Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: bqBWZHCg2C3fpXh+0WTGKPdYBcURr5AGKlamuGATu7w=
Subject key identifier: 51:79:06:35:E4:20:23:65:6C:BE:15:3E:4D:DD:8F:CD:C5:5C:FD:AC
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 01A17BF2F9D3AC9DDCE36887527ECF8CF36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 1253
Signing time: Tue 27 Oct 2026 06:01:23 +0000
Manifest this update: Tue 27 Oct 2026 06:01:23 +0000
Manifest next update: Wed 28 Oct 2026 06:01:23 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: Z5f3lGMaHFRaagBqIlkxIT61FRDxh5xUO3sGUB8rSNQ=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:f9:d3:ac:9d:dc:e3:68:87:52:7e:cf:8c:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Oct 27 06:01:23 2026 GMT
Not After : Oct 28 06:01:23 2026 GMT
Subject: CN=51790635e42023656cbe153e4ddd8fcdc55cfdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:19:53:c4:5e:84:63:84:52:5d:34:5c:ca:
c2:57:2b:52:0e:d0:03:fb:12:9d:be:0a:d0:d4:e0:
5b:e1:e1:e6:cc:eb:57:93:8c:b5:9e:76:90:98:18:
4b:1f:73:bd:f4:ba:97:7d:54:56:94:a3:fc:dd:db:
0c:5e:1b:1b:10:b2:e6:23:7c:16:b0:56:2a:00:fd:
82:39:31:b5:e5:94:f7:e8:e3:4b:78:46:cf:37:a2:
19:be:f6:95:0a:bc:ee:fb:6a:18:c4:61:32:9e:aa:
f5:ef:a0:d2:4c:8f:cd:8a:5d:b1:62:d7:9d:52:37:
56:10:5d:f2:94:c0:45:24:5c:3e:62:52:05:bc:9a:
3e:4c:21:75:1d:2e:80:74:35:0c:75:57:4d:48:05:
b9:34:3a:74:1d:ad:ad:b6:cf:bb:76:e5:58:c4:44:
64:1b:dd:85:a7:a0:28:05:a9:29:de:8e:69:3f:be:
2c:ff:f0:3a:fb:a0:5c:a3:33:e4:d2:f0:4c:22:f7:
41:40:9a:37:f3:7b:79:64:56:06:25:fd:4d:08:a3:
c9:f3:87:5f:00:7c:5e:1d:e1:cf:94:62:a8:e9:f5:
92:3f:6c:5a:f5:9a:5c:3b:c8:7c:5e:b6:af:5f:98:
90:73:32:cf:9c:05:bd:91:ac:2e:92:49:9b:f2:e6:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:79:06:35:E4:20:23:65:6C:BE:15:3E:4D:DD:8F:CD:C5:5C:FD:AC
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:90:1a:b5:5f:93:4a:90:4b:07:ec:2c:a0:82:ca:43:39:07:
29:ab:d4:5a:f1:06:c2:67:fa:b4:f5:cf:e7:c6:e2:63:68:9f:
ea:9b:4d:c7:4d:a5:13:a0:a9:c3:66:47:82:d4:5a:72:70:59:
8e:b6:57:5d:ef:de:d5:b0:34:3d:0a:1c:7d:63:22:eb:ce:f0:
b8:cc:2c:44:fd:8f:76:f3:c7:c9:48:8d:ab:a2:f6:2d:dc:85:
68:3b:5b:58:7a:79:e6:65:8a:c8:2e:0e:f0:72:8f:41:da:30:
e8:6a:92:e2:70:fd:2e:31:94:04:e3:85:a2:96:a8:40:c4:e3:
c9:ad:1b:07:c2:a9:d8:94:ea:06:79:88:9b:67:1a:80:c1:83:
17:52:1a:53:9a:9b:c3:e9:7c:32:95:62:a5:cc:50:e5:ce:f5:
65:49:6f:bc:4a:8f:fb:35:54:44:8a:da:df:9b:3d:b6:e3:62:
35:9b:43:38:d7:8b:4d:92:38:c4:1a:89:15:32:9c:07:08:35:
4f:02:95:67:e2:e3:85:2a:03:14:b9:3f:f5:fd:f5:5b:ab:83:
ba:de:25:f4:66:d3:aa:d5:68:23:51:f1:8e:2d:66:bd:b9:87:
7c:c7:b4:ec:34:64:be:02:11:88:ef:9f:f4:84:68:64:cc:65:
99:95:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:45:38 2026 by rpki-client