Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: npaak1yQxW+1WQ/L7GwVmqdSezouG6oCoJ/eKs4BpHE=
Subject key identifier: 16:DF:B8:52:C1:3C:7E:B1:09:41:6C:42:C0:5C:34:45:A3:2F:35:42
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 019CAAC67E9D7C89F9EF669130AC8A7A7FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 08FC
Signing time: Sun 01 Mar 2026 19:01:01 +0000
Manifest this update: Sun 01 Mar 2026 19:01:01 +0000
Manifest next update: Mon 02 Mar 2026 19:01:01 +0000
Files and hashes: 1: K7W2HCvsA8JxFMmzeilzEcsyppo.roa (hash: jiMWX4J6RYOzWaNm/5z8OYJi7Equ31upjXJ+Jtp8KZY=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: Ia58rsMNE+jTQTSUG7ibYCEs6S1TwP62XXzJ8IZDYCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7e:9d:7c:89:f9:ef:66:91:30:ac:8a:7a:7f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Mar 1 19:01:01 2026 GMT
Not After : Mar 2 19:01:01 2026 GMT
Subject: CN=16dfb852c13c7eb109416c42c05c3445a32f3542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:82:3d:4c:5d:ac:88:98:bf:07:84:0c:8f:
da:3c:5f:2d:03:57:f8:b0:af:42:d0:28:5c:dc:bc:
9f:9e:8e:28:51:c9:e1:1f:a9:12:de:7c:62:7e:7b:
97:70:6e:eb:46:a5:b1:6d:35:41:5c:fe:23:fc:53:
1d:49:c3:e8:95:6f:07:4e:a1:0c:96:4d:31:14:2c:
68:9e:8e:94:5c:6a:d3:b6:44:08:18:20:29:34:dc:
b2:f0:8c:7d:9e:a6:b1:6c:47:2e:7a:d9:89:6f:8a:
b8:c5:06:35:8e:e1:40:69:8e:8e:9b:8a:d7:36:1a:
44:9c:6f:9b:f7:01:6c:94:bf:2f:78:2a:b0:05:92:
07:43:6d:af:41:fb:c6:a3:75:8c:b0:b5:d2:92:01:
2d:e2:ab:f4:b5:f3:53:f8:91:b8:74:a7:9f:f0:9c:
b7:db:67:10:87:e1:22:19:cb:c4:d4:8f:dd:27:e1:
24:af:29:11:76:14:9d:aa:b2:04:fa:ed:c2:08:3c:
3c:dc:3a:27:ed:98:10:e1:76:8b:22:c3:a8:9c:0c:
bb:80:0a:34:8e:9d:66:76:6c:33:67:27:46:90:39:
52:26:fa:7e:3b:8f:51:cd:77:62:ce:d0:06:dd:76:
ca:9b:ac:52:61:5c:08:5c:7e:59:fb:66:75:10:95:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:B8:52:C1:3C:7E:B1:09:41:6C:42:C0:5C:34:45:A3:2F:35:42
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1e:59:e7:1f:10:b3:74:90:59:a2:f4:4a:ea:7b:ff:c6:31:
3f:08:19:d8:10:27:6d:ee:e0:e8:ec:63:03:de:57:9d:62:84:
ce:c3:09:dd:dc:d4:d0:d2:5b:fa:88:6b:df:73:61:b2:9b:69:
04:14:f9:37:a2:89:9f:3f:1b:8b:90:48:75:8c:0a:e2:47:a5:
3d:d0:d6:fb:5e:56:bc:4b:1e:cb:8f:7b:f5:ab:81:55:56:ad:
54:a9:24:12:35:9c:30:ca:13:e3:86:68:47:b4:ea:bb:2c:75:
9e:16:f5:2c:cb:bb:28:2b:11:31:26:9e:e4:17:6f:cc:af:9c:
4a:54:0a:70:67:82:18:d6:6d:98:77:11:ce:b4:b2:66:57:b3:
0a:3c:bf:81:e4:70:b4:9c:49:19:bf:75:cc:27:f7:c9:f1:40:
01:94:7d:e1:2d:56:d5:3a:b9:14:7e:df:d8:f3:37:14:5a:f8:
c9:95:77:1e:fc:4a:32:d8:6c:23:4e:31:db:e8:70:e1:61:7c:
f4:97:68:e7:07:6e:1d:2d:86:88:0e:c0:4b:24:9e:a1:6d:5b:
38:43:f8:14:62:8d:9c:40:bb:35:39:28:89:0f:a6:61:2e:aa:
49:c9:8b:b1:34:ff:aa:4b:cf:f8:5b:2e:39:a8:c5:ae:ca:db:
e3:a7:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:48 2026 by rpki-client