Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: tO1MSZBKiGGWNYlYFz6xr1C43YqAwQQauJQlP6wXFo4=
Subject key identifier: 58:80:EB:01:11:5F:B2:4F:91:2C:1A:43:C9:75:59:8D:09:99:DE:3D
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 019EE7B24EBC90FE817EA622BA9FEA31AC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0FBC
Signing time: Sun 21 Jun 2026 01:01:22 +0000
Manifest this update: Sun 21 Jun 2026 01:01:22 +0000
Manifest next update: Mon 22 Jun 2026 01:01:22 +0000
Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=)
2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: jU8gsGVvBJyBYVCU2upehBNQEoI9hTxN3FRPmkzNWJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:b2:4e:bc:90:fe:81:7e:a6:22:ba:9f:ea:31:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Jun 21 01:01:22 2026 GMT
Not After : Jun 22 01:01:22 2026 GMT
Subject: CN=5880eb01115fb24f912c1a43c975598d0999de3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:92:ea:1a:37:9b:ac:f6:9b:24:a4:cc:39:
cb:5e:33:a8:a1:8f:21:f8:8d:29:c4:f9:14:63:4f:
61:e0:e4:91:6f:32:72:42:18:79:92:22:d0:98:c6:
0d:4c:2c:eb:32:cc:57:b8:1a:dc:cf:96:ef:4b:49:
40:57:7d:87:7b:26:34:ab:46:1c:4d:65:ad:24:29:
fc:a9:2f:41:ba:89:63:2a:bd:e4:2e:84:d4:75:02:
1b:2e:51:eb:1d:ff:23:af:bd:5d:0d:df:2b:1d:f6:
cf:cb:e7:cb:b1:d9:5a:1a:f1:2d:b7:99:c4:5a:45:
2f:e6:37:b7:ec:8d:88:4f:4e:6a:cd:dd:72:82:b2:
9c:1e:cd:88:0a:8d:37:00:6c:1a:7d:6d:4c:66:d1:
53:0d:11:ed:07:79:de:e5:36:5c:a1:a3:d4:90:e1:
47:17:fb:f2:0c:27:b7:c3:69:0a:5f:d2:3b:ca:4e:
ad:1b:5a:1d:43:29:5c:36:27:30:af:57:d7:45:74:
55:b5:5a:92:bc:a2:2f:b2:6e:49:93:24:6f:a0:21:
94:86:d0:1d:3f:c3:a9:3c:7b:cf:8a:64:6d:5e:5e:
30:78:f9:ba:78:74:83:4c:02:fc:b9:3e:a4:f8:7f:
87:b5:10:50:ee:3a:1c:21:cb:d6:02:40:9f:dd:a5:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:EB:01:11:5F:B2:4F:91:2C:1A:43:C9:75:59:8D:09:99:DE:3D
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:b2:83:72:32:ae:71:13:d7:0a:13:66:b7:d8:5d:cc:a9:
19:d2:e2:62:85:f4:0e:39:a6:6b:b5:47:01:b1:ce:db:61:3a:
d6:e5:b4:7e:20:b5:a9:d3:78:a3:90:18:8e:68:d6:bb:d1:a5:
f4:4a:ad:82:b8:7c:bc:7b:df:b4:a9:f8:11:45:ed:96:81:41:
b6:02:c0:a9:f9:90:74:43:09:9c:63:64:34:d2:dc:b7:7b:e1:
f6:1a:6b:4c:08:c0:d4:66:73:53:8a:f9:80:ad:eb:01:b9:a5:
e6:72:0b:db:b3:2f:0b:8d:32:90:47:d9:af:b2:6f:d0:13:41:
3b:c8:91:47:b2:35:e2:f4:e5:3d:27:92:0e:7a:30:04:f2:10:
96:bd:87:54:02:5c:c8:82:6e:78:e3:08:a5:bc:f7:9b:4b:d2:
0d:b3:96:e7:72:49:34:f6:b0:39:ca:33:5a:f9:bc:da:eb:dc:
39:e5:63:2e:8b:73:c0:14:0f:6d:b7:73:41:32:a3:14:ab:af:
1f:d5:53:d1:d2:f0:03:ef:99:28:b2:c4:5c:99:ef:ea:28:3b:
54:45:d2:99:79:eb:31:e7:ea:87:06:75:e1:ac:b2:1c:96:42:
4f:26:56:8e:8e:88:43:d4:47:28:3a:1f:b2:c8:d4:2c:da:94:
71:d4:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:23:05 2026 by rpki-client