Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: pjwlLRhv0e2Cjpn+k+Of3s7btmSirUB77CTGO5MycVQ=
Subject key identifier: F9:DF:D1:A9:AD:6A:9A:D1:C4:F4:76:4C:B1:56:A3:5A:A2:2B:87:6D
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019CACB4B74C7718D6964115A8AE7CFF4B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0AFE
Signing time: Mon 02 Mar 2026 04:00:50 +0000
Manifest this update: Mon 02 Mar 2026 04:00:50 +0000
Manifest next update: Tue 03 Mar 2026 04:00:50 +0000
Files and hashes: 1: KtoPkAE5nCUmPI6qfmi3YYDoF7k.roa (hash: PS9lMK9tTOArIAjACwFudf6mNlSsPDT6Xbro0UuwZlI=)
2: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: /Zcl8ITtQeoRItPbKetabbFWbdLqpYX6VfFNlonJfZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b7:4c:77:18:d6:96:41:15:a8:ae:7c:ff:4b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Mar 2 04:00:50 2026 GMT
Not After : Mar 3 04:00:50 2026 GMT
Subject: CN=f9dfd1a9ad6a9ad1c4f4764cb156a35aa22b876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:d9:99:e8:3e:25:55:17:0c:69:ff:0b:61:
ae:31:df:5e:eb:30:10:f2:bf:72:60:03:a5:a4:e6:
df:cd:b9:37:49:57:9b:a8:da:db:23:40:d9:0d:0c:
62:14:44:c0:d0:35:8e:c1:34:47:85:7c:aa:48:9e:
e8:e2:48:64:d2:3d:9f:7f:a7:3e:aa:54:5e:50:3f:
01:32:5e:11:6c:dd:01:5b:57:37:d9:cd:aa:c9:d9:
e1:c2:0d:21:fd:6a:b8:fb:7a:10:df:5f:31:aa:a1:
2d:be:a2:b6:3b:ab:3a:3a:db:44:4d:87:01:02:41:
82:e7:03:5f:04:6f:9e:88:a1:fb:5b:56:bd:e5:76:
1f:dd:d1:ef:04:d3:6c:c9:41:86:50:fb:e6:11:e5:
6d:33:5d:bd:33:d2:bb:bf:b5:2f:de:37:50:04:8b:
f0:60:9a:5b:43:25:f0:c5:f4:44:e7:9e:fa:16:88:
c7:18:83:b0:4e:ac:75:7c:ee:75:0b:7c:d7:5a:3c:
02:9c:52:47:f8:7a:e9:45:e3:9a:c6:86:23:de:55:
a2:76:ae:08:d4:b8:00:69:73:11:58:23:8b:5b:00:
1b:15:ec:33:4e:39:ed:25:8d:e8:e8:6c:59:55:12:
44:f4:94:62:b2:e7:18:28:8d:6e:7e:7c:8e:da:b9:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:D1:A9:AD:6A:9A:D1:C4:F4:76:4C:B1:56:A3:5A:A2:2B:87:6D
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:86:ba:10:dd:4d:24:a8:f4:a9:db:31:82:80:81:b3:c0:
23:f2:55:17:40:d9:db:b6:c3:e3:67:c3:10:b1:bc:b1:f7:4b:
09:cb:1f:d8:a1:f7:eb:e2:6b:d3:50:50:4b:2f:9d:51:30:16:
04:57:1e:c0:78:54:c7:a8:91:7f:de:11:fb:57:fb:ca:8f:2d:
7e:3d:7f:76:a9:ea:bb:fe:0b:0f:77:80:19:f3:68:46:c3:91:
02:57:6b:93:8e:4d:dd:af:5b:b9:da:2d:e7:93:f6:55:1e:84:
38:c2:99:42:a5:f9:bf:bc:80:7e:0a:6a:0a:75:ac:96:18:f3:
ae:65:13:28:01:ac:cc:e1:c2:55:6c:79:68:e5:a5:45:5e:e5:
b4:8c:29:7e:53:6d:09:8f:2e:18:4c:90:e7:04:5c:ac:37:2d:
1b:6d:e7:e7:c8:79:b0:44:04:08:f0:a2:bd:28:6c:0f:0a:d3:
62:9b:e7:23:ac:e9:29:20:36:7d:b2:c0:e8:e9:cb:a5:00:57:
8b:c1:d1:4d:3d:97:db:db:2e:81:37:a5:78:9c:d0:60:ac:67:
3d:cb:9c:28:dc:0d:39:7f:02:7b:a1:cb:87:d8:b7:33:77:bb:
f1:bd:51:d8:af:12:25:1d:53:f6:64:21:5c:6a:0f:21:bd:2a:
85:b7:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:17:03 2026 by rpki-client