Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: lLR2HipmfEz2zeTaKKnMo6Vd4aURYY8hLpbHmzurV20=
Subject key identifier: 2A:C1:E1:B4:76:0D:6C:54:FD:86:36:D6:78:0F:82:7D:4C:D5:CC:54
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 019D98501B6B1DA8B6AA5B3919ACC52B8C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 0977
Signing time: Thu 16 Apr 2026 22:01:19 +0000
Manifest this update: Thu 16 Apr 2026 22:01:19 +0000
Manifest next update: Fri 17 Apr 2026 22:01:19 +0000
Files and hashes: 1: K7W2HCvsA8JxFMmzeilzEcsyppo.roa (hash: jiMWX4J6RYOzWaNm/5z8OYJi7Equ31upjXJ+Jtp8KZY=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: cqCU+NgfSxBIq9GjUhhAhggDNbie0l6K6K70+4ZauiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:1b:6b:1d:a8:b6:aa:5b:39:19:ac:c5:2b:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Apr 16 22:01:19 2026 GMT
Not After : Apr 17 22:01:19 2026 GMT
Subject: CN=2ac1e1b4760d6c54fd8636d6780f827d4cd5cc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:b6:36:48:a5:54:7d:a8:0f:24:33:d6:8e:
98:cf:c7:79:75:49:6a:52:ca:74:f3:49:92:21:c0:
d7:5b:31:06:77:87:3e:79:20:8a:88:08:32:9f:a8:
63:53:aa:fa:1f:19:06:a2:dd:76:d2:87:bc:d8:17:
9f:00:f0:2d:cb:35:69:d9:73:9b:d8:d9:64:3e:49:
95:f9:d4:59:61:ed:48:2d:f1:42:4b:2e:d4:77:34:
e0:1c:62:a9:69:12:84:06:d3:f2:b6:cb:dd:f2:9a:
c3:7f:75:e4:d5:fd:cf:25:ca:f2:5c:b1:a3:d5:67:
eb:8e:da:0e:c4:c9:ab:08:73:c9:20:e4:53:2d:62:
75:a4:34:23:0f:74:67:46:3c:8c:71:24:dd:b5:68:
61:b9:07:e9:4c:5c:de:6b:c4:ab:7b:c8:99:20:a7:
67:bd:4c:03:b6:61:f8:9b:86:34:e0:17:c2:3e:2b:
db:75:54:4c:25:df:5e:0e:00:bf:05:d9:7a:9e:cc:
45:8e:9b:af:ab:76:5f:56:31:69:e6:e9:47:2c:84:
f2:ce:7b:2a:8a:76:8d:2d:63:d7:a3:de:c5:e2:b6:
dc:f5:d9:7d:9d:b9:d5:7c:8d:02:58:5e:44:3a:a8:
92:73:7a:da:58:a1:3b:ad:6a:92:4f:37:39:82:95:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:E1:B4:76:0D:6C:54:FD:86:36:D6:78:0F:82:7D:4C:D5:CC:54
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ec:ce:9d:11:e1:f1:ca:08:e0:f6:d9:29:7f:61:01:b4:1d:
b5:d4:93:98:76:59:cc:7b:43:65:3a:d5:dc:42:08:40:6d:6c:
9a:9e:68:a7:12:2b:7f:fb:26:29:ff:d0:aa:16:3c:0a:05:e1:
e3:04:6a:80:70:a8:e1:62:cf:dc:76:f4:19:c3:65:4c:f9:11:
c0:0d:47:c2:75:02:87:d1:d0:26:82:c4:3d:a9:29:e7:db:5c:
22:53:bd:d5:9d:e8:23:dc:f3:4d:4a:63:e8:5f:de:d5:26:49:
2b:92:50:96:ff:f8:95:a7:37:a9:0c:f8:63:44:8d:32:94:de:
c2:93:77:7a:f3:e1:8c:61:d2:b7:2c:4d:4a:d2:f3:d3:48:98:
dd:35:81:f5:dc:fe:63:78:64:aa:bd:34:7f:57:f6:aa:08:74:
81:ab:3a:a8:32:ba:b8:f4:eb:28:78:fa:8b:04:b5:be:89:91:
23:90:d6:f0:38:c5:ca:3d:57:6c:fd:65:ea:cb:db:87:b5:1e:
cf:c4:e2:d5:90:fc:d2:45:74:51:ff:91:3f:f0:88:8b:d7:d5:
9a:5c:02:66:97:4f:b0:a8:64:ea:90:8b:2f:dd:e6:28:e0:40:
50:9f:8f:0e:ec:ab:98:79:89:8f:7d:25:ae:bb:36:c3:6c:31:
a3:40:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:49 2026 by rpki-client