Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: /oqoGtA9WJb5XFeSA5fjD3tJrqT3xyYd4xJ+C8HjZVc=
Subject key identifier: F3:19:89:34:D0:9A:F5:2C:A8:53:5E:E2:EC:33:11:37:75:A5:DF:FD
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 01A0889ECBE0D5B99E808E4D396E661E78A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 11D5
Signing time: Thu 10 Sep 2026 00:01:43 +0000
Manifest this update: Thu 10 Sep 2026 00:01:43 +0000
Manifest next update: Fri 11 Sep 2026 00:01:43 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: 0Z51dO5Jp5Z9S2IQr+S+l55nfzZQvPyJmStG5f6qrRc=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:cb:e0:d5:b9:9e:80:8e:4d:39:6e:66:1e:78:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Sep 10 00:01:43 2026 GMT
Not After : Sep 11 00:01:43 2026 GMT
Subject: CN=f3198934d09af52ca8535ee2ec33113775a5dffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:77:a1:92:5c:f9:89:c9:97:c7:0e:3d:3e:
8a:a8:af:79:94:9f:f7:10:c6:38:cb:e1:2f:cb:55:
0a:eb:00:9d:c3:45:af:73:49:8a:e7:06:05:04:2f:
2d:a0:7f:79:7d:5e:18:33:90:e3:fb:20:2b:90:1f:
5c:b5:03:f6:1b:a7:fd:d7:53:19:73:04:2e:6d:d8:
08:61:fc:0d:b6:97:2f:9e:3e:ab:08:f7:e9:da:69:
d8:6f:f4:62:c1:1c:a4:6b:b6:74:0c:a1:f1:b9:58:
14:24:16:52:1f:3b:dc:83:f0:3a:f6:ec:d7:23:14:
a9:a6:33:be:7a:42:39:cc:50:a0:10:e4:fa:21:e0:
b4:fc:f9:92:88:76:5d:7d:d9:08:eb:db:c7:30:1b:
4f:8e:63:ae:bc:b9:3d:28:fd:33:98:e4:4b:2f:9b:
c9:29:3b:78:92:ee:5a:56:8f:be:65:e0:30:32:d5:
9f:f5:67:a2:8a:96:40:89:7a:fe:7b:91:e9:93:38:
46:81:10:5a:aa:70:6e:d9:a6:97:e6:cd:2d:3a:f4:
71:4f:26:bd:8c:d9:93:99:a8:0f:07:cb:99:58:95:
11:a2:e8:48:14:bf:83:de:df:64:5d:e1:f1:c4:40:
71:64:02:dc:87:9d:b7:6c:7e:af:2c:88:9c:71:7f:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:89:34:D0:9A:F5:2C:A8:53:5E:E2:EC:33:11:37:75:A5:DF:FD
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:73:11:bd:ab:40:0c:af:db:dc:b1:39:2b:ef:db:3d:e5:f1:
f9:e4:e6:94:48:eb:66:8b:c7:c3:fe:9c:7d:5d:e7:c1:fc:b1:
f9:a9:8a:71:92:b0:7a:59:d0:c4:d9:2a:e7:b9:22:34:cc:85:
68:00:37:82:8e:35:3a:fc:be:25:63:65:d0:3e:6b:ca:03:ad:
5e:98:f1:3b:97:78:1c:ac:fc:a4:4a:7b:ce:45:cd:72:12:43:
af:94:84:e1:dd:1f:f1:45:0c:18:74:7e:e2:87:c7:33:b2:08:
58:c1:02:15:d8:7e:7b:02:3b:e2:db:19:ff:1b:85:d1:6f:ae:
78:07:72:2e:01:3e:72:12:0a:52:a4:f6:21:ce:11:82:f3:63:
3c:34:ef:6e:3b:1c:3f:40:a4:63:05:86:72:f4:5d:8d:88:e9:
f8:74:d0:6c:fa:20:b6:f3:88:44:06:f7:f5:e3:bd:f0:4e:8a:
1c:75:73:01:ec:e1:8e:b9:21:0c:b0:b4:73:55:45:d0:3d:7c:
10:25:f5:1b:fc:ee:9e:d9:ff:2f:6a:2d:89:f9:f8:b3:63:dd:
cc:80:24:50:22:4b:15:ce:1d:83:eb:5e:2c:cd:5d:e6:9a:06:
9c:c1:e9:1d:68:5a:74:ab:b7:a4:52:73:c0:e7:eb:32:f9:a2:
2a:80:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:16:29 2026 by rpki-client