Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: 9Qu5+qUyAwTaDHtVvveicvEZSiofbVzOLwrxe0csVsw=
Subject key identifier: 1E:5F:17:E3:41:DB:28:1F:4B:C7:CF:39:0A:B7:CD:D8:C4:A3:88:75
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 01A0BD300B4ECBA769BB3134DC311D4056D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 05:00:37 +0000
Manifest this update: Sun 20 Sep 2026 05:00:37 +0000
Manifest next update: Mon 21 Sep 2026 05:00:37 +0000
Files and hashes: 1: 0cXxJ5BrjDm6rReB_iGqGCIVB64.roa (hash: 3z1rKVdZaeGfXgSTMjxBzti3FlrMlqldx9sJbZNGjcw=)
2: dhA92pR8NVPLyW6mzK0XHy6ZgWk.roa (hash: AS2PEdg4UVrkHexwfvP85NaTExj06DZhVZRZTbTSV2U=)
3: kDKCm91Tbaw73dVnmzFp37RT9JM.asa (hash: HF6I1ZAwNCGIhZy2jtfp5rBAqX13BMqlCfTQwytOUo0=)
4: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: CKiglHhQtMTixu1BCZG3719ThV1pgRf6HQj5mt2jEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:30:0b:4e:cb:a7:69:bb:31:34:dc:31:1d:40:56:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Sep 20 05:00:37 2026 GMT
Not After : Sep 21 05:00:37 2026 GMT
Subject: CN=1e5f17e341db281f4bc7cf390ab7cdd8c4a38875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:4d:26:4a:80:4f:7a:62:88:f0:56:ac:04:
50:89:4b:1a:2b:72:51:f8:84:bd:9d:5b:2a:cb:24:
7f:16:b3:33:28:eb:5e:78:77:63:8a:29:60:b5:9a:
a8:ed:6c:9f:2d:42:4d:8c:5c:aa:a6:60:ef:4b:68:
e8:bb:09:93:e3:71:02:72:86:4e:a1:23:aa:3b:98:
1c:55:13:88:e2:0d:b5:91:29:7c:ea:ab:8d:c1:55:
3e:b9:2d:f3:fa:00:8a:0d:2e:12:b8:c6:68:3d:7f:
4e:8d:97:42:03:00:18:16:5f:0b:3c:c2:ef:d6:40:
38:23:3c:29:bb:59:df:aa:71:6d:ac:75:fc:70:53:
f1:ef:96:bd:f8:50:b1:db:42:df:6f:aa:a4:6a:82:
fb:eb:9d:d1:a0:53:e9:53:e0:ab:dd:3d:30:3b:d1:
34:22:ad:46:1f:1f:13:43:5b:10:53:0b:3e:f1:73:
37:2b:7e:94:39:c2:36:bf:b6:f4:9d:0e:f8:0e:76:
b6:2d:43:fc:81:ca:ac:95:d0:4d:8b:0c:37:6b:86:
9e:66:be:72:30:3d:23:c6:91:2c:6c:da:53:d7:06:
25:d5:97:66:a9:d7:de:54:ef:1b:ae:be:d5:d4:b9:
f6:df:84:9c:c8:43:14:11:24:3f:29:24:40:ae:0a:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:17:E3:41:DB:28:1F:4B:C7:CF:39:0A:B7:CD:D8:C4:A3:88:75
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:d5:4c:2d:1f:fd:b5:38:5f:78:3f:39:88:e9:f2:fd:0c:69:
b4:2f:6e:6d:d1:6e:ee:fe:89:1c:14:a0:2f:c9:32:ba:01:4c:
81:9d:e6:47:6b:7f:54:7a:07:ff:cc:90:d5:00:4e:2a:4a:47:
2c:02:29:45:22:37:7f:92:32:9a:4c:aa:74:60:01:8c:6a:1b:
bd:2a:f3:1c:9a:8a:dd:bd:ff:5b:9a:3c:aa:09:e1:ae:09:4c:
51:01:85:ca:c4:53:a7:43:54:74:9d:3b:85:58:4d:80:a8:c7:
ad:7b:27:db:30:3a:7e:57:cf:27:da:cf:0f:5c:be:e3:6e:f5:
52:43:1f:51:f9:d1:1b:f8:ed:56:f2:ba:b8:a8:bc:2f:13:66:
73:50:fb:2d:2d:b7:83:0b:63:26:0b:c8:58:52:53:e6:dd:55:
4f:56:d3:8f:a6:32:d2:ac:55:ba:38:26:d0:94:36:8e:90:3f:
b5:3d:75:fe:a3:eb:07:78:b8:0c:0c:22:72:bf:44:f1:b8:2e:
02:b9:ab:d2:00:1a:a4:cf:01:a8:b9:c5:da:eb:e0:a2:78:87:
8a:93:46:4f:88:95:c5:4e:bb:74:25:a0:bb:0d:22:7a:22:8b:
54:ac:22:e7:85:37:f8:4e:34:66:46:27:77:48:6b:02:65:98:
67:98:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:44:53 2026 by rpki-client