Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: MpRIUu4DiUnaNtBk+P7ArXRCmtxS3+266zLpctIfjvo=
Subject key identifier: AF:77:F2:5B:5A:24:3F:B7:92:73:C7:40:FC:EB:F5:78:AE:CF:BF:83
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 019D9998DB2BA180DBBA9FF1837BA0167106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 07A3
Signing time: Fri 17 Apr 2026 04:00:24 +0000
Manifest this update: Fri 17 Apr 2026 04:00:24 +0000
Manifest next update: Sat 18 Apr 2026 04:00:24 +0000
Files and hashes: 1: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: uR9vdhdLl7umtj7SUUqLVZj1Xm3YUdmLrs+CtwfR6RY=)
2: dNajQCUoGaoowLS9HpOXxA6vUe8.roa (hash: hhwbI1QROgF/W8q/u8jmMb63ziVKKIX34GLWc4neSDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:db:2b:a1:80:db:ba:9f:f1:83:7b:a0:16:71:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Apr 17 04:00:24 2026 GMT
Not After : Apr 18 04:00:24 2026 GMT
Subject: CN=af77f25b5a243fb79273c740fcebf578aecfbf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:87:26:12:bc:35:d7:15:11:81:58:3b:47:
58:46:53:bc:c3:4b:19:38:88:ac:f5:32:48:fd:39:
84:e3:8e:65:57:69:2e:8b:31:d7:a8:71:51:01:7d:
3c:25:0c:d8:9a:b6:1e:54:89:b8:87:00:32:2f:19:
95:d4:60:6d:b9:98:b4:44:aa:23:cc:21:98:48:d4:
02:8e:11:b5:7a:f6:49:63:d2:e3:60:43:c2:82:92:
eb:26:fe:7c:fa:d3:a0:de:dc:81:c1:3c:81:7b:dc:
13:69:2b:35:ee:a9:5d:8c:27:25:c9:34:1a:0b:67:
fd:cf:1e:33:6e:e9:50:d2:ff:5f:0c:03:53:02:a2:
d5:1a:b2:48:0e:ca:64:a9:03:67:d2:c1:7d:81:aa:
f0:68:03:38:3b:96:84:20:d4:b2:9f:ab:8f:47:b5:
ca:42:44:f3:18:0a:c4:06:81:7d:9e:5e:2a:12:10:
db:9e:65:39:67:45:ff:73:44:a4:1f:28:de:df:63:
4a:bf:d6:dc:79:ee:8c:b6:1d:aa:aa:93:dc:ce:f4:
1a:ff:cb:f8:be:97:f6:cf:ed:5c:48:11:a9:4e:af:
54:e4:42:58:ce:33:07:db:b6:84:d7:53:b2:73:f4:
3f:ac:b7:de:9b:35:60:ba:d8:ae:66:f1:44:7c:6d:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:F2:5B:5A:24:3F:B7:92:73:C7:40:FC:EB:F5:78:AE:CF:BF:83
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ff:54:17:65:78:a4:73:5b:bb:cb:52:e2:54:f4:af:38:1c:
6b:4d:e1:4e:24:0e:04:38:bb:a8:e5:4c:1d:52:55:1a:dc:93:
12:c2:5e:ab:be:eb:56:69:18:7d:3a:50:2a:a7:0d:74:26:3f:
19:e7:d9:d4:5d:fe:1a:de:2a:93:42:07:c2:50:74:99:03:6c:
4a:cd:56:14:c6:2e:db:cd:f5:b5:60:87:d9:a1:94:6d:cc:68:
7e:6d:5c:f4:b0:d8:62:17:5d:42:7a:ca:a6:e1:45:d6:e4:02:
57:30:64:6d:6e:16:32:49:79:4f:c9:11:87:60:4d:23:71:67:
3b:1f:c1:9e:50:2a:e1:d6:9e:ff:e5:f3:b3:8e:0e:5a:b1:fb:
22:2c:d8:c0:08:0a:16:1c:c9:06:be:ff:f1:78:28:c7:d0:39:
56:5d:9e:66:7e:61:13:79:01:14:ec:51:4e:4a:69:ef:e9:e4:
11:72:e3:b5:39:60:a5:e7:e2:04:f7:fc:88:ac:4b:69:b1:5e:
2c:37:66:6c:d8:7d:3b:3a:c1:47:f0:4b:64:c8:2b:96:2b:bf:
60:07:50:0d:b1:31:5c:d3:01:35:fd:d7:a1:70:a1:8f:77:b8:
90:5c:31:0d:a6:04:e4:49:df:e2:d9:31:3f:44:f2:c4:4c:d1:
c7:61:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:27 2026 by rpki-client