Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: vegft17FJa/gxk/qcDWnZQaXfHB6gk2WDXJtgWa+mwI=
Subject key identifier: 24:46:A4:8F:05:67:06:96:18:CB:69:C8:CC:51:44:33:61:EB:16:1F
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019FA0DFDD12BBB67EBED3A924DA0D941ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 115D
Signing time: Mon 27 Jul 2026 00:00:53 +0000
Manifest this update: Mon 27 Jul 2026 00:00:53 +0000
Manifest next update: Tue 28 Jul 2026 00:00:53 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: re/KNF1cicgpOCLJuy7OO00jlzKuX33c4MwuKIveNpw=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:dd:12:bb:b6:7e:be:d3:a9:24:da:0d:94:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jul 27 00:00:53 2026 GMT
Not After : Jul 28 00:00:53 2026 GMT
Subject: CN=2446a48f0567069618cb69c8cc51443361eb161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:d9:2f:43:98:10:c6:4a:4e:d2:61:c9:b8:
fe:6f:08:f5:e9:1a:33:ef:b4:7f:13:83:ad:45:a3:
1e:c7:9c:75:62:6b:50:0f:d6:ec:cf:0d:7a:91:1f:
4d:ef:2d:a4:12:a4:5b:b5:7f:d2:1e:1c:5f:a1:96:
6f:5a:51:b1:83:1a:21:bf:69:31:6a:b1:85:8d:11:
c3:ab:6c:cf:3a:9a:aa:c8:32:d2:fc:3c:b7:ac:68:
12:b2:55:aa:5b:55:72:54:27:6b:a9:2e:ab:d7:2e:
ed:e8:ff:ae:27:01:9e:9a:07:e8:cf:66:e2:dc:7d:
a2:79:16:22:7a:b6:2f:08:6c:0e:86:c7:d1:b8:b5:
3e:86:46:be:59:b5:a8:84:84:80:fc:bf:dd:8f:e0:
3c:0a:1f:bd:41:a7:fe:69:35:a7:94:fc:c0:7d:89:
39:2c:af:d5:9f:a8:02:ba:ea:a0:ec:80:fc:c1:d0:
19:4a:ee:a5:e6:bd:89:01:46:eb:43:98:59:76:07:
5f:cd:ec:7a:30:db:10:35:ca:bf:26:71:48:60:fd:
87:0a:c7:74:fc:3f:12:3e:95:eb:b6:7f:4a:be:c9:
d3:5e:6d:2c:71:3e:76:8a:96:06:52:ad:5a:b5:e3:
ae:26:1b:54:64:69:97:0b:6a:7b:8d:f3:b5:8f:c3:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:A4:8F:05:67:06:96:18:CB:69:C8:CC:51:44:33:61:EB:16:1F
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:2a:9a:49:69:8a:ca:40:f3:de:86:c0:56:63:f8:23:8c:
40:c4:4d:83:33:d8:3b:bf:9b:88:85:83:0f:9d:89:99:7f:40:
11:b4:aa:5d:b3:40:34:ca:81:84:8b:9b:02:8c:fb:fd:bf:c0:
2b:04:d1:45:dc:d3:7b:7c:3b:71:78:b3:93:98:dd:e4:be:78:
0f:0d:2d:a2:fc:04:a5:56:62:63:d8:7e:9d:a6:be:04:19:6e:
87:c3:1c:a2:a5:19:a9:4e:fa:51:e1:0a:a8:c9:e4:3a:db:1c:
88:a0:02:9d:27:7f:c6:39:aa:93:b7:6c:e6:c5:56:f0:60:82:
77:f2:06:a1:28:0c:fe:d9:50:f5:25:45:9d:f6:23:30:68:d2:
a3:78:44:33:3e:5f:f0:f6:36:54:02:35:34:e5:c9:1f:88:22:
c8:d0:b3:13:3e:9b:65:e9:14:57:97:01:c6:3a:69:08:11:a8:
1b:c3:29:db:f2:86:9c:b7:fb:68:15:aa:81:b9:20:eb:54:8e:
9a:e7:fa:d0:3e:d6:68:dc:d6:64:89:65:54:d8:c3:16:0f:fe:
81:c0:00:f9:ca:79:9f:8b:2e:1f:21:1e:45:45:3b:b4:67:ea:
3c:04:23:1d:b5:7c:54:6d:5a:36:73:8d:35:4c:09:51:19:17:
95:97:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:37 2026 by rpki-client