Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: x5wGgC+sKffiGrwdqxO8qNrLCuS+Ye6/oQzNMxyXCio=
Subject key identifier: D5:69:10:82:7A:9F:76:4A:EE:49:23:59:D8:E9:2B:B1:3E:C0:4C:29
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 01A11AF507920E64EF2039A4EB69A3FD804A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 1A9D
Signing time: Thu 08 Oct 2026 10:00:28 +0000
Manifest this update: Thu 08 Oct 2026 10:00:28 +0000
Manifest next update: Fri 09 Oct 2026 10:00:28 +0000
Files and hashes: 1: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
2: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
3: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
4: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
5: cc1JVXvSLk6znKIXTU7nN4_xvk4.roa (hash: eIN0qgAp/19gLl8KUyQq08E6AHB2ZTJ3FNOxTVckEzo=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: p5GvJLSoKa1AbhFK+0sApJP79UYbdgKGJrdfLNE2k0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:07:92:0e:64:ef:20:39:a4:eb:69:a3:fd:80:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Oct 8 10:00:28 2026 GMT
Not After : Oct 9 10:00:28 2026 GMT
Subject: CN=d56910827a9f764aee492359d8e92bb13ec04c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:5c:9d:df:9f:d6:ce:ce:51:26:99:ba:36:
2a:7a:ca:10:70:d4:71:06:af:54:31:3b:97:0c:cb:
29:e1:aa:1e:f4:81:24:8c:37:72:01:99:81:1c:26:
0c:5f:85:67:14:73:dd:48:1b:72:b8:f9:39:c3:99:
8e:f7:20:cc:cd:4f:73:94:72:79:e2:d3:59:15:51:
ba:01:88:3a:71:aa:bf:06:ac:1c:da:f4:49:0f:04:
65:79:62:df:7d:78:9d:64:17:7f:97:0b:0c:61:5f:
71:27:d7:76:10:6e:3c:d8:85:58:86:d3:3e:43:e7:
78:e3:6c:d8:87:0a:b2:b2:66:24:8f:7c:25:0e:75:
a0:45:e6:c4:4e:e9:53:d1:52:8e:44:65:2c:de:15:
8f:9e:4d:02:4a:27:71:ef:3c:99:71:af:1e:dd:9a:
4f:50:88:a8:f8:25:e0:fa:1f:60:a9:b8:0f:ce:6c:
0f:f2:43:35:b6:85:e8:b5:55:fe:25:31:d6:f7:ee:
cb:c3:03:04:2a:94:5b:c4:e2:bb:6b:61:f7:62:ca:
43:b7:2c:8d:45:b5:95:9e:29:59:d9:cb:71:d8:b3:
b0:c1:e7:79:ce:1b:c5:93:6c:f7:cf:42:c0:ed:4b:
27:91:f2:f6:4f:3c:5e:02:1b:0d:67:2e:0a:b6:d0:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:69:10:82:7A:9F:76:4A:EE:49:23:59:D8:E9:2B:B1:3E:C0:4C:29
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a1:75:70:86:93:f3:0e:47:6a:0e:a6:fb:44:cf:fb:8a:c0:
f4:e5:c6:ae:12:f0:41:99:3f:cb:1b:38:74:2a:a7:0b:c9:65:
14:51:df:40:ac:cd:fe:e5:b9:d7:51:93:6a:04:c6:cc:b5:8d:
03:b1:c3:b6:da:8a:73:de:ba:be:6f:05:5a:c6:f1:fb:d9:3b:
c5:84:7d:e3:c3:e8:8a:4b:a8:ab:55:9a:f2:31:3a:30:f6:fe:
4e:8a:12:eb:f5:08:9a:1b:9f:41:20:b2:1c:94:26:33:7a:35:
04:ce:b5:10:9b:53:07:3d:b1:65:33:94:cb:5f:ed:e5:fa:c1:
ab:ac:e5:f4:2e:d9:d0:96:f9:e1:ca:ba:80:9c:80:61:a5:c0:
8f:f6:bb:98:95:94:54:bc:e2:f4:06:1a:ef:f1:97:8f:41:11:
ed:cd:c7:d7:ba:90:05:23:7d:93:f2:ba:e0:89:dc:97:ef:5d:
2d:c5:5f:47:df:d9:26:df:35:45:02:ed:b4:fe:38:80:8b:60:
2b:d2:04:69:90:59:34:4e:ec:b2:8b:12:3f:bb:7b:35:78:e0:
ff:29:9d:85:e0:67:6a:c0:6d:55:58:22:70:c1:7c:11:ba:86:
73:38:0d:41:e9:e0:46:b6:3b:85:da:e2:d4:5f:ff:6f:e9:65:
95:58:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:10:56 2026 by rpki-client