9fD81U99ZowxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeNt/OOKlVCiLZU3YvewBDEAeN7MB8GA1UdIwQY
MBaAFKYK1LFeXBz+wK+x+BinagjxhjhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQt
MWE1NTU5ZmRkNGRmLzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jY2JkNDQtNjNiMy00MTA1LWIzOWQtMWE1NTU5ZmRkNGRm
LzEvcGdyVXNWNWNIUDdBcjdINEdLZHFDUEdHT0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgnzLaBB
eoUYsK19XwcFmnKCoVHsNJmrEinNIfUQgc3973J8u5KNrYwv7Vb/WYaL3We9CVWA
MiZevdLRrfaVivDgG7PJYZLQWvJOYfVIMOOXQO5K8So0hUdTR0rAYjiZrLkRiJhy
Wh+/4dALeSIhi9E8sPJAJ8wX16IUHSC5/2xla4vqpFO8Lffzod69aMFJgwqTpGhg
DqP6HdiykPiWO5TOB3tBJSa8B1AoFVnYY1tQ5L3CEgI0fSzLfv4R0DTjnJa2mkvG
t7zDSsYilgMXRAD4TMMVK67+848D17puOVDV+bFXRpeLWeKDm++I4rVgDZCLip41
MHusL8y+TLCI3w==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:20:46 2026 by rpki-client