Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: SHv5Z0AdHvsqY0XwVB8XsAxT5cBsXsI3cKpIjnMJHzc=
Subject key identifier: 4A:D4:F1:8C:40:73:44:3A:97:DD:06:21:C0:3F:1E:D9:26:95:AF:8B
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019EC2C9EBAA15FB3DAF98F31DEDCE487173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 10EA
Signing time: Sat 13 Jun 2026 21:01:13 +0000
Manifest this update: Sat 13 Jun 2026 21:01:13 +0000
Manifest next update: Sun 14 Jun 2026 21:01:13 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: XzmIj6LFJbHPmzhb9RNk0ehdsGikPygQq8DNanbtOho=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:eb:aa:15:fb:3d:af:98:f3:1d:ed:ce:48:71:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jun 13 21:01:13 2026 GMT
Not After : Jun 14 21:01:13 2026 GMT
Subject: CN=4ad4f18c4073443a97dd0621c03f1ed92695af8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:bb:81:6c:a1:4d:ed:17:72:e0:df:93:e8:
9e:9f:eb:f9:89:c7:ad:06:0d:e9:e3:72:ec:f9:2f:
de:9e:02:96:79:9d:06:0e:fe:af:c3:53:f8:dd:43:
ad:43:21:56:c3:87:8b:55:36:94:82:c7:84:76:70:
14:3a:5c:b9:05:7f:f4:9d:b4:2d:45:04:a5:88:2b:
50:1e:3f:38:36:41:31:2c:eb:cd:7e:53:0c:f3:65:
83:9d:62:dc:da:fd:a2:cb:6f:34:5d:f6:f6:95:1d:
71:dc:aa:f9:e4:85:54:3f:93:b8:92:79:5d:24:9b:
5e:ab:45:ef:fb:88:36:e6:39:bf:1a:5a:f4:2d:9b:
0f:00:06:df:b8:ec:ac:41:16:3c:b0:5f:ea:d4:45:
12:41:6f:a3:85:40:e6:0a:de:0d:e9:da:28:d3:d0:
12:e9:66:b1:d0:4e:23:b2:ac:37:d7:5c:cc:16:99:
c6:44:1d:86:8e:79:3d:d5:87:b7:df:ea:6d:a2:cb:
5c:2f:74:81:5c:1b:b5:3a:b5:fc:a3:ac:8d:a8:78:
70:0a:3c:48:0f:c0:d9:53:a5:3f:7d:f2:fa:b7:fd:
79:d0:0f:45:2b:2e:2d:49:23:d3:2d:4f:f4:0c:cf:
67:97:a1:8e:b0:ae:7d:69:b1:5e:ec:dc:10:a7:84:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D4:F1:8C:40:73:44:3A:97:DD:06:21:C0:3F:1E:D9:26:95:AF:8B
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:49:bc:3d:5c:4c:ec:6e:1e:82:19:ff:1f:a6:32:a4:e3:
db:67:0e:90:23:e0:0b:b7:0e:44:34:fb:91:8a:57:f2:cd:7a:
4a:2a:67:c2:48:33:3d:84:7d:c6:a7:95:e2:d9:8f:09:16:24:
b5:08:7c:4e:07:c5:1b:00:04:25:73:b6:a4:d0:df:70:36:b3:
88:6d:eb:97:41:bc:83:3e:cd:44:dc:c0:9f:04:e3:4b:82:89:
0f:00:fe:e1:b4:71:d0:8d:07:d5:83:10:2b:96:b2:19:88:3e:
e0:54:7e:32:d1:6f:17:a8:a1:85:da:af:b6:b9:6d:90:ef:90:
0a:00:21:65:6a:2c:af:c5:96:03:10:aa:42:1f:30:f1:28:53:
9a:68:fd:4a:25:e3:15:08:5e:12:ec:e8:29:ec:99:71:4b:19:
67:36:ed:0e:57:04:ef:a4:cb:1b:5f:d4:ee:f8:cd:3c:d6:87:
da:df:d3:84:ac:ad:38:c5:c6:7e:7f:b0:67:d9:ea:e3:c7:e2:
09:a0:e5:31:6e:28:c5:20:48:12:4d:04:17:bd:a7:e3:f7:fd:
31:c2:fa:9c:f8:01:80:80:fb:ef:ea:54:4d:3d:5d:77:24:f1:
11:9e:d8:c6:e3:ae:ca:ed:a9:ee:ed:2f:98:30:bc:13:cd:bc:
0f:0f:77:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:10 2026 by rpki-client