Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: RP7lriQgukI1iIhTx3kYiK40InNY/rSveRNmRP5ZJ/U=
Subject key identifier: CC:EB:9A:18:1C:E6:B4:85:F9:28:67:D2:E0:C3:28:C6:95:24:94:10
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019D9A3DFA0911BC3FF2555BB6DC9579F22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0B79
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Sat 18 Apr 2026 07:00:45 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: TR2sY4iv6IyOKMMyRYf6GC4RS1Pef0wCxMkQjDQN5GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:fa:09:11:bc:3f:f2:55:5b:b6:dc:95:79:f2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 18 07:00:45 2026 GMT
Subject: CN=cceb9a181ce6b485f92867d2e0c328c695249410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:3c:dc:ac:20:4b:92:e9:94:23:66:b5:5b:
e3:00:55:44:66:8e:65:43:a8:c8:7e:c8:95:3c:a4:
d9:6d:4b:25:6c:6e:9c:13:59:ae:85:c5:ff:be:1c:
c2:c1:10:ad:0c:9c:7a:3d:5a:d6:b2:d1:a8:69:1e:
2c:37:01:25:d1:4f:be:c4:fb:15:09:22:65:00:42:
b7:07:eb:72:e6:d5:bd:0f:13:54:e0:b5:76:78:40:
92:6c:a0:1d:a0:4f:56:ac:3c:93:49:22:1d:74:82:
5d:62:4a:2f:f2:2b:af:fb:39:f4:ce:86:0e:1a:23:
7b:8f:3b:f9:61:e8:43:a2:69:5c:8b:ff:66:92:8b:
12:2a:b9:fe:76:d6:78:ef:42:11:76:97:44:78:a4:
07:ca:5f:f5:4c:e2:93:76:e4:48:ce:e9:70:d8:0b:
f4:00:7a:0b:b5:3c:48:c5:a9:bb:83:eb:d0:3c:7c:
b1:9b:48:bc:60:fc:7f:81:fe:7a:f1:c5:dd:dc:c2:
25:1e:31:d4:3b:c4:a9:22:2d:5c:5d:ac:da:c2:ba:
37:f7:e3:7c:54:17:46:dc:b3:1a:35:73:1d:6d:80:
e1:28:8a:73:1e:f5:c6:b0:20:df:84:d5:64:ff:62:
50:98:c4:46:3e:73:bc:f1:8a:00:c6:c3:9b:a5:b9:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:9A:18:1C:E6:B4:85:F9:28:67:D2:E0:C3:28:C6:95:24:94:10
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:33:c7:d5:93:5b:90:80:11:f3:47:95:6c:0d:7c:75:28:
df:10:ff:99:00:fa:be:3a:4e:93:a8:f7:d4:34:da:dc:d7:10:
7a:96:55:cb:43:ad:4b:ee:2b:e9:6e:57:6d:48:a3:3d:9f:2d:
2c:9e:38:6b:01:d8:4d:60:5d:55:95:3e:37:77:26:c4:86:01:
5a:f4:d6:e5:cb:28:e2:2d:3b:08:2e:4b:e5:f0:88:50:f9:b7:
cc:9b:65:13:11:6c:bf:98:46:d1:30:53:05:14:c6:10:1c:89:
26:b8:bf:62:65:6a:27:56:88:7a:e0:4b:ae:73:c0:75:b2:5f:
b6:11:62:44:14:af:ad:09:8b:ae:07:36:00:26:1a:19:b1:27:
21:72:aa:d3:41:97:12:9b:27:28:d9:5c:5c:49:ce:08:6c:47:
2e:02:49:ec:8b:7a:c8:11:84:c1:c9:0d:5c:a4:05:52:d1:4e:
c2:4b:30:83:85:f4:2d:b8:5c:9b:d2:75:f7:fa:49:06:28:95:
36:db:ae:5d:60:07:87:09:e6:a9:9d:9d:2a:b8:85:38:3b:d5:
eb:d6:e3:46:2d:7e:1b:a2:03:83:b5:7b:60:9f:a3:96:a8:bb:
43:52:20:9e:1a:d8:bd:7d:88:d8:05:76:66:8b:1c:17:3b:8c:
db:92:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:54 2026 by rpki-client