Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: pJBZOLWUCVTSagIhQVZv0rUwMpSN0Ou0HkhUBZ4mNew=
Subject key identifier: 2C:7C:A9:20:DF:8B:1F:6D:31:D2:2E:42:21:E8:A7:6C:26:0A:7A:8D
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 01A0D0EDA35294F343E2BAFAE2A2B6F0155C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 0D84
Signing time: Thu 24 Sep 2026 01:00:29 +0000
Manifest this update: Thu 24 Sep 2026 01:00:29 +0000
Manifest next update: Fri 25 Sep 2026 01:00:29 +0000
Files and hashes: 1: LsSYewZqoEloekxN9olY0ZWErpE.roa (hash: yniEZZxbWYUya3z1wPxXhEtgwAHbS0sqm3BUjgu913A=)
2: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: DwGYek4HTxfuKCsdY7RBBHIIybBC+9juPw4IJKp47CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:a3:52:94:f3:43:e2:ba:fa:e2:a2:b6:f0:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Sep 24 01:00:29 2026 GMT
Not After : Sep 25 01:00:29 2026 GMT
Subject: CN=2c7ca920df8b1f6d31d22e4221e8a76c260a7a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:26:1c:5b:24:52:2d:74:e0:e6:06:67:8a:
eb:d4:2e:a6:79:08:ca:68:f0:ef:1c:c0:0a:7b:36:
5f:1f:14:27:84:76:2c:65:90:14:b8:a1:bd:cc:0f:
7c:09:21:88:46:4c:87:39:53:7c:64:d2:7d:2a:3f:
1a:ba:64:3b:13:eb:14:2f:0c:4d:1b:5d:5f:6d:a5:
a1:e3:5c:44:7c:0c:85:f5:2d:09:74:f2:23:75:69:
06:fc:01:dc:d3:cb:79:7c:2c:fc:32:60:cb:ac:df:
96:5b:2a:13:4f:a5:df:10:97:36:f8:9a:9c:f8:be:
05:2d:7b:8b:13:00:74:2d:4e:01:30:eb:dd:54:18:
5e:b4:21:ae:7a:87:ef:9e:b1:45:14:03:9b:b6:54:
db:df:3b:60:d8:12:aa:b0:d8:82:35:42:a4:b0:b4:
3f:05:79:64:ee:93:b7:2b:ec:00:aa:89:8a:49:5c:
37:4c:5a:3c:f0:05:5d:82:5d:a9:57:7d:8c:03:00:
10:c2:46:a3:2c:91:4b:74:09:22:53:ab:21:b0:68:
ba:46:48:51:e3:b2:41:81:60:e7:d8:66:ed:d6:ee:
b8:bf:b3:d7:b6:38:a9:74:d2:ed:17:92:da:b1:f2:
58:d9:c3:27:86:93:e7:f8:43:78:71:0d:e4:bf:34:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7C:A9:20:DF:8B:1F:6D:31:D2:2E:42:21:E8:A7:6C:26:0A:7A:8D
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:aa:65:1d:fa:14:d5:32:0c:1e:23:90:c2:8a:ce:cf:7e:
f4:e0:28:0e:be:d6:74:f7:12:0d:79:5f:71:cb:2f:f4:b5:7a:
7f:dd:44:a6:79:a3:d5:e4:d3:dc:0e:f8:19:06:58:53:8f:02:
47:4b:cc:ad:1a:0a:89:83:d1:40:d8:7d:c0:bc:3b:65:e4:35:
21:46:b8:08:35:18:f4:be:73:7f:89:07:3a:1e:42:a1:54:a2:
02:3d:dd:bc:c8:f5:e5:68:19:4c:2f:32:7a:e2:52:21:3c:95:
e7:35:6d:bc:b4:74:90:2d:2b:35:38:72:99:cd:15:20:42:09:
77:29:59:a4:74:4a:3a:17:37:c4:29:e9:80:90:12:4f:3e:5d:
c9:9b:55:44:e7:f9:70:bd:d2:a2:6e:0b:51:07:1c:8d:46:11:
c3:10:a9:44:be:d1:ad:e9:6e:81:9f:a7:3d:89:3e:4b:ee:64:
cd:07:b2:7f:be:5d:03:48:80:e5:56:b4:0a:e6:55:46:08:38:
4c:17:e4:ef:2a:5b:f1:39:a1:be:1e:07:3d:50:49:d4:bc:fd:
c0:1b:8e:2c:e1:a3:9a:60:49:dd:2e:2e:1e:fb:5d:ec:db:66:
6d:ef:04:b3:c6:a5:ed:d9:7b:eb:48:b9:9d:b1:14:38:04:b9:
89:7b:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:50:55 2026 by rpki-client