Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: S0oc/DRT5k9js4xCGDyRUI0vgjTMnL0OloVzhcZ7GoQ=
Subject key identifier: D4:40:15:4A:9C:CF:E8:36:E4:E3:E1:C1:38:CE:8F:F8:64:94:C0:EB
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 019D39407B69A0E961889326228A331E30EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 17E5
Signing time: Sun 29 Mar 2026 11:00:20 +0000
Manifest this update: Sun 29 Mar 2026 11:00:20 +0000
Manifest next update: Mon 30 Mar 2026 11:00:20 +0000
Files and hashes: 1: od6HTbRFhmo0OmtuAcTadyxqJ_o.roa (hash: SE94fynzE1e+OXZNnakIBjjoFgfDLh4YMFdsKZ0xbjs=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: 7n6Qgp4k08ySh/aJYJHcoGlyXG4WbXhyfln7iiKnw3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:7b:69:a0:e9:61:88:93:26:22:8a:33:1e:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Mar 29 11:00:20 2026 GMT
Not After : Mar 30 11:00:20 2026 GMT
Subject: CN=d440154a9ccfe836e4e3e1c138ce8ff86494c0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:02:5f:6a:77:23:ac:63:e0:2e:24:9a:4c:
20:f4:b5:60:c8:9c:e0:52:ad:75:39:35:e1:66:85:
41:d9:25:97:f5:35:b3:bd:7e:d8:a0:87:79:1b:2a:
8e:01:ee:7b:c1:07:3d:92:04:98:2d:a2:02:fb:9d:
5f:1a:be:97:86:99:78:27:6a:33:d8:ce:a2:1a:43:
7c:93:3e:81:83:2c:b3:9f:ef:ee:1a:91:7b:fe:67:
df:63:a0:5f:1a:e4:e4:3f:38:cd:dc:ab:b4:16:70:
3b:ac:7e:b5:8f:ba:63:6e:d2:a8:55:34:cc:1e:93:
ff:e0:3f:75:f5:bb:7c:5f:c1:49:0c:52:e3:71:cb:
94:fe:15:d6:00:c6:a4:87:c5:cd:59:d9:a9:9f:79:
3b:38:90:70:35:62:bd:2c:6b:2f:6b:b4:41:cd:54:
28:fe:21:9f:33:9f:67:52:b8:4c:68:ba:f0:b9:c8:
f8:f5:48:1f:26:30:de:33:9c:70:d9:a8:9c:6e:06:
66:69:99:41:42:c4:33:e9:a2:ea:74:cc:61:47:6a:
ee:f5:d7:2d:8c:75:c7:5e:20:0d:a8:67:27:7e:b9:
c6:65:b5:c8:d5:93:f5:60:4d:96:71:f4:8f:c6:3b:
8b:77:92:f5:9e:26:11:44:f8:8a:df:3f:bb:5c:dc:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:15:4A:9C:CF:E8:36:E4:E3:E1:C1:38:CE:8F:F8:64:94:C0:EB
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ed:64:87:18:88:41:8a:fd:3f:4e:d7:04:57:6d:ad:02:48:
4c:24:51:09:13:7b:65:86:f2:4f:86:74:04:dc:a8:34:86:0b:
b8:cc:f9:c1:fd:67:ac:4c:64:42:3a:eb:ab:bd:10:60:ec:4d:
74:80:9e:fd:d6:04:da:12:49:50:f6:4b:eb:74:b4:28:a7:c8:
0a:e4:78:aa:58:fb:ee:29:af:6d:8d:12:05:db:90:92:e0:6c:
4b:80:21:c1:1e:94:fd:a3:2e:4d:26:56:f1:21:4c:95:cd:09:
2f:04:70:8c:90:3e:4c:f6:21:94:44:6b:f2:9b:22:de:1e:fe:
71:cd:bb:89:95:4e:2e:70:fd:d2:9e:3f:cd:a9:1c:56:9a:86:
de:17:da:ac:13:27:3d:cc:fd:5c:a0:1b:af:76:2b:fb:f9:19:
c7:ce:ba:ea:9c:9e:18:b6:3d:29:d9:7c:13:3a:7e:ad:9c:d4:
57:10:d3:86:39:01:d5:8d:74:a0:55:5f:ce:25:74:cc:ad:17:
9a:63:f7:21:b2:d8:a1:86:fb:9b:16:2e:b7:4c:97:75:e0:08:
20:b7:8e:4b:bc:7e:10:50:70:07:1d:04:00:9d:09:10:ea:d1:
37:34:af:a0:94:28:9f:b7:60:4e:b0:72:4b:51:ce:01:5b:2b:
54:8b:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:48 2026 by rpki-client