Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: sEOMZmiLJBtG8s2u5rBcWjs2mXib51SYYmSvRctvd0E=
Subject key identifier: 03:E9:C3:76:CD:E4:23:95:A3:CC:0C:6E:2D:5E:AB:64:F0:49:56:5C
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019E20FF0699DE8123EC90675D6ADAC1577D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 1912
Signing time: Wed 13 May 2026 11:00:44 +0000
Manifest this update: Wed 13 May 2026 11:00:44 +0000
Manifest next update: Thu 14 May 2026 11:00:44 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
4: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
5: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: h5prJhoLUeuNMkKOrwiQSx9Kv2QNRGGj0AcQ3dkYB80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:06:99:de:81:23:ec:90:67:5d:6a:da:c1:57:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: May 13 11:00:44 2026 GMT
Not After : May 14 11:00:44 2026 GMT
Subject: CN=03e9c376cde42395a3cc0c6e2d5eab64f049565c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:18:02:af:a8:8e:09:2a:d6:03:b3:87:5b:
83:50:28:a0:d4:3e:b0:8f:a0:16:c3:62:76:41:72:
bd:67:ad:1b:10:8b:58:5d:37:ca:68:62:2e:24:b9:
8f:d3:7e:79:55:35:e8:81:c9:30:79:15:dd:9c:3f:
03:bd:d5:f1:d1:a1:55:ba:7f:4c:f6:f4:54:c4:2f:
5f:5e:57:71:d7:3e:2b:04:63:05:31:a7:e6:08:ac:
46:2f:fc:ec:8a:c4:d6:b7:d7:25:b5:4f:60:cb:15:
fa:a0:5b:68:9b:76:f5:2c:6d:86:b4:6c:a7:fe:98:
67:09:ba:6a:dc:df:80:d6:d7:f6:19:ad:9a:59:22:
1e:b8:40:b9:64:08:53:93:a7:b9:33:bf:14:07:e5:
10:6f:3b:d7:30:6a:60:05:77:b5:b6:13:4d:d7:98:
ac:42:74:c2:0b:83:ef:74:54:9f:0e:99:5b:d3:ad:
e4:46:77:85:2f:22:17:08:83:1c:ec:80:34:4d:52:
09:2c:ff:c8:a4:59:6f:08:53:05:ea:21:e8:75:2e:
43:f8:9e:8c:9c:13:48:bf:b6:9d:44:bf:fd:91:bb:
04:41:6a:f5:6c:17:16:b8:9b:0f:e1:9c:28:84:ca:
8a:37:68:f5:5c:57:ac:c4:91:22:ae:e4:06:c1:18:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:C3:76:CD:E4:23:95:A3:CC:0C:6E:2D:5E:AB:64:F0:49:56:5C
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4c:2b:fd:6f:73:1b:c2:aa:6d:72:7b:90:f3:e0:65:5e:26:
73:a7:a2:76:96:b8:64:dd:92:a7:d7:3f:a3:1c:29:1b:88:46:
de:10:bd:e4:6c:dd:a9:b8:b2:4d:d7:20:36:c4:be:08:ae:33:
36:a7:8e:ec:05:38:ee:f1:9d:1a:bd:70:9d:80:e6:a1:6d:2e:
43:90:e2:41:c9:cd:87:fc:9c:b0:e2:f0:82:e4:04:88:51:c5:
87:b7:8b:52:2f:6d:a6:6c:bc:36:14:5c:b9:a3:64:43:e7:9f:
34:61:89:1c:b0:ea:96:d3:8b:ee:17:65:67:4f:41:e3:3e:01:
10:be:59:7a:fc:28:ba:6a:d0:e3:fb:aa:c7:27:0b:67:7e:22:
8d:19:06:78:62:a5:41:72:d8:0b:a8:22:22:a4:a6:16:0a:df:
30:39:9c:dd:b2:cb:88:0d:e0:35:96:9e:cf:6a:f0:5b:ca:3f:
22:7c:e1:d2:5b:d2:60:99:85:2e:4b:ab:3b:dd:22:b8:35:05:
7a:a5:ac:bb:f9:e0:18:73:57:2c:84:5f:f9:b9:ec:29:34:5a:
20:8a:20:6d:10:17:1c:67:a3:b3:a7:0d:a1:26:0a:c7:f3:4e:
a2:36:58:71:58:9c:99:6c:e1:93:5e:26:01:37:c4:08:00:18:
e2:ef:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:15 2026 by rpki-client