Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: GmcP9dCN1CkkOAojuSt8jdOSjOlFN99M67UneJbdhlY=
Subject key identifier: 90:7E:28:1E:B6:AE:6B:FE:98:99:A8:59:BA:FE:EA:4E:BD:61:25:9B
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 019CAA8FEB8BAC46EE2A514D47DA85330C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 0895
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: h02F20m-HtlrYP1IvxDBcCyL25o.roa (hash: aEq2H+PemeJ+vZCbIyEhHoWK4ZLPYe1mqTH4CSucVMs=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: 2FQD9F+ar0jBNvJ34HSyWGHJqOMXMlYrmts1lNV0Nq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:eb:8b:ac:46:ee:2a:51:4d:47:da:85:33:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=907e281eb6ae6bfe9899a859bafeea4ebd61259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:63:34:31:99:88:ae:7b:f8:d8:1a:ac:b2:
0f:1c:bb:8b:b8:b2:ab:de:f2:87:24:50:d4:ba:a2:
c5:d3:4a:d5:21:22:4c:f0:68:71:f4:74:88:2d:ae:
d3:ba:b6:e3:72:16:b8:2f:08:b1:d3:bb:56:a8:02:
22:d4:87:4b:19:7a:e7:67:2e:b0:c4:d5:f3:33:5a:
e0:7c:66:e1:84:4b:2f:b6:b1:5b:b2:21:4e:e7:26:
84:94:ad:2d:6c:a2:5b:61:dd:48:58:51:53:27:b4:
ac:f4:12:62:fd:5d:31:3d:e2:ce:6a:2a:4d:60:a3:
68:51:74:68:0e:0e:0d:28:d2:a4:51:15:d8:14:31:
c5:f5:16:51:67:d8:eb:e5:7e:84:f8:7d:c9:75:61:
e6:d3:d6:a1:1a:13:55:a1:7a:e4:f6:bb:5b:ac:f2:
f1:5f:43:59:f4:ec:f6:b5:1d:94:be:f6:06:d8:cd:
43:a2:d6:2b:bc:65:43:fb:84:a7:a7:26:71:86:ba:
9f:6a:94:59:ed:6d:01:94:ab:f9:21:01:fc:26:6a:
23:cd:7d:10:b9:44:3d:02:98:85:41:ea:5a:cd:89:
49:c7:5c:1f:ca:03:d4:4e:4c:0c:b3:18:55:fe:51:
be:13:bc:1e:55:d6:a0:1f:5a:f2:37:c6:8c:d0:6c:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7E:28:1E:B6:AE:6B:FE:98:99:A8:59:BA:FE:EA:4E:BD:61:25:9B
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:67:37:b2:08:94:e2:32:02:23:8e:48:09:c7:70:55:09:7b:
84:7e:01:1c:20:86:6a:df:dd:82:e7:73:ad:37:d5:80:a6:2b:
f3:f2:76:54:b3:92:6a:2b:80:bf:3d:00:1a:49:46:ce:fa:9f:
f7:a2:41:8c:2b:a3:f1:7f:98:0c:cf:7f:bd:2c:1d:17:24:e0:
04:ca:4f:4a:40:9a:ec:00:8a:df:fb:09:3a:c5:38:ce:2b:21:
30:1c:e4:ff:07:63:28:d1:bb:dc:45:2d:ec:af:c2:b1:c4:97:
ee:f9:7d:63:a3:51:ba:f6:db:32:dc:60:44:4e:9e:6d:49:8c:
c1:3f:80:d3:9b:a2:97:36:8a:1e:1c:c6:ca:c0:2a:69:68:7e:
5b:a0:c1:31:93:26:f1:73:68:0b:60:7d:ef:a1:41:50:fd:e9:
60:c7:e2:7f:37:4a:b3:bd:7b:8e:13:d5:5d:55:f5:a9:82:bd:
db:b1:4f:23:dc:5f:c2:03:52:5d:4c:11:3c:3a:e2:8e:22:60:
09:db:76:ed:4c:29:64:87:ae:1f:99:e4:94:a8:e1:82:df:5f:
1f:cf:b6:0e:b3:02:4c:3d:f4:4b:d0:08:d8:9d:83:8f:7e:53:
a2:23:25:b7:20:41:a3:93:c7:ce:c8:1a:62:0a:76:81:c0:b6:
26:fe:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:05 2026 by rpki-client