Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: jI+zc79VHJ5NvlzzltO9h01I7EtbISL4jYNs+V25jv0=
Subject key identifier: 1E:AA:1B:59:A2:0F:FC:5C:88:FD:96:5C:ED:D9:F4:74:5A:E0:75:EB
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 019D37C0305401E95EBE103CF9E50F2BAB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: LggB48-j7YY9SCWaA8exH9VEaUk.roa (hash: q3ynPTcziyC9bHjFnAz0n/dVRFiqqPc4LI87XhrGp+g=)
2: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: wm8+2wKNKoFP5Bi0/ufH8v6kwhZi8lavLl0Ln5cVOgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:30:54:01:e9:5e:be:10:3c:f9:e5:0f:2b:ab:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=1eaa1b59a20ffc5c88fd965cedd9f4745ae075eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:fe:04:eb:a0:cb:26:6e:f7:91:34:c7:c1:
c3:bd:34:06:38:a4:dd:a6:15:77:3d:a1:af:ac:ba:
cb:d0:2e:66:33:c2:e9:3d:98:04:c8:d1:19:82:33:
ae:e1:7f:6a:a3:48:71:1a:6c:67:ee:7d:f7:d2:21:
62:b2:03:a4:38:1a:30:a9:f4:b7:e9:f4:26:6b:06:
ad:f2:06:02:03:54:4d:8c:68:ec:cb:ca:dc:2d:9d:
f5:5f:47:e9:3f:f1:26:30:00:35:e3:ad:a9:b7:1f:
5d:02:c8:92:29:08:cc:e6:27:ec:ca:c6:34:32:c8:
df:bd:c6:0f:5c:6b:6d:34:c4:4d:e3:8b:d7:31:23:
15:3d:63:b1:39:42:9d:b1:59:de:6d:50:1c:41:06:
04:63:e8:35:b8:a8:26:82:a2:fc:a7:03:de:fe:aa:
0f:e8:76:72:1e:fa:3f:be:28:de:b0:61:e9:74:06:
2f:27:c3:e7:dd:ce:7a:b2:f8:29:39:cb:96:75:82:
b5:41:b8:fb:41:24:0b:27:89:2b:ed:68:74:29:2d:
1c:f7:6c:24:fd:f5:c6:28:aa:36:fd:2d:99:fb:f5:
1b:c2:19:83:78:2c:45:90:ce:2e:10:4f:7f:e5:10:
92:7c:a6:a7:af:03:6c:90:a5:3b:89:94:a7:5f:aa:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:1B:59:A2:0F:FC:5C:88:FD:96:5C:ED:D9:F4:74:5A:E0:75:EB
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f8:e9:60:9d:86:dd:6b:d0:c0:89:61:31:23:65:3a:a7:56:
35:b7:96:46:f6:ef:6a:b0:e6:5c:4a:b0:20:27:ac:d0:81:77:
c8:7c:19:82:c4:5e:4a:5c:66:3e:f1:91:f4:d3:36:f6:4a:2a:
f9:1a:c3:1d:7c:0a:db:25:00:21:62:46:22:21:a3:bf:5b:b0:
29:11:2a:72:60:ca:2a:ef:d6:42:31:55:e2:69:31:de:77:52:
c4:9e:de:dc:0e:53:1f:4d:8e:56:36:2b:d6:4c:5f:e3:29:dc:
d0:15:00:e4:6e:d5:a4:e8:16:09:60:33:90:56:ae:60:ee:bb:
e3:7e:9f:63:70:d0:d2:f3:91:e4:e0:4e:84:05:90:04:57:d5:
75:f4:b9:a1:d5:a5:75:31:7f:86:15:f5:00:59:9b:a8:a6:98:
c5:3a:b1:1c:f2:0a:72:22:e7:4c:ab:45:f7:1a:bd:27:54:d9:
bf:bc:3b:2a:df:5b:1d:a1:54:ed:3f:3b:22:f4:59:11:75:bc:
c1:da:ce:b4:dc:6c:34:24:8e:f4:8d:9f:36:f9:6d:69:bb:9d:
3d:74:f8:a8:81:aa:55:8f:36:8f:02:bf:be:6e:a1:39:b5:dd:
32:29:c8:a4:47:74:3d:6e:16:b8:1f:0d:6e:78:02:fd:27:51:
85:0f:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:13 2026 by rpki-client