Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: y2J3GED4kXFk8Xcr9OG3Swm5zc7EK7zW28k9BNSsiFc=
Subject key identifier: 8C:A2:8E:31:43:D0:AB:19:F0:E1:9F:01:AC:9D:0E:58:A0:2B:38:79
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 019D9A3EC744F9F6BE5059B21CB97054C6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:38 +0000
Manifest this update: Fri 17 Apr 2026 07:01:38 +0000
Manifest next update: Sat 18 Apr 2026 07:01:38 +0000
Files and hashes: 1: LggB48-j7YY9SCWaA8exH9VEaUk.roa (hash: q3ynPTcziyC9bHjFnAz0n/dVRFiqqPc4LI87XhrGp+g=)
2: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: lQItBd2i7GmO6uxvlnZeiSH1BVyPukuWUqcvw4lfIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c7:44:f9:f6:be:50:59:b2:1c:b9:70:54:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Apr 17 07:01:38 2026 GMT
Not After : Apr 18 07:01:38 2026 GMT
Subject: CN=8ca28e3143d0ab19f0e19f01ac9d0e58a02b3879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:ba:d6:ec:3f:89:5d:99:a2:7e:f7:98:36:
2f:af:60:9d:c2:7b:a4:3c:8f:ff:a7:2b:35:e0:a4:
19:17:d6:0c:98:bb:d3:79:2a:40:ac:bf:06:c3:20:
71:49:1e:a5:97:bb:c1:41:94:58:ec:a2:08:a9:2f:
6a:5a:08:25:24:80:8e:af:8e:93:90:77:a0:2e:82:
6c:bd:79:12:4e:54:07:5b:ac:64:6a:1a:61:1c:dd:
db:1c:24:42:71:df:93:30:ab:a6:75:5a:2e:15:3b:
bc:76:d2:3e:b0:3b:27:79:6c:2b:b5:95:c9:bf:8f:
33:58:1f:0d:00:e8:68:67:32:c9:62:88:98:c4:33:
e2:ca:fa:68:0d:02:1b:36:fb:b0:00:6b:ae:1e:ef:
7d:f1:e8:3a:4f:b7:c5:13:aa:f2:87:06:71:c3:88:
28:e0:c2:eb:9f:9f:c2:08:2e:06:b5:44:c3:9b:12:
21:5f:e2:1f:0f:92:e3:32:da:ee:4b:48:08:68:24:
5f:4a:51:55:36:82:2d:ed:be:a6:c3:75:e3:df:c8:
14:a3:5d:6d:6e:ca:65:83:f8:a3:d4:93:37:54:a2:
63:ca:d9:38:f0:f7:34:55:b0:c0:c6:2f:92:4f:76:
8f:68:c4:19:bc:c6:6a:f2:89:05:08:de:ae:48:d0:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:8E:31:43:D0:AB:19:F0:E1:9F:01:AC:9D:0E:58:A0:2B:38:79
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7a:ea:ee:5e:56:74:ba:f2:d7:42:d9:6c:f7:49:21:b9:46:
76:e0:82:86:4d:84:9d:f8:8f:bd:d2:61:43:cf:d0:4f:4e:ef:
36:7f:f2:18:71:c3:1a:a1:b4:f1:4e:ba:1a:e3:36:15:4e:61:
fb:78:2f:8e:b7:fb:c9:a3:fc:db:52:ad:09:06:44:a3:87:38:
f2:a4:dc:34:e5:ff:61:4d:a2:3c:7f:3e:1a:f6:08:00:19:b7:
c8:ec:01:5c:21:6e:5a:ef:ac:d2:15:2e:e8:d8:5b:53:68:8a:
09:81:06:05:03:7d:62:14:23:aa:71:3f:bf:13:67:2e:63:49:
20:32:34:df:a1:8d:d8:32:ca:66:fb:04:8b:19:df:9f:2c:f2:
0b:db:4e:8b:ab:67:bd:51:9b:b8:d7:51:3b:15:fc:d5:0d:fa:
c6:44:5b:fb:45:3a:fc:97:73:86:31:f9:9d:1d:00:98:56:c1:
7b:d1:38:c0:4d:34:8a:99:8e:bf:6c:0d:6e:27:05:e9:fd:37:
3d:05:2b:81:7f:3d:f1:dc:21:37:b7:9a:e4:a0:cf:5d:29:d1:
5b:56:5b:5d:a6:08:41:83:20:0f:08:bc:8c:5f:f0:1f:01:5d:
2a:e2:76:4e:c6:a9:9e:f9:a9:d4:50:cc:88:56:c2:fb:67:da:
a4:38:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:59 2026 by rpki-client