Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: RjU0kYSxVjiwPZvik69pICD5IKeVh5db+5wHDUCDeyk=
Subject key identifier: F6:FE:39:08:7B:AB:DC:D3:9C:7F:68:0B:C6:0E:AF:C1:80:11:E5:31
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 019D371B93329EA7A782BCEDA75482E6DCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 0770
Signing time: Sun 29 Mar 2026 01:00:47 +0000
Manifest this update: Sun 29 Mar 2026 01:00:47 +0000
Manifest next update: Mon 30 Mar 2026 01:00:47 +0000
Files and hashes: 1: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: FWkegcG2jml2QyEJFDkU3np3wkz05lTcG2HKwG8QeYc=)
2: dNajQCUoGaoowLS9HpOXxA6vUe8.roa (hash: hhwbI1QROgF/W8q/u8jmMb63ziVKKIX34GLWc4neSDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:93:32:9e:a7:a7:82:bc:ed:a7:54:82:e6:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Mar 29 01:00:47 2026 GMT
Not After : Mar 30 01:00:47 2026 GMT
Subject: CN=f6fe39087babdcd39c7f680bc60eafc18011e531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:84:74:44:c7:98:ab:d3:73:71:7c:5b:12:
75:7b:08:03:7b:c9:e8:39:ad:e8:0f:fb:64:7c:cf:
7a:76:f6:91:f9:96:e0:e6:68:bb:6f:a6:ed:b7:55:
39:21:89:99:8b:8a:f9:7f:19:9a:be:d8:4d:6a:fc:
7d:39:98:4b:16:96:52:71:d2:28:6e:21:5f:e1:dc:
da:b0:7b:87:61:d2:66:47:28:d3:b8:fd:0b:2f:07:
a4:bb:47:8f:7f:33:06:06:90:09:ad:38:7e:8b:2b:
ed:bb:7a:4e:8c:ab:57:36:a0:f5:4e:c3:54:9b:68:
68:75:56:2a:5b:6f:36:8c:7d:76:c9:8f:85:35:6b:
47:e2:1a:bf:5f:8a:5c:b8:9a:54:a7:0c:a7:99:21:
4b:64:cd:8f:0e:dd:70:c2:b0:70:7e:35:d1:9f:1a:
f1:af:6d:ca:91:a6:f7:d3:56:c1:fa:ef:e3:3f:12:
51:43:fa:b0:81:fa:a8:bf:87:d9:76:af:83:89:f8:
f8:ec:5e:01:44:c7:d3:ff:13:e9:ab:0c:ac:a4:89:
a4:88:b6:a5:5e:c4:5a:f5:5e:a4:eb:d2:d0:73:4d:
f7:d7:fc:f2:b1:27:43:fe:71:fa:40:90:a0:ba:38:
0f:f3:9d:54:37:84:f8:80:21:d1:fc:be:69:d1:31:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:39:08:7B:AB:DC:D3:9C:7F:68:0B:C6:0E:AF:C1:80:11:E5:31
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:dc:dd:0c:c9:a0:ef:e4:b0:c3:cb:2e:61:2b:23:1b:47:
14:07:c9:08:59:6b:fe:9f:d0:fd:85:16:c6:df:1f:a0:a1:db:
81:df:39:5d:b5:be:43:75:26:ed:17:09:f6:20:6a:95:2f:63:
b2:9f:d1:09:f5:0a:5d:7f:bf:9e:f1:f3:ac:e1:36:a9:21:1f:
0e:86:99:da:d0:93:fd:92:44:e5:d3:89:ab:9f:11:db:5d:fe:
1c:30:07:32:9e:b7:8e:bc:63:67:a2:15:db:ce:d5:4b:90:d5:
11:28:54:81:f2:ea:00:fd:1e:bf:67:98:84:8e:92:0c:60:f9:
e5:9f:f4:c0:f5:c0:a9:48:7a:78:88:71:5a:e6:1e:e5:50:9d:
1e:e6:45:cf:a6:bb:56:2f:ed:aa:cd:82:f7:9f:0e:79:ab:19:
6f:15:ea:05:2a:93:33:b7:48:1a:7c:fb:c7:79:0a:0a:dd:fd:
44:4c:5c:1e:1f:99:01:d6:b9:63:cb:77:d4:5f:3a:49:17:b3:
6a:1a:58:d1:ef:6d:78:b6:6f:c2:c4:ca:f7:06:a1:36:3e:f1:
5b:91:f0:7c:9b:54:fc:c4:cb:39:f4:a9:01:cc:d9:e5:7d:54:
8a:43:d5:72:82:7a:e9:16:d3:98:0d:21:e9:df:28:81:9a:93:
3c:a2:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:44 2026 by rpki-client