Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: uWN8UBTYTfnWxkJtTK58eb+dXTf4+oeAeA2rGGzHbLs=
Subject key identifier: A9:17:16:82:42:94:CA:CB:C1:25:8E:47:35:F7:0B:52:D1:3E:53:1E
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 019FA9E3209765B0552082FF2048262103FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0DDB
Signing time: Tue 28 Jul 2026 18:01:02 +0000
Manifest this update: Tue 28 Jul 2026 18:01:02 +0000
Manifest next update: Wed 29 Jul 2026 18:01:02 +0000
Files and hashes: 1: Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa (hash: PsSncA5sbwhm+qYpwUvXOsucHxELXyU7nMC4Byz/38I=)
2: NiXEkFa2OyOUnxfMEcQON6yPoNg.roa (hash: dVvuF0RyYBJRRTECbqhrE8YUyCue+Lh92GIKr6FebqU=)
3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: ttl2e0+YTRP5qIL4H/mOw2LvJeZItiI4dYoeaUG2RU8=)
4: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (hash: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk=)
5: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (hash: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:20:97:65:b0:55:20:82:ff:20:48:26:21:03:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Jul 28 18:01:02 2026 GMT
Not After : Jul 29 18:01:02 2026 GMT
Subject: CN=a91716824294cacbc1258e4735f70b52d13e531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:54:8c:9b:07:45:32:83:f2:bb:9d:ad:e9:
9f:43:e3:2d:3d:56:fc:55:43:42:32:8f:17:f8:49:
81:ff:06:51:69:1d:23:0d:84:07:91:08:1a:6f:54:
35:4d:d0:2a:87:96:3e:78:62:67:07:70:8d:6a:e0:
2f:e9:8e:9a:5d:96:c7:5c:aa:e2:da:ba:9f:d2:76:
e2:34:1a:35:31:44:dc:a8:4f:02:e6:01:33:71:f8:
a0:53:f0:8a:81:99:93:93:04:5f:24:e7:bd:fd:28:
52:65:d3:51:e5:d8:33:65:66:e7:a0:92:48:9e:c2:
b4:fb:3e:62:74:ba:76:d6:ab:14:b0:d8:53:0b:6e:
25:27:be:4b:f7:38:aa:d6:0b:b2:bf:b4:d7:a1:d1:
d8:cc:fe:d6:b5:f0:20:e8:bb:15:6b:68:ab:c6:db:
8a:f9:35:12:ec:21:a5:04:73:0b:aa:0c:ea:93:55:
00:79:08:dd:40:8b:a6:ac:ca:f9:93:42:f9:d6:60:
d7:fb:dc:3f:06:fd:20:ee:8c:3e:8a:2d:44:83:2d:
39:77:41:37:b7:e6:4d:d6:ea:7d:6c:2f:7d:ec:08:
4a:1e:9e:1b:94:a6:c7:e5:e6:30:22:a8:94:07:44:
d5:79:d5:d1:8b:df:54:9d:8f:ac:87:0a:b5:63:09:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:16:82:42:94:CA:CB:C1:25:8E:47:35:F7:0B:52:D1:3E:53:1E
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:ca:de:17:48:2e:2b:b0:b7:3a:21:c3:1c:18:87:e4:dd:
5c:03:28:46:ea:8b:ca:5b:42:6f:b5:c1:e1:6f:14:81:cd:d0:
69:d8:37:2f:5f:09:39:c3:aa:dc:42:1e:36:fd:ca:c5:55:5c:
f6:9a:86:54:48:f7:7d:95:58:ea:8c:de:bb:65:d6:e4:b0:93:
5a:2a:81:9f:e4:de:f8:ab:0b:8f:1f:e4:44:99:52:3e:b8:ea:
6a:38:29:45:ae:10:e2:dc:98:72:33:76:f6:a7:ac:f5:d5:31:
f5:7e:10:61:db:90:50:99:03:2c:e7:69:47:fd:cc:0c:43:d1:
17:43:95:1b:8f:a1:2f:e8:b2:c3:52:3f:cc:26:1e:45:fe:e4:
a4:4d:3c:be:bc:7a:12:2a:c0:a6:bf:e7:6e:16:0e:25:1a:a3:
26:84:fa:69:5c:97:65:ff:90:02:a0:d9:eb:7a:03:ba:34:ed:
ed:09:58:22:45:c6:3e:d6:ff:5f:de:bf:c7:6b:e8:3a:fc:53:
bf:8e:42:db:10:01:a1:06:7b:8b:6a:ed:cf:63:20:95:0c:da:
be:13:3d:dc:8a:de:4f:b5:de:95:6d:bb:6f:c2:aa:33:ba:d7:
8d:e8:d5:da:2a:51:53:5e:47:3f:cc:d1:da:a5:7c:f8:e3:7f:
14:4a:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:58:04 2026 by rpki-client