Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: VHUFQZmvEnijdpkPflMIX8ItFI2G7S+TLT4fX2V3PrI=
Subject key identifier: BC:2A:56:3A:7F:24:79:FB:8D:0A:D2:5E:A4:A3:9D:44:27:E5:B6:34
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 019FAB2C09743420B51C005BF93384E002F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 0A23
Signing time: Wed 29 Jul 2026 00:00:17 +0000
Manifest this update: Wed 29 Jul 2026 00:00:17 +0000
Manifest next update: Thu 30 Jul 2026 00:00:17 +0000
Files and hashes: 1: h02F20m-HtlrYP1IvxDBcCyL25o.roa (hash: aEq2H+PemeJ+vZCbIyEhHoWK4ZLPYe1mqTH4CSucVMs=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: SajLQpzTdrKxcbcID61OoM4iRjVii7M8hopDfQn3ZGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:09:74:34:20:b5:1c:00:5b:f9:33:84:e0:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Jul 29 00:00:17 2026 GMT
Not After : Jul 30 00:00:17 2026 GMT
Subject: CN=bc2a563a7f2479fb8d0ad25ea4a39d4427e5b634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:30:1d:20:92:8b:09:36:6f:ff:97:47:e8:
37:09:9b:a8:a8:6a:b0:6d:2a:fb:c3:d2:86:d7:52:
a3:c2:37:62:1a:1a:4b:b6:ca:41:de:fa:9f:73:9b:
2c:f6:a6:93:d1:44:eb:84:ac:25:25:3b:0e:db:64:
3e:5c:c0:dd:39:41:b6:e6:ab:a0:55:ac:fc:08:49:
95:66:c0:ef:82:64:d9:55:77:4a:1f:86:c9:85:8e:
6d:00:57:01:3c:fc:51:e3:f0:b4:fe:4b:bc:91:f0:
1f:b3:0d:69:fe:13:ad:7a:db:bf:92:89:3e:95:82:
68:5b:89:6c:3a:b5:7f:ff:3b:c8:10:ba:5c:dc:e8:
78:78:1e:9d:0a:1d:5c:f9:34:59:e6:d5:75:f9:a4:
cb:22:20:6a:8a:95:ef:b0:c7:fd:60:dc:63:89:20:
36:0f:0f:23:4c:88:34:db:1c:69:e6:f0:96:df:5c:
4b:f9:7f:a9:48:91:21:01:5b:22:ff:45:fd:0a:44:
8c:12:99:dc:79:dc:34:d4:3e:ba:c7:3b:cd:79:2e:
b8:50:5c:1a:d1:32:39:c8:14:58:fc:64:cb:5c:fc:
f7:e4:b3:aa:7c:61:04:82:a3:75:c4:cc:d0:53:ba:
dd:84:aa:00:82:be:35:01:23:c9:89:01:b6:e5:41:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:56:3A:7F:24:79:FB:8D:0A:D2:5E:A4:A3:9D:44:27:E5:B6:34
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:45:05:cc:74:2d:1f:18:1b:6f:9b:d4:aa:8b:f1:a6:0e:55:
72:2b:50:fc:6f:6e:e5:99:58:c7:d7:22:07:a0:7e:f3:73:55:
6b:2c:ca:49:16:6e:dd:57:87:90:4d:3a:33:0d:e1:19:17:cd:
c1:21:03:10:60:8d:9d:15:59:2b:37:54:27:70:87:3d:35:48:
d2:f4:23:c2:d8:93:e4:21:55:f1:ef:40:da:c1:f8:46:0a:e7:
8d:86:c6:42:c3:0d:73:ca:38:ae:eb:27:58:f2:7a:9e:45:a2:
61:02:9b:c8:7f:02:01:e3:a6:3c:1e:67:2d:f5:87:bc:36:21:
38:3a:da:00:da:42:b8:ca:5a:88:3b:bb:4f:1d:c2:11:38:11:
24:c3:36:4b:22:d4:91:b6:38:cb:0a:da:86:53:12:98:87:68:
4a:56:85:c2:be:7c:d9:ad:ee:ca:fc:8c:51:49:17:41:1e:1f:
a7:b3:12:1f:8d:a7:18:e4:a4:b3:89:df:a0:08:81:6a:39:2b:
be:fc:fe:f4:5e:d7:9b:f3:6a:8e:9b:6a:06:51:fa:8b:27:5e:
c1:ef:17:e6:e1:69:43:10:28:a7:bc:2a:5c:16:7f:db:58:4b:
47:e9:a1:25:4f:66:ec:87:45:8b:77:ca:a7:8c:8c:42:b3:66:
9d:e4:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:49 2026 by rpki-client