Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: zaSprFytxRuaH6RVl0E6m1IshGXbrygfgzHJAurfHtc=
Subject key identifier: 79:E2:5A:AA:7E:A9:63:27:4A:48:62:25:8F:74:A8:0C:92:30:7F:5C
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 019FF42187751117016DCF47B2678DE3C4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 1047
Signing time: Wed 12 Aug 2026 04:01:05 +0000
Manifest this update: Wed 12 Aug 2026 04:01:05 +0000
Manifest next update: Thu 13 Aug 2026 04:01:05 +0000
Files and hashes: 1: NyYE3UHHBaBD3ue76kpyUryE20o.roa (hash: FScu0FQsDxlcDVgtQ7BPeCNgRoM/ijvtnVWyLkhXy8k=)
2: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (hash: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: qggkyOdlW6mmFieA+R7f0WiI3v2uptv0EFIwIqsjCSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:21:87:75:11:17:01:6d:cf:47:b2:67:8d:e3:c4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Aug 12 04:01:05 2026 GMT
Not After : Aug 13 04:01:05 2026 GMT
Subject: CN=79e25aaa7ea963274a4862258f74a80c92307f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:e5:d7:19:f1:63:00:9e:4f:3a:f9:95:75:
83:aa:9d:60:94:33:d6:4b:60:62:c6:22:97:6b:76:
52:34:9e:57:a0:85:98:ef:07:76:79:de:86:15:d2:
2f:0e:b3:04:a5:2f:68:93:c9:ce:da:c0:6b:44:4f:
43:5f:ac:b9:ec:ea:58:92:05:aa:a6:64:c0:60:d2:
0e:62:25:20:56:fa:62:0a:2d:93:fd:78:0b:0b:5a:
4b:ee:c0:ae:40:d3:c5:2f:ae:20:61:09:cd:a3:b0:
8f:f6:dc:3a:ae:f4:02:14:7b:90:ee:3a:64:2a:fb:
1c:25:18:5d:64:1c:85:66:73:96:ba:ca:d4:4e:70:
68:9a:a6:73:27:6c:8e:5e:2f:bd:31:7a:0a:29:8e:
3a:2b:9d:11:99:d9:13:0d:99:ab:97:f9:9c:b3:9d:
f6:39:9e:05:62:52:68:cd:31:d2:11:d8:9a:bb:9c:
b1:40:e5:a9:c5:a5:90:14:a1:55:c1:c7:ae:d6:78:
27:83:c9:ac:1d:ea:1d:1e:c2:66:6f:fe:8e:73:3e:
53:8b:79:35:59:c2:8d:70:5e:a4:6f:aa:de:ef:d7:
da:12:22:45:b2:93:f4:1f:05:96:a8:eb:81:1b:34:
f0:69:8a:66:b7:f8:e3:52:41:66:dc:2b:b7:84:52:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:5A:AA:7E:A9:63:27:4A:48:62:25:8F:74:A8:0C:92:30:7F:5C
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:85:83:51:13:69:41:77:80:58:8e:38:3c:77:0b:68:d4:
82:97:1f:a4:6f:67:1e:5e:ad:9d:e8:8c:aa:8a:5d:91:fd:47:
d6:a9:6e:40:49:25:d6:72:e2:4d:5f:b8:b9:72:4c:b3:52:e5:
5c:02:5b:ef:89:68:a4:fa:e2:8c:d1:6f:d8:fb:5c:75:60:f4:
e3:0c:11:4b:b5:6a:08:1b:d7:61:3f:c0:e5:c5:42:9c:2a:09:
d7:56:f6:4e:33:47:b5:e4:6f:df:a7:ca:63:43:54:11:dd:3f:
9d:e4:99:2e:10:b9:08:65:c6:ce:02:39:3c:7f:f2:c4:78:fc:
6f:60:c1:63:12:82:e9:36:1b:19:c1:60:3f:3b:e9:c9:86:e9:
be:e6:06:10:d3:84:7d:47:bb:3d:75:d1:0e:ec:b5:55:58:24:
b3:88:d8:cd:4b:e6:ca:b8:2c:74:53:fd:c3:7b:f5:cf:3d:22:
59:2d:f6:1a:47:07:32:d9:f3:a0:35:57:a8:c1:c4:0d:75:71:
9a:1f:62:1e:c0:a6:23:c5:eb:28:fa:56:19:ac:60:73:44:1d:
3b:55:28:d8:60:9c:94:08:2f:7e:ca:e5:40:a6:a4:bf:7a:90:
e5:58:74:81:93:b9:72:64:91:88:5a:df:29:4e:11:a6:bd:cb:
ec:02:ef:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:17:38 2026 by rpki-client