Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: 34ushNMWfXD8Nxp8jG9vruGE0wec9GLy4361wEQAsTg=
Subject key identifier: 14:72:98:CF:52:01:F2:B5:26:2D:92:3F:2B:49:72:AD:99:07:B6:17
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019CE3DA46A8548C1B75A028D94FFF4F21CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0FF2
Signing time: Thu 12 Mar 2026 21:00:58 +0000
Manifest this update: Thu 12 Mar 2026 21:00:58 +0000
Manifest next update: Fri 13 Mar 2026 21:00:58 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: +6dSFQRwgWNZW5ZTIEF9mb67Dgz+41mNCVDGPUldjug=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:46:a8:54:8c:1b:75:a0:28:d9:4f:ff:4f:21:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Mar 12 21:00:58 2026 GMT
Not After : Mar 13 21:00:58 2026 GMT
Subject: CN=147298cf5201f2b5262d923f2b4972ad9907b617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:3e:44:d4:e2:52:78:1f:89:07:ba:93:28:
c0:6d:ad:ca:57:20:6f:72:90:0e:77:86:f3:d2:d1:
3c:16:7f:ce:32:94:d8:4b:71:be:40:e0:cc:5d:14:
fe:32:7a:2b:59:27:96:72:eb:24:9b:90:09:5a:c4:
24:dc:5c:19:6c:52:1b:d5:bb:4f:98:a2:a7:17:fd:
65:e6:34:86:84:82:d9:1c:86:e2:6e:9e:e8:89:76:
76:12:5e:a9:09:8c:09:1c:9a:87:ed:ff:9d:11:d1:
a9:e3:ee:03:94:3d:86:da:1c:4f:af:3d:51:45:7a:
fb:91:7a:46:db:38:ed:54:f9:b5:68:a3:47:38:e0:
ac:16:22:aa:79:0e:b4:bf:dc:a8:b9:26:07:ed:77:
03:96:3a:da:8f:2c:1b:73:cf:ca:df:36:d9:5d:64:
b7:9b:c1:48:a9:13:2f:71:9f:ef:39:a9:4f:ff:ec:
de:52:ba:32:c1:f8:96:ec:21:49:85:c4:5a:cd:0b:
5f:27:49:1a:6d:23:23:dc:c5:a0:cd:89:15:7b:9a:
59:6d:f8:39:da:81:8f:94:31:ef:cb:57:66:87:c3:
c5:fe:e0:c8:c7:06:64:3e:88:54:e6:6a:fa:44:ef:
15:d6:91:33:7e:ab:95:fa:5d:48:4d:31:ff:68:ea:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:72:98:CF:52:01:F2:B5:26:2D:92:3F:2B:49:72:AD:99:07:B6:17
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:99:0e:6d:15:82:ed:1b:84:da:4f:da:c0:ff:a8:a3:ca:9b:
d0:27:b4:1e:cd:63:fc:c8:9a:be:f3:ec:92:57:f8:09:53:c8:
44:10:6c:68:dc:3e:2d:d9:c2:ff:3d:f4:f7:d7:7d:49:d5:35:
78:d4:6b:bf:3c:cc:0f:2f:87:c2:6b:dc:d9:2c:47:7a:6e:25:
6e:30:fc:60:33:18:07:39:34:b7:91:98:0f:fd:44:0a:79:97:
61:83:74:f8:a8:01:0d:32:d9:b9:92:cb:d4:cb:24:be:45:31:
e1:e6:3a:a4:67:40:c3:05:f1:a1:1e:18:95:76:a1:6d:ca:40:
66:72:90:c3:2c:3f:2a:9f:ba:64:2a:4f:df:06:22:a4:80:82:
2f:06:2c:57:da:87:4f:8f:6e:08:14:6e:c2:51:77:f2:99:e1:
00:44:58:3d:c3:1f:a7:f1:19:b2:d1:86:e3:3b:01:84:2c:55:
6c:fc:53:53:c4:f5:aa:c2:97:0a:9e:7c:6e:80:0e:1d:50:36:
f1:a4:72:57:1f:76:05:d0:7b:71:e5:de:e8:ef:75:d8:fa:cb:
0d:67:5e:dc:cc:2e:0b:e8:63:3a:ab:a0:73:91:e9:c7:8b:50:
b5:95:81:52:8d:73:84:0b:3c:57:53:bb:09:03:9c:e6:22:77:
c1:6f:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:31:33 2026 by rpki-client