Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: RcuXtZ8VGm13D6gd9Ts92DOZ1QQt0oyRBk0RaeewFU4=
Subject key identifier: D0:02:52:8D:C5:7F:97:A8:DB:D6:03:24:68:59:73:B4:22:C9:A1:BF
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 01A0CAEB6465B3F540A03930E096FE65DA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 0AB8
Signing time: Tue 22 Sep 2026 21:00:19 +0000
Manifest this update: Tue 22 Sep 2026 21:00:19 +0000
Manifest next update: Wed 23 Sep 2026 21:00:19 +0000
Files and hashes: 1: h02F20m-HtlrYP1IvxDBcCyL25o.roa (hash: aEq2H+PemeJ+vZCbIyEhHoWK4ZLPYe1mqTH4CSucVMs=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: EjMM/u2W0Kk3lxhpJa4Fsjegca5p3eodJ4JbattZSIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:64:65:b3:f5:40:a0:39:30:e0:96:fe:65:da:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Sep 22 21:00:19 2026 GMT
Not After : Sep 23 21:00:19 2026 GMT
Subject: CN=d002528dc57f97a8dbd60324685973b422c9a1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:03:95:49:9e:92:b0:a6:ed:58:96:43:7b:
af:5a:d7:59:ca:05:ac:64:46:3d:24:14:82:e2:5b:
11:6b:a2:f6:2b:e7:48:d9:a7:44:96:9c:d0:23:60:
cb:3e:93:70:43:13:7a:80:cd:f5:0c:23:e2:c2:4d:
f1:e1:01:0b:e7:5c:2c:70:a6:bf:47:c4:8c:b0:56:
8a:c5:e6:0e:f7:8a:f4:8e:44:d9:c9:9c:8b:f4:10:
b4:1d:c8:9c:f2:49:57:e7:e1:66:c5:b5:a9:eb:29:
34:f9:f0:74:bf:98:f9:c8:2f:d4:17:51:94:3f:a3:
d1:1a:f6:1f:7f:71:fa:6c:d0:f3:73:ec:94:e4:ae:
3f:9e:df:c2:39:63:09:d8:45:f2:a1:39:38:2c:b3:
a3:17:f7:d5:68:97:3a:bc:b0:d9:14:b1:a0:f5:b8:
2c:b4:92:82:4d:68:55:a2:2f:89:07:f4:e0:01:30:
0a:dc:7c:ce:a8:ca:b7:9e:1c:10:94:1b:f9:4f:67:
2a:3c:c1:30:0d:fb:03:fb:5b:3a:2c:e9:fe:87:bb:
d4:fe:e3:80:31:41:66:ee:11:86:04:74:33:8e:c5:
eb:09:87:28:1d:ad:a5:5c:ed:38:bf:e3:6f:82:e8:
17:77:41:d5:10:a4:90:48:6d:60:50:30:6a:0d:e2:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:02:52:8D:C5:7F:97:A8:DB:D6:03:24:68:59:73:B4:22:C9:A1:BF
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dd:9b:3d:3c:fd:09:61:0e:6a:67:69:45:e9:c4:c3:56:2d:
e4:4d:69:7e:1c:3d:d2:f2:1b:2b:9c:b1:41:58:80:85:a6:0b:
71:63:6a:f8:9d:30:1d:9e:6f:ba:7e:68:f7:c1:c6:b6:47:c3:
65:bb:e3:98:f6:31:69:88:87:f7:2c:6f:3e:20:b8:cb:7b:b4:
8e:d1:a9:67:b9:d3:f1:33:fc:e3:e7:89:80:fe:ca:2d:16:ae:
55:21:e7:71:5f:bc:ba:f5:a2:1e:83:aa:0e:3b:74:58:a3:6b:
7c:70:7d:e6:81:b7:03:5f:22:45:4a:d6:e7:10:64:01:c9:ae:
8d:a8:1b:72:f7:cd:42:ae:e5:d6:5e:fa:63:25:6b:fd:ec:e0:
77:8a:36:d6:f6:85:37:01:5f:a7:c1:c8:67:38:bb:55:e2:41:
2d:a4:c9:d4:76:04:75:76:28:17:ac:8b:59:bd:e7:fa:2a:aa:
f9:5c:37:e7:97:42:e0:5f:bf:0a:8d:33:82:a6:62:9d:50:db:
95:34:1d:8b:d8:c6:8a:98:8f:2c:40:0d:f0:05:db:4f:ab:c7:
78:b3:3d:cc:16:9b:95:c0:15:62:04:35:8f:b9:72:65:71:b5:
bd:3e:b8:5d:6c:c9:a2:6a:8f:ad:43:4a:2e:2d:65:62:69:44:
73:c9:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:52 2026 by rpki-client