Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: ocyUhTByObk2TddmBuBPeQwpAB82aSEgkBzgDbJD5Vs=
Subject key identifier: 7D:85:BF:66:B2:4F:E6:33:D2:52:F5:B2:6E:85:78:54:DD:8A:8F:2B
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019ED3189F97FB856DABB93965A484385158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0C1B
Signing time: Wed 17 Jun 2026 01:01:06 +0000
Manifest this update: Wed 17 Jun 2026 01:01:06 +0000
Manifest next update: Thu 18 Jun 2026 01:01:06 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: cnqnzt6tB1aFR+MHMBUwtr7gWtbmOHj0KWT44g3q76w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:9f:97:fb:85:6d:ab:b9:39:65:a4:84:38:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Jun 17 01:01:06 2026 GMT
Not After : Jun 18 01:01:06 2026 GMT
Subject: CN=7d85bf66b24fe633d252f5b26e857854dd8a8f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:73:73:55:ea:9a:e4:1f:ca:7c:b6:9f:9e:
5c:13:37:b3:fd:7f:0f:56:30:c9:2f:a5:de:0d:7c:
40:26:10:4b:6c:53:bf:18:3a:0e:91:d2:64:40:c2:
85:f4:5f:09:36:10:1a:18:57:38:22:9f:c0:a7:02:
c1:26:14:3a:bc:7d:d2:ce:9f:43:33:55:7f:25:09:
bd:fe:8e:2e:13:58:a4:c9:67:ad:7e:bd:81:0c:d7:
7a:22:8c:60:dc:76:3b:46:3e:c7:fc:08:7b:c8:d9:
7e:93:14:b6:6d:8c:0d:46:fb:a7:11:b1:06:2c:3e:
24:aa:a9:2f:3d:ce:77:73:bb:52:ba:89:7f:ff:37:
6d:e6:45:c6:08:3b:8e:4b:81:56:b1:96:ea:67:8e:
7e:8f:fb:81:47:85:ca:53:7c:fb:70:c0:be:e5:fe:
4f:ac:b2:67:0e:a0:86:ae:54:0f:bc:28:b7:b5:1a:
80:9e:b4:d1:b3:7e:c3:3b:09:df:d6:dd:d5:bf:ac:
af:48:07:15:3f:91:87:98:28:4e:dd:61:5b:f1:00:
41:86:24:e5:9e:12:03:81:27:33:9a:1b:1c:e6:fa:
43:05:84:9a:e6:e5:09:a3:92:57:07:64:3b:c4:00:
75:3e:6c:f4:ac:ae:91:b2:a1:7c:3e:bf:32:81:a5:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:BF:66:B2:4F:E6:33:D2:52:F5:B2:6E:85:78:54:DD:8A:8F:2B
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e8:3e:13:cb:c2:dc:14:1c:ab:99:91:04:a0:85:c3:61:a1:
57:d1:c4:c0:70:7f:12:72:e5:71:20:f6:a6:06:57:b7:8b:a2:
a2:12:b1:d7:b3:b3:63:f3:e4:34:f9:1a:5c:f9:cd:a5:5c:a1:
1e:47:38:f9:94:f4:13:32:37:58:3f:85:02:9b:6b:7f:ac:79:
85:7c:fb:25:01:41:89:99:d6:67:b2:71:57:ad:65:f0:9c:e9:
a8:88:97:55:7a:4f:e5:b7:69:59:27:5c:28:71:3c:d9:46:5e:
1b:a1:51:52:aa:bf:ee:dc:0d:93:e4:5f:de:86:d7:ce:91:80:
cb:33:cb:9b:bf:14:88:14:2b:f4:67:41:15:06:1d:c8:35:fe:
26:64:f7:9a:b0:3e:d9:89:93:4a:6b:10:2b:7d:4d:b8:24:e9:
e7:84:ee:e6:f9:6f:a2:a9:ec:56:a6:de:68:73:95:52:6f:f9:
1c:80:66:3b:ff:61:64:ff:27:b1:2c:ea:ac:e4:9f:5e:cb:9e:
1f:f2:35:47:c8:7e:ab:45:26:82:ac:5d:25:74:26:3b:52:35:
b1:a4:e7:8c:e3:ed:d0:30:bc:7c:7c:0d:ea:eb:33:10:14:42:
c4:8c:f4:e4:34:bc:59:c1:dc:dc:c0:1b:88:42:43:4d:bc:14:
ce:56:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:19 2026 by rpki-client