Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: tHqOlV6vIeXQ77eFe4b7V1k/HnpQT7hVfvZYbHJtiEA=
Subject key identifier: E1:C9:BE:1B:AF:A2:B0:01:D7:74:4F:ED:87:F0:B1:0A:84:93:C5:61
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 019D37C0487B30A9BB50E11280621C5D8596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 0945
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: K7W2HCvsA8JxFMmzeilzEcsyppo.roa (hash: jiMWX4J6RYOzWaNm/5z8OYJi7Equ31upjXJ+Jtp8KZY=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: b8huxZPPopAZEoeX4eZMJTIAp4pO41XdqVYIfxYY/GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:48:7b:30:a9:bb:50:e1:12:80:62:1c:5d:85:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=e1c9be1bafa2b001d7744fed87f0b10a8493c561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:d7:71:0f:10:b4:7e:8b:70:c1:db:fd:ef:
dd:bd:8f:88:03:97:f9:49:52:c8:a8:3a:98:86:61:
3b:83:6f:95:32:99:92:df:ce:01:e7:78:11:c4:3e:
0b:88:6d:6a:d4:b9:f4:21:a0:6e:fa:6d:24:15:e7:
81:b1:eb:d5:d8:9e:16:7f:6f:f6:a5:b9:74:e6:6a:
c2:36:1e:09:88:30:ee:da:e2:d4:cb:5b:20:6c:e9:
dc:cb:ea:6c:d3:27:19:7e:41:3a:ea:07:61:24:f2:
33:ae:53:26:21:e1:35:b6:71:54:97:6e:66:31:c1:
d0:37:04:2d:d4:54:1e:ac:b3:1c:9e:39:ad:64:15:
cf:5f:52:bf:6a:ad:13:f1:e9:ff:ed:25:03:46:d3:
6b:0c:70:9e:62:7c:23:2f:9f:b3:46:8c:c2:a3:b8:
1a:9e:67:b5:00:05:7e:5e:79:a6:25:f1:df:42:4f:
cb:4a:80:6e:86:38:15:d8:a9:7d:4a:70:d2:a3:2d:
da:5b:1f:e0:4c:2d:0a:d5:b8:71:a2:94:bf:bc:09:
76:2e:05:09:1c:45:22:b8:24:92:1c:c6:70:c1:d1:
78:58:f0:17:9a:7d:19:65:1a:58:a8:5b:a8:35:ba:
ed:a9:2a:44:87:6a:ad:6e:19:ae:ad:4b:0a:0c:93:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C9:BE:1B:AF:A2:B0:01:D7:74:4F:ED:87:F0:B1:0A:84:93:C5:61
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d1:ec:64:8c:05:b1:35:db:63:6a:87:9a:5e:6c:68:83:a4:
86:14:8c:52:79:1e:89:8f:e1:21:94:c4:08:d2:77:54:67:23:
70:ae:ec:dc:22:5d:2d:33:63:c9:6f:e0:f7:69:be:57:44:39:
35:db:6e:12:f4:ef:0a:f4:66:01:e6:16:75:e0:eb:4a:d2:e9:
2d:2d:58:56:b8:1e:56:d9:d5:e4:9a:ac:85:61:a0:f6:33:1c:
d1:49:46:d0:d0:2e:12:0a:e2:1c:9a:f2:47:fa:7e:9e:d6:e6:
47:29:b4:fd:29:13:d5:79:d9:85:03:6f:fc:61:1c:68:0d:d7:
9c:8e:4d:2e:9b:39:c3:54:9d:41:94:43:f9:6a:55:1e:9e:e3:
e3:c1:3d:f5:12:95:f3:6d:fb:e8:77:03:4e:c5:e0:9f:9d:17:
70:58:f2:5c:08:25:f6:c0:17:3e:f5:11:ba:75:11:d7:ac:62:
49:1a:38:bc:b5:51:03:99:ac:42:05:a0:f2:0b:86:e6:1a:73:
7b:b0:65:1e:f9:03:66:4f:6c:8d:52:18:55:56:c9:fd:29:81:
36:07:29:90:e4:8f:30:ed:c8:a3:d6:89:4e:e9:c9:bb:f8:ea:
3a:80:ed:29:fe:4c:52:40:63:db:d8:42:28:0a:00:df:19:19:
11:8c:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:24 2026 by rpki-client