Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: SIa4dmPW0rWYyoP8DMnGyJEmGFdGgHGu1fHlJ1jrY68=
Subject key identifier: D2:0A:34:EA:77:F1:79:43:5F:C9:44:F0:3F:4D:0E:2F:BB:D2:77:23
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 01A0EBF9B5DE3EAB77CEA8FC57CAEB5530DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0D31
Signing time: Tue 29 Sep 2026 07:03:25 +0000
Manifest this update: Tue 29 Sep 2026 07:03:25 +0000
Manifest next update: Wed 30 Sep 2026 07:03:25 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: zOP3G8BiwGqgy+Sa6H+mUH1Owsg/yO3StkqvyU5kaUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:b5:de:3e:ab:77:ce:a8:fc:57:ca:eb:55:30:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Sep 29 07:03:25 2026 GMT
Not After : Sep 30 07:03:25 2026 GMT
Subject: CN=d20a34ea77f179435fc944f03f4d0e2fbbd27723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:14:06:ec:f5:56:3d:54:93:4d:9f:a1:5c:
48:d0:b0:96:48:97:ef:c2:3c:17:9a:47:67:60:0c:
82:51:bb:0e:7c:05:e5:44:aa:45:bb:d7:af:78:48:
88:62:ee:eb:81:22:44:92:a2:a5:53:66:64:01:5c:
36:65:ee:0d:02:7a:22:c0:29:b3:14:2e:9b:91:95:
bd:91:b9:a7:ba:5d:dd:43:29:8f:fb:c6:ce:9c:7d:
88:86:e7:c4:87:b7:f5:80:d0:0c:9f:1b:f8:86:16:
f5:26:da:0b:61:9b:b1:27:58:60:0d:f9:c5:ca:c1:
f2:6e:02:58:1f:48:c0:ca:be:7a:d9:62:1b:24:d9:
92:c5:ad:0d:dc:a8:45:99:70:72:42:65:29:15:c8:
c6:b7:52:39:ae:1c:57:e4:b9:85:78:b8:16:a9:43:
6e:5b:8b:ef:ca:3e:61:34:26:13:d8:6d:ba:fb:c7:
8f:9d:49:f7:c6:4f:1e:8e:f9:3b:20:96:ab:29:57:
1a:b5:47:1f:7c:db:2d:58:5c:de:a9:5f:3f:79:dd:
b1:fd:19:44:72:b9:46:5a:98:ab:f9:41:6b:c7:c1:
ec:d9:1c:d4:4c:dd:8c:6e:fb:5f:a5:2f:03:8f:5e:
20:f1:a5:18:fc:43:d3:98:be:bb:d7:9e:bf:b3:8c:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:34:EA:77:F1:79:43:5F:C9:44:F0:3F:4D:0E:2F:BB:D2:77:23
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:63:6b:d7:68:cb:e6:f1:b0:d9:9f:3a:09:3f:d6:ea:ad:b5:
f0:bd:af:cf:2e:1b:0e:c5:29:3e:dd:5f:58:1a:c6:e7:66:be:
18:1e:03:20:db:31:ce:ad:e5:9f:73:a5:cd:40:4a:af:51:93:
94:da:5c:c0:9d:a3:42:29:9b:83:5d:51:9f:8c:16:b0:2e:37:
6d:ca:c9:e9:50:83:79:44:55:47:b2:f4:59:6c:62:ac:05:54:
be:94:43:fe:b7:e6:73:41:fa:49:f7:cb:fd:62:bc:8c:56:fe:
47:e1:b4:fd:e0:80:10:e7:43:68:b3:fc:de:39:cd:f5:c8:03:
f7:51:29:34:c8:d0:7a:cc:2e:10:23:0c:88:c2:32:18:67:a8:
f7:c0:a1:14:9e:e7:51:1b:ef:f8:b6:c5:e5:ff:9e:df:2c:2a:
d8:1f:28:3b:5a:62:38:3f:99:87:a5:b9:55:f1:ea:a8:96:2a:
a6:f9:00:22:25:d7:ec:f6:ce:e3:fd:2d:ce:73:12:9d:a7:d5:
bb:e6:38:74:bf:e3:86:c6:93:c5:2f:5d:4a:29:8c:d4:49:34:
68:c7:73:67:97:27:61:91:b2:12:1d:2a:27:5e:3e:c2:14:da:
df:29:b3:18:56:4d:bf:79:49:55:e4:19:0b:bc:ab:cd:a6:aa:
28:a9:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:22:28 2026 by rpki-client