Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: 9aAm+eA6409gYcAOJdHM0TZE2uHi4TCn4ZWkFkTzMgo=
Subject key identifier: 19:E5:7A:50:9F:70:8A:C2:45:67:CA:B9:C7:23:62:C9:A8:22:93:1E
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019D32630008F50B2F60A6325073617506DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 1896
Signing time: Sat 28 Mar 2026 03:00:41 +0000
Manifest this update: Sat 28 Mar 2026 03:00:41 +0000
Manifest next update: Sun 29 Mar 2026 03:00:41 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
4: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
5: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
6: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
7: kKczWo-3YbCcWORgD8y9IyNeRV8.roa (hash: LVH9yAsyNks89sVKmghut1GryJminUwWlqe58gmKuq4=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: JOTZGOQv2sJnee3ZQahs1bcTrPbGux1K6YWn758VDS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:00:08:f5:0b:2f:60:a6:32:50:73:61:75:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Mar 28 03:00:41 2026 GMT
Not After : Mar 29 03:00:41 2026 GMT
Subject: CN=19e57a509f708ac24567cab9c72362c9a822931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:be:14:d8:54:ec:41:f0:03:ee:44:ea:e7:
53:6f:11:de:6f:26:ab:4c:96:9b:f6:48:2b:47:80:
b4:32:11:3f:8c:11:e6:13:14:2b:31:04:cb:70:30:
0d:3e:28:3c:d4:47:8b:ab:58:49:0e:99:7c:87:98:
8d:7e:0d:64:33:a1:ea:11:7f:f6:3f:53:c1:b8:54:
9b:01:5c:89:ce:73:3d:6f:d2:c5:d6:ff:87:b8:09:
ca:1e:94:2a:14:32:fe:0a:bb:f3:2b:fc:18:23:f9:
95:c5:25:23:26:fb:29:9d:48:36:a7:63:5f:2e:0c:
96:fb:a3:85:0c:7f:de:5a:d2:62:ac:14:d8:9d:61:
0c:91:8b:a0:35:60:aa:db:82:ab:4a:19:c0:dd:a6:
85:35:bf:3b:9c:ca:a4:c5:09:fb:06:eb:a2:51:2c:
1b:8a:6a:15:20:9d:68:98:aa:31:9d:e5:46:cc:8e:
86:d2:0d:af:e1:a3:c6:81:c0:31:16:2d:c1:8f:6d:
2f:f0:d3:78:3a:1d:54:c0:ec:d5:85:09:ed:ee:3b:
05:b3:3b:85:f2:37:bf:bf:01:fc:48:e9:e0:fe:22:
f6:6e:33:e1:a8:ad:08:b1:0f:dd:e5:f1:0a:70:9d:
f2:ba:90:72:34:a8:87:50:51:eb:10:95:15:20:8f:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:7A:50:9F:70:8A:C2:45:67:CA:B9:C7:23:62:C9:A8:22:93:1E
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:fe:33:23:e8:1b:bc:80:97:de:de:9f:dc:31:48:b6:01:
7c:78:cb:8a:06:72:3c:90:0e:6a:12:0b:db:fe:57:18:a8:c2:
a6:e8:39:c3:a8:e6:27:bd:ee:db:64:97:e5:85:49:6a:02:26:
7e:a6:6e:1b:4d:06:7c:97:c5:b7:af:6a:8d:76:63:bf:10:29:
ce:62:e2:32:83:65:45:ab:e5:a6:d3:65:d3:52:7a:b4:ab:bb:
d1:79:a5:4f:62:68:61:5a:17:11:c3:b4:f9:b7:4c:81:20:8d:
b9:e9:f7:ef:17:fe:32:11:ac:33:25:8c:1e:b6:d8:df:0c:b5:
69:23:dc:d7:80:af:8e:43:50:3a:a5:5f:37:ea:8c:d7:31:97:
fd:14:33:29:6a:cb:cb:85:82:21:6c:0e:51:60:f3:4a:84:24:
13:8c:a9:57:cb:22:6a:bd:1b:37:d5:30:00:d5:34:99:8e:00:
47:ca:ca:0b:ae:17:f6:a3:16:81:2d:a3:a3:9a:6f:af:c7:a3:
0d:84:83:2d:e8:44:22:21:50:63:96:57:8f:80:fa:6a:03:69:
b7:44:4b:71:75:cc:08:5f:fd:ad:c8:1f:eb:5b:b6:b9:8f:a0:
19:03:26:5b:b6:8a:81:50:4d:66:c5:b9:b9:d6:dd:bd:87:6d:
41:6f:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 06:28:10 2026 by rpki-client