Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: 1h9miq4oQtlBoWjuTkRRUVb1rUCOtY2O5tF2igo8yc0=
Subject key identifier: 63:5A:AD:48:31:91:22:E5:4F:47:97:7C:12:7F:E7:7F:AC:AE:C2:6E
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 019EBE47D226726CE65272B5AF778A302918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0D61
Signing time: Sat 13 Jun 2026 00:00:38 +0000
Manifest this update: Sat 13 Jun 2026 00:00:38 +0000
Manifest next update: Sun 14 Jun 2026 00:00:38 +0000
Files and hashes: 1: Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa (hash: PsSncA5sbwhm+qYpwUvXOsucHxELXyU7nMC4Byz/38I=)
2: NiXEkFa2OyOUnxfMEcQON6yPoNg.roa (hash: dVvuF0RyYBJRRTECbqhrE8YUyCue+Lh92GIKr6FebqU=)
3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: BSr4oVxOF/FUjbCewAfVwpAZzcYW3zzHFoW2sVu09gY=)
4: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (hash: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk=)
5: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (hash: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:d2:26:72:6c:e6:52:72:b5:af:77:8a:30:29:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Jun 13 00:00:38 2026 GMT
Not After : Jun 14 00:00:38 2026 GMT
Subject: CN=635aad48319122e54f47977c127fe77facaec26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:0b:71:11:b9:3e:42:fa:32:9a:a6:4f:22:
ad:8f:84:36:5f:d0:3b:9c:a5:d3:af:d1:e7:6d:92:
6a:90:1b:38:08:a9:43:a3:20:4b:53:31:2a:48:1b:
0a:1c:cf:75:20:99:c5:80:ab:5a:d0:09:e1:c5:72:
5a:32:bb:ba:eb:3f:a8:55:ee:6f:2d:99:65:97:88:
36:61:c5:27:39:23:40:16:45:ae:42:6d:7d:08:ea:
e5:be:9b:29:ec:34:e2:30:6e:f8:3e:20:1d:64:5d:
bb:f2:d5:73:b2:10:d0:ae:26:4d:fb:01:21:9e:1d:
86:1b:06:95:7d:4e:4a:90:dd:bb:63:65:70:fc:61:
b3:8e:09:dd:4f:f6:93:24:92:48:f4:ab:79:63:ae:
9b:94:da:20:f6:77:a0:96:64:8b:7d:ee:09:90:dd:
a0:a3:1b:61:42:c0:62:13:2d:9c:5d:92:98:8a:14:
c0:f0:9b:06:8c:d8:3d:b8:53:70:3c:03:50:5e:af:
77:a3:a5:a6:d5:4f:70:df:0e:a5:b3:1d:ba:b9:28:
c9:77:b6:b4:fa:2c:15:32:99:3b:12:e9:30:aa:74:
41:9a:69:92:8b:98:ed:1c:ac:50:04:4c:0d:ae:b2:
44:d4:72:9e:4b:ec:d8:1d:07:93:ac:8d:fc:00:a0:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5A:AD:48:31:91:22:E5:4F:47:97:7C:12:7F:E7:7F:AC:AE:C2:6E
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:42:80:01:0d:1e:65:81:b4:6e:f8:6e:8c:b4:2d:2b:35:6f:
cb:fe:88:aa:e1:07:7e:d4:aa:8f:d3:10:e2:63:17:32:00:1f:
41:0d:13:16:15:fc:35:e7:00:67:d1:71:2d:05:22:fb:25:6c:
ed:fd:64:e4:6f:17:7b:35:b5:d7:4b:d8:eb:76:72:37:bf:2e:
ad:be:1a:f7:5a:42:9a:01:a6:e5:f3:a4:f6:3b:4c:a0:43:4b:
8f:1c:59:69:a3:16:1e:11:cc:f4:0e:70:56:23:06:c2:61:21:
28:79:e2:2c:a1:cb:5f:4b:f7:c5:33:23:95:b3:db:32:a2:80:
2a:99:4d:17:a5:52:19:9c:4c:11:96:c8:8b:d3:b3:0c:bf:aa:
14:f5:bd:57:e3:9d:af:84:7b:da:a8:14:76:83:f3:92:d4:1d:
d1:11:b6:0a:e7:33:c4:3b:9a:75:24:08:cb:62:96:5a:7a:3b:
6c:eb:32:5f:ea:4b:26:ff:4e:c4:3f:1e:0b:55:52:b9:d1:03:
dc:3b:87:e8:ee:b9:0a:55:e7:05:16:75:12:9c:3d:da:ed:0d:
ac:e1:9e:c9:2d:74:70:43:c2:b5:73:95:6c:58:c0:56:73:91:
c9:5e:f0:77:9c:d8:8d:94:50:fe:5b:f0:57:c3:86:48:b2:27:
9d:28:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:15 2026 by rpki-client