Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: 6eEhIoNFj0g3diGSVTebZzDXuc9UDMFtMeeYbrGUn+A=
Subject key identifier: 2F:67:8B:48:7E:EE:BE:AC:E9:AF:77:C2:E3:90:26:E2:E8:E6:69:96
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019D99D01D05B2ACF99B4753CF7B8A087905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: JcfA4lpOxrjDzJabOi0C8Uu0tdM.roa (hash: cI3/q2hPbrWCKA8ZfkA3hdUcINqQC0BD0cIFDiHo/U4=)
4: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
5: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
6: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
7: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
8: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: YwKOJRxcu9pNZJBV34V2HE50goDOGPxZ4D9n318DbWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1d:05:b2:ac:f9:9b:47:53:cf:7b:8a:08:79:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=2f678b487eeebeace9af77c2e39026e2e8e66996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:a5:9a:43:3f:04:76:0b:66:1a:b3:5d:e4:
37:82:77:5d:76:0d:96:a3:9d:a7:37:ee:6e:59:5b:
67:2b:94:86:1f:1c:8f:02:a2:a4:86:02:30:36:53:
dc:0f:eb:e0:1e:2a:d2:63:78:36:8d:26:cf:2e:0d:
49:af:14:1b:88:42:25:20:f5:c0:ac:4d:fb:09:c3:
ef:6b:21:1a:14:96:fa:00:45:34:b7:95:22:15:a4:
e7:13:92:3c:87:30:3b:88:6e:a8:35:f1:66:90:aa:
be:23:32:81:ae:96:c6:af:b7:7b:47:51:f4:3a:2a:
93:b2:c2:7d:3a:87:29:08:02:a4:9f:98:60:5e:82:
9b:4c:f9:dc:a4:c4:c5:dd:3b:ab:6e:33:65:a5:11:
d3:0a:e8:7b:e4:ba:68:43:9d:5d:35:83:26:ab:9f:
c4:59:29:42:ea:43:2f:fc:7a:a4:ca:cd:07:39:bd:
25:f6:48:34:60:bf:95:80:8a:3c:4a:dc:09:af:6c:
30:5f:e9:d8:5f:e7:09:7d:64:b9:8e:78:fd:e1:12:
fd:81:91:62:e4:64:29:80:7c:84:34:89:57:4f:84:
b0:77:83:84:a4:c2:38:d1:8c:b3:25:99:fe:ca:25:
53:f3:63:2d:21:c4:23:9c:3b:26:9c:66:61:58:1d:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:8B:48:7E:EE:BE:AC:E9:AF:77:C2:E3:90:26:E2:E8:E6:69:96
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:42:95:2b:94:4c:7e:fb:2a:29:1a:49:43:a9:e9:c3:e9:
df:0e:75:49:e7:4a:52:66:65:60:65:7b:05:82:26:2a:e0:c7:
7f:51:04:13:97:55:3f:e5:a1:ec:ef:4f:c8:03:c9:e0:3f:41:
7c:ea:4f:ec:46:51:31:f5:57:c2:64:97:ee:59:58:2a:ab:3a:
b4:9b:46:d9:ce:61:55:5e:e6:fa:fd:c6:fd:19:11:ae:74:9e:
1d:8b:5e:4c:48:36:72:a3:54:a9:9d:42:fb:f4:e2:0b:3d:d2:
92:96:6f:56:4f:4b:71:f6:da:d3:f0:3b:99:d2:89:71:84:fd:
f1:0f:d6:0f:7c:b8:5c:01:1d:da:17:4e:02:24:60:fc:fe:de:
5e:a3:21:fc:ae:2a:75:e5:0b:56:96:6e:82:50:7e:71:74:d9:
43:10:ef:40:8e:10:9f:b0:ce:43:9d:26:20:27:c4:fd:eb:2d:
07:ac:0e:08:8d:2d:cc:09:db:95:c7:00:e7:fe:ec:65:6d:b3:
8e:18:71:e6:bd:39:30:75:f6:fd:19:d2:fc:52:e1:75:2e:80:
8c:2d:7b:00:84:3a:7c:b9:59:fa:9e:d5:d8:66:e8:91:4f:5e:
ed:44:7e:a9:2a:b8:6a:22:15:c3:60:98:9e:e1:77:02:69:3d:
e8:42:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:04 2026 by rpki-client