Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: mRBVvpyehdwkCudNGBqpK349o70P4M9aZ/zhrx++6Vc=
Subject key identifier: D9:1B:1E:CA:BB:7A:3E:7F:30:01:BF:F7:9F:AA:45:8E:3F:04:60:8A
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019F0C99F97486B33CDD76059F98F311639D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 198C
Signing time: Sun 28 Jun 2026 05:00:45 +0000
Manifest this update: Sun 28 Jun 2026 05:00:45 +0000
Manifest next update: Mon 29 Jun 2026 05:00:45 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
4: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
5: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: mcqRjitLl+jmhAmzJgFTLM2IyVU4I3DZ6hqoQhRJLOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0c:99:f9:74:86:b3:3c:dd:76:05:9f:98:f3:11:63:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jun 28 05:00:45 2026 GMT
Not After : Jun 29 05:00:45 2026 GMT
Subject: CN=d91b1ecabb7a3e7f3001bff79faa458e3f04608a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:08:55:ef:54:f0:70:02:91:26:33:f6:d2:
23:9b:c4:da:b1:40:bb:83:bc:34:d2:9e:ef:35:ad:
b6:38:dd:b8:32:7f:ea:c9:30:66:f7:46:6a:68:13:
f3:63:4d:f4:bd:66:d3:62:98:fb:e0:db:ef:3d:99:
19:28:e2:37:a4:03:59:97:df:6e:c8:27:f9:8c:b2:
6c:2b:61:25:38:b3:25:b4:e4:bc:57:90:4b:d3:6f:
95:41:43:87:91:1a:5d:00:87:28:8d:41:ae:2c:59:
ba:4e:df:77:ba:bf:91:60:97:ce:a9:3b:7a:38:4c:
de:35:a6:e6:c9:9f:20:36:3e:24:a3:27:07:f8:d3:
26:37:fc:7a:9f:2d:74:be:3b:29:e3:3f:77:5f:4b:
e1:5a:02:17:1f:6d:f4:37:da:8a:59:a8:dd:70:69:
1f:ea:11:27:7f:f5:1f:91:7a:c7:2e:f2:e9:a9:77:
65:d4:2c:41:77:f0:26:db:d8:e8:c8:4a:ef:85:2a:
7f:80:bf:71:76:cb:29:6a:49:7b:a0:39:8a:88:34:
86:2d:4a:e2:76:32:cb:83:3a:7b:dc:0c:23:81:ce:
5f:3b:6e:8e:09:aa:aa:b9:70:66:59:28:06:bd:f2:
51:5a:9d:7b:35:f4:da:93:1c:80:a0:78:c6:2f:9c:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:1E:CA:BB:7A:3E:7F:30:01:BF:F7:9F:AA:45:8E:3F:04:60:8A
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:af:40:11:56:16:a9:9d:b4:4d:2d:c5:7d:24:95:be:f3:
5a:b7:9f:97:03:a9:f2:72:a5:42:da:9b:fc:e3:76:39:86:85:
3d:5a:ad:de:94:ba:0a:8a:3b:bf:de:d9:f5:8d:3f:12:42:23:
a7:ef:26:1d:76:50:5b:2b:1b:71:bb:df:87:60:df:e5:5c:5e:
7e:a0:71:a2:54:ce:0b:a8:0e:2c:7a:f0:58:06:1f:40:94:81:
a2:5a:0f:1a:fa:40:36:ff:c0:45:f3:78:3c:fd:80:da:11:6e:
87:7e:8f:01:3a:8d:92:5f:3c:cd:f9:8a:bc:a1:40:87:2a:fc:
4b:93:20:6d:19:c6:18:6e:c8:46:41:64:66:41:3f:23:ba:5c:
fa:a2:16:81:c9:00:65:72:96:b6:3a:14:81:06:b2:0e:cb:96:
ef:a1:3a:da:11:5e:8c:84:63:52:72:5f:16:ed:2c:0b:53:af:
a0:f8:32:30:9a:b6:1f:c8:00:e2:77:b0:c5:84:ab:d7:6f:34:
98:50:b7:b3:bb:65:b7:24:3b:77:ee:11:53:08:83:45:a7:63:
36:0a:f2:d2:8a:d6:48:b3:ad:d2:e0:43:e2:83:95:63:6b:62:
18:f2:24:02:5e:f2:40:f6:69:ed:d7:c3:40:d0:13:70:bd:f2:
e7:79:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 07:51:08 2026 by rpki-client