Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: L60/vu1XdEYnSgzHnd616BChNSq4AJb/rP2LlsGsB3c=
Subject key identifier: D9:94:37:95:F7:3A:80:D8:58:8D:C7:62:F5:2C:13:89:66:54:6E:BC
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 019CACB55B9FF1A62582992BC8E3F069A0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: LggB48-j7YY9SCWaA8exH9VEaUk.roa (hash: q3ynPTcziyC9bHjFnAz0n/dVRFiqqPc4LI87XhrGp+g=)
2: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: 2k/MmBiOB6MRI5d97okwFKz3v83WI68+cAIhuLDiuM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5b:9f:f1:a6:25:82:99:2b:c8:e3:f0:69:a0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=d9943795f73a80d8588dc762f52c138966546ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:40:76:6f:83:f8:05:64:7a:5e:81:6e:e6:
c6:3a:83:2c:d2:f2:ca:a2:53:ef:f5:6f:44:05:fa:
31:9a:03:e8:c2:b2:0b:41:c2:a7:d3:92:21:a4:81:
ac:69:33:5b:d6:cc:57:d5:6a:ae:a5:0a:50:46:e1:
c7:07:50:7b:c9:b9:30:4c:23:c6:8a:d5:29:c5:2d:
c9:98:79:ec:0d:da:07:ff:eb:b6:a7:fe:ff:7d:3c:
cb:45:fd:c5:da:74:d8:57:9f:93:b7:65:e6:98:8e:
ab:3d:70:04:a4:f7:63:d8:fb:90:43:28:85:57:77:
d0:ab:5c:ae:fd:f5:d7:02:52:90:c0:30:0d:dc:a1:
95:a8:f7:e6:89:08:78:a0:ae:ee:ef:14:ca:aa:c4:
cf:52:a3:21:34:ab:1f:b5:c4:06:22:8b:7e:82:74:
d7:ed:dc:45:5e:6a:d0:ba:7c:d0:2c:9c:4f:75:0e:
86:93:bc:98:85:43:9f:a3:6f:e3:9d:50:da:dc:00:
25:c7:31:ff:46:54:46:7f:26:23:1d:32:75:8a:20:
85:01:25:bf:74:90:7a:3e:dd:ed:55:00:2a:c3:cc:
bc:8a:67:76:c4:a1:2e:56:be:c8:53:54:6b:fa:04:
4d:c8:e7:9b:ac:74:29:49:94:51:ff:29:26:e4:10:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:37:95:F7:3A:80:D8:58:8D:C7:62:F5:2C:13:89:66:54:6E:BC
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:58:0b:d5:f2:a1:91:f5:db:31:c6:01:62:2e:21:ca:73:a4:
2f:c6:5c:06:19:4a:13:5d:8f:2b:6d:c4:33:29:75:49:73:50:
25:e4:b4:1a:86:30:79:39:0a:c3:9e:31:26:4a:6a:a8:64:0a:
56:ca:b0:ec:57:9d:db:cd:56:f5:2f:13:0b:af:f9:38:b4:6a:
1c:df:67:5c:40:d1:04:df:40:61:40:20:23:b1:83:fd:c6:f0:
b9:6b:03:1e:cf:8f:c8:ef:9a:78:9c:a2:35:7c:f6:08:af:c3:
03:c0:ba:cb:d6:e5:5d:0e:95:b4:0a:83:11:fa:75:dc:65:60:
87:56:26:6a:55:d8:61:7d:62:44:f2:35:e3:9a:ec:bc:28:f2:
d6:9f:b2:5e:91:0d:22:f0:67:a5:2a:c7:00:1a:c2:9c:2e:4f:
16:be:1b:dd:d2:ff:dc:02:88:55:34:13:f3:29:43:94:3d:36:
8b:e1:4c:fa:25:fb:2c:11:54:9a:6f:24:6e:bd:6c:ec:cf:d4:
4d:a2:dc:37:97:68:77:c7:dd:47:3f:8c:a4:fa:a1:d2:58:b9:
8c:c9:97:18:75:32:3d:67:58:5e:90:90:40:59:c9:5e:4f:50:
32:82:37:6e:54:65:ab:d6:75:cf:7d:19:88:7a:96:2c:c9:1a:
e8:8f:4c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:17 2026 by rpki-client