Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: bx5Jylb8fqsBvfcxh9a/uJzAUZUTFfVGq2r5JoHhgco=
Subject key identifier: 39:B9:A6:5A:C4:98:37:9F:60:9D:E9:95:9B:63:3D:C6:FB:CA:93:A5
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019FAAF5EA74073CF0F6351A406FFBCD864D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 23:01:10 +0000
Manifest this update: Tue 28 Jul 2026 23:01:10 +0000
Manifest next update: Wed 29 Jul 2026 23:01:10 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
4: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
5: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: vMzxeOm7zMMPzpr0/0nxz4Q8t7ISusczYv8PwN/XZ4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ea:74:07:3c:f0:f6:35:1a:40:6f:fb:cd:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jul 28 23:01:10 2026 GMT
Not After : Jul 29 23:01:10 2026 GMT
Subject: CN=39b9a65ac498379f609de9959b633dc6fbca93a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:dd:0b:84:11:f7:bc:25:a6:2d:4a:b8:4e:
43:5a:6a:7e:8d:9d:65:bc:14:df:44:3b:10:71:5f:
71:4d:12:8e:bb:65:c3:c9:62:42:bd:5d:b8:c1:bf:
bc:a0:11:7f:aa:18:6c:39:2c:ad:75:e7:4c:be:9b:
16:d2:ba:ae:54:72:28:bf:53:d6:93:87:7d:62:9c:
5c:33:71:77:67:93:08:b2:f0:5c:2a:25:e2:7a:bc:
33:c7:81:d5:a7:c7:31:3e:0d:7e:53:67:d3:eb:ca:
af:67:4f:46:52:19:15:17:9e:09:03:0c:d8:e2:3a:
0c:4c:5a:e2:bd:02:53:4c:65:9a:82:b0:9b:cd:d8:
b4:43:13:3d:14:ad:fd:d1:dd:29:06:d3:09:d3:14:
eb:c7:67:87:69:70:48:b7:1e:bf:c3:d9:c8:1b:a0:
9d:33:cb:02:63:1b:4c:e0:51:ed:7a:ec:80:ab:8c:
bb:30:02:2d:57:3c:3f:c3:b3:32:0b:80:00:f8:2e:
f9:92:d2:14:0d:f9:94:3e:13:dd:4c:c9:9b:2c:5e:
d7:1b:13:e8:0f:c6:73:c5:5c:71:38:4e:ce:e2:e7:
ca:53:00:1b:21:b8:03:19:55:19:9c:95:c3:c4:3a:
71:c3:5b:8d:44:21:98:48:ba:aa:ce:03:ef:c8:6c:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:A6:5A:C4:98:37:9F:60:9D:E9:95:9B:63:3D:C6:FB:CA:93:A5
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:98:da:75:76:8f:13:6f:47:df:ae:d5:49:64:d8:13:7d:
8a:ba:c6:87:61:34:ba:6e:f1:fd:e8:0a:e2:85:50:95:8e:45:
05:3e:fc:81:52:bb:35:31:41:1a:9c:42:70:8b:0e:86:94:f3:
be:56:b5:8d:d6:e7:c3:25:dc:fb:a7:da:ec:f3:64:ba:7e:c0:
9c:45:d4:a9:01:0c:7a:e9:fb:57:24:72:7c:c7:1f:06:e3:b8:
7f:ed:d5:19:52:8b:84:a5:03:e6:e1:43:be:cc:fa:06:99:f8:
cd:17:dc:8b:61:10:15:e1:5e:79:73:43:24:55:9a:b7:32:52:
52:59:37:7d:2a:64:b5:08:3c:b9:71:eb:06:16:ff:e9:ba:7d:
53:ab:dd:1b:97:a9:e8:f6:3d:60:67:dd:81:b9:b4:bc:8a:b3:
8e:f9:a3:50:1d:31:f5:c5:62:50:0c:09:b8:6b:7f:3b:fd:42:
fa:b9:24:f9:c5:ac:12:3b:e2:7c:25:18:3d:b0:89:40:5d:df:
2a:e7:7a:01:b5:22:a0:6c:54:f7:fe:6e:ae:2e:5b:89:2a:76:
92:80:1d:c2:4a:c1:91:2b:6c:8f:59:7b:9c:4e:c0:cf:be:6a:
c9:17:42:92:08:9d:b5:8e:c2:31:61:09:68:f3:02:18:07:78:
e9:0f:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:53 2026 by rpki-client