Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: MbI2PgvirQIcvJI//BCGdYnY6jFx/YZroxAYgu9el2E=
Subject key identifier: 6B:7C:64:38:93:FD:B5:FA:AC:4A:CC:B8:F9:29:87:01:FC:2D:76:3D
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 01A1A74B933A881E4F6F15FA4E5B76AC2E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 1AE3
Signing time: Wed 04 Nov 2026 16:01:50 +0000
Manifest this update: Wed 04 Nov 2026 16:01:50 +0000
Manifest next update: Thu 05 Nov 2026 16:01:50 +0000
Files and hashes: 1: 0cXxJ5BrjDm6rReB_iGqGCIVB64.roa (hash: 3z1rKVdZaeGfXgSTMjxBzti3FlrMlqldx9sJbZNGjcw=)
2: DcdSJe_ojMmOF7vVB0gDe1GQPlI.roa (hash: oKVTHzK5lAE8WSs7v2rxgohHNOq60DwEv/a5x+1uHf0=)
3: kDKCm91Tbaw73dVnmzFp37RT9JM.asa (hash: HF6I1ZAwNCGIhZy2jtfp5rBAqX13BMqlCfTQwytOUo0=)
4: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: 3U7R2M6q9NyCD9VF/QSUPARuYJSqCVwe/LVG0MYv0IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:4b:93:3a:88:1e:4f:6f:15:fa:4e:5b:76:ac:2e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Nov 4 16:01:50 2026 GMT
Not After : Nov 5 16:01:50 2026 GMT
Subject: CN=6b7c643893fdb5faac4accb8f9298701fc2d763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:40:8b:44:4c:6f:3a:78:53:90:56:d9:2e:
91:7d:05:9f:b4:a2:24:2e:d2:97:77:ca:57:ad:2f:
d3:6e:7f:8c:f7:fb:82:19:36:af:f3:40:6a:e3:2f:
bc:64:a2:51:1e:d3:4d:2d:7e:07:de:64:6a:1f:cc:
2a:67:0e:a2:47:7d:ab:40:a1:0b:ba:f1:93:4c:bd:
22:0f:86:43:26:4f:c7:76:f3:66:95:fb:61:8e:5d:
60:eb:21:9b:77:8f:a7:08:39:6c:1f:3c:18:9a:46:
bc:c0:06:0c:a9:4b:78:77:48:1b:3c:a8:34:04:af:
94:49:51:f5:65:8f:9c:72:91:ce:0b:a3:fd:3f:51:
bd:c5:42:52:4a:df:1d:df:52:f0:12:d9:47:1b:79:
26:b4:58:49:a3:98:8d:b4:3a:4a:f5:2e:6b:16:7c:
80:f6:a4:f8:7b:06:ae:eb:dd:7c:4c:7d:1f:f5:d7:
f8:94:5b:4d:7c:12:54:d3:de:38:10:fe:70:60:af:
2f:22:7a:a2:b8:10:b5:fc:1c:ad:30:30:0b:ac:aa:
8d:bb:47:a0:9e:2a:42:bf:ef:11:4d:11:87:e1:22:
8c:aa:29:8e:3a:f8:83:c9:2c:68:50:64:47:f8:07:
ab:09:f1:54:08:43:58:2b:0a:4f:ff:55:64:f9:1e:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:64:38:93:FD:B5:FA:AC:4A:CC:B8:F9:29:87:01:FC:2D:76:3D
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:65:39:0a:95:10:96:03:6f:0f:87:16:54:e9:66:2a:14:c0:
ed:56:d1:a8:0c:5e:8a:1c:e7:f1:6e:18:ef:4a:42:2f:4b:e5:
64:8c:11:99:5d:0d:dd:f6:9b:df:36:0e:86:73:6e:ce:71:e5:
91:1b:86:2a:33:56:31:d6:c6:99:89:8e:c2:84:cf:32:92:09:
b8:aa:5b:67:e8:b1:cd:73:4d:27:cd:53:62:33:c4:51:ac:e8:
d8:7d:80:00:3d:3f:88:06:22:21:db:83:27:53:d0:dc:fd:82:
6f:32:3e:60:f4:53:f9:75:c2:05:3d:dc:14:4a:52:52:de:f5:
f7:34:f0:06:1c:f6:b8:c5:54:78:4d:f3:35:2e:f1:a0:db:2a:
f5:67:4a:55:18:73:46:ee:d1:fb:32:fa:95:5e:04:b5:9a:5d:
6d:83:71:b1:c4:d3:ce:d7:5b:54:cc:df:6a:81:9c:e2:53:9f:
36:1c:94:7a:6e:b7:32:b4:0d:8e:dc:36:c7:87:fd:1e:6b:d9:
58:52:3b:1c:0a:d7:c7:f4:da:99:6c:43:0c:01:07:51:a8:61:
3e:dd:08:80:b9:05:23:fa:bf:0e:6b:01:75:65:45:65:29:02:
5e:f8:2f:6f:c3:e2:05:74:b3:56:29:4c:74:8b:ec:4b:6a:7f:
6d:5f:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:36:31 2026 by rpki-client