Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: 65uDuLHQyYKyog2R67RYFqzh/NQ8CtLApO8wyAKoLxI=
Subject key identifier: 4F:FE:63:EB:93:F3:74:75:AC:31:3B:37:1C:90:97:D9:3E:76:20:EC
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019EB733513F7395DA0DB380F7014E8E80F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 10E4
Signing time: Thu 11 Jun 2026 15:00:54 +0000
Manifest this update: Thu 11 Jun 2026 15:00:54 +0000
Manifest next update: Fri 12 Jun 2026 15:00:54 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: QBCRpKwG9cfsYgQ0+rp84J6Ym+38rFS6+ECkp0YIjYc=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:51:3f:73:95:da:0d:b3:80:f7:01:4e:8e:80:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jun 11 15:00:54 2026 GMT
Not After : Jun 12 15:00:54 2026 GMT
Subject: CN=4ffe63eb93f37475ac313b371c9097d93e7620ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:03:81:05:64:44:2e:7f:eb:ad:0d:b6:1f:
00:a1:e4:e9:b5:5c:7b:6d:e3:fb:c0:53:9b:0c:e7:
98:05:14:88:a9:04:fe:44:f3:b7:eb:8d:43:42:54:
53:e1:3c:9e:3f:1e:a1:4b:f3:cc:88:4b:5e:ad:5d:
00:20:23:99:3a:ef:0f:f0:d8:1c:4a:4d:48:9a:f9:
8c:0d:72:e7:40:db:6f:5d:c5:73:f5:42:50:4e:02:
42:93:26:2f:0a:d2:05:2a:89:9c:fc:6f:b6:2b:6c:
68:ed:03:38:af:13:b0:b8:6e:c5:4e:a7:19:26:e0:
18:b4:77:41:ed:ed:b4:9c:54:17:02:d2:83:46:cd:
44:47:3b:7c:be:dd:70:49:a1:16:d0:4e:1a:8f:43:
25:a7:c1:34:e6:0f:c2:ab:f2:6e:2a:e9:a7:ed:16:
96:a7:f2:f2:4a:1c:4f:19:43:65:7c:2f:d1:bb:35:
56:6f:55:3a:48:78:d0:06:02:d5:d3:56:16:3c:ea:
17:ef:de:d3:7d:58:08:3d:60:ea:e2:64:3e:7d:03:
8e:4d:85:1e:2f:63:af:ce:66:fa:af:da:09:36:ab:
8f:17:c1:eb:4b:68:72:b9:ef:61:9f:f5:93:9e:8b:
ee:61:80:2a:5f:f0:ca:78:53:f4:ce:7c:0e:c5:1a:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:63:EB:93:F3:74:75:AC:31:3B:37:1C:90:97:D9:3E:76:20:EC
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:cd:f1:c2:44:45:f7:44:3b:34:48:19:ed:b3:e7:9d:c5:
dc:c2:7c:fd:2e:64:b9:f2:ad:5f:60:c0:44:17:95:41:87:e0:
c4:13:b1:46:ca:b0:4e:27:d6:f3:e1:10:0c:d3:a2:f9:e9:a5:
3d:bb:57:70:4c:75:26:ad:50:a4:90:e4:72:9b:b3:07:94:aa:
c7:40:7d:83:ba:e1:4e:e1:5f:67:64:35:93:af:ff:ba:31:ed:
21:62:4a:b1:0c:20:ff:8c:4a:34:4b:68:1f:8b:c3:8d:b5:39:
50:ee:e0:f4:90:bb:19:9c:38:39:13:30:29:c8:6e:d8:32:9d:
90:48:81:e7:ce:28:68:f7:1c:2a:ae:2d:9d:63:97:e0:99:29:
84:7a:33:da:70:28:49:69:0c:98:51:e6:07:4a:e6:96:a8:8e:
9d:d6:d4:06:b3:96:34:21:ea:6e:52:eb:da:8b:57:0d:9f:e1:
ee:bd:0c:a9:12:51:97:ff:22:87:df:a0:90:5e:1e:97:db:ce:
92:b8:6d:46:d2:5a:6b:07:16:3c:c4:5b:0c:d1:b7:ce:9f:ec:
c5:3a:49:e6:8e:57:6c:73:0b:94:9b:84:74:73:2f:fa:b2:ce:
d9:2e:62:53:2e:4a:37:37:c1:1a:0e:09:5b:93:92:7a:57:12:
c6:e1:c9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:38 2026 by rpki-client