Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: wy8BHdIO42aoDN78xgl78xk+N3QN4PtJBuBvzbeZi0E=
Subject key identifier: 62:68:59:29:08:AA:91:53:01:84:14:C1:D2:41:C7:E4:D8:B7:32:3B
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019CABDA0320919523EC187BF4D139C867AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0FD5
Signing time: Mon 02 Mar 2026 00:01:57 +0000
Manifest this update: Mon 02 Mar 2026 00:01:57 +0000
Manifest next update: Tue 03 Mar 2026 00:01:57 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: 2MUpW+tbpQs4CYuqGCf6KZyWEJo1Emz41TEcrq435MU=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:03:20:91:95:23:ec:18:7b:f4:d1:39:c8:67:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Mar 2 00:01:57 2026 GMT
Not After : Mar 3 00:01:57 2026 GMT
Subject: CN=6268592908aa9153018414c1d241c7e4d8b7323b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ad:e4:a8:f4:a6:30:13:9c:fe:0b:00:7f:4a:
f9:2e:11:bd:c3:99:eb:a2:29:6d:bb:f9:af:fc:f5:
a3:f5:3b:1d:6f:d7:29:3b:34:0e:14:17:75:04:b0:
10:14:4f:6d:5b:35:2d:14:c6:56:07:6f:37:25:9e:
3c:97:3f:51:b4:c7:ff:c2:10:8b:9d:89:5d:c4:08:
8f:51:0d:35:10:70:8f:84:10:58:ae:5a:42:37:57:
9c:0f:e1:ef:c2:24:9d:87:bd:81:d1:a7:84:98:cd:
cb:83:0f:47:a2:6c:e4:87:b6:46:ae:d1:5b:3f:8f:
c1:0d:35:e4:2e:c1:cd:cf:b7:1c:62:79:d3:be:1e:
62:a6:18:04:51:f1:70:16:7f:86:d9:02:2a:17:1a:
b8:42:03:72:08:65:04:3a:29:f9:b5:e7:35:89:ad:
06:66:19:16:ef:75:05:be:bd:18:ba:64:78:22:dd:
97:e9:4b:4e:b4:82:47:30:cb:cf:d9:b3:0a:64:68:
3c:88:11:db:21:31:2a:0f:f5:e7:f6:f2:42:26:07:
59:44:82:8b:ac:c5:02:2e:49:4f:b2:d4:ef:bf:e0:
4b:e2:66:e4:4c:47:61:94:f5:e8:ba:c2:e7:e3:0d:
07:a9:e3:42:3a:7a:6e:5a:08:7d:75:70:99:4d:81:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:59:29:08:AA:91:53:01:84:14:C1:D2:41:C7:E4:D8:B7:32:3B
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:4f:55:3f:a0:01:20:88:3d:db:30:7e:54:c6:d5:56:9e:
cf:d5:5d:97:a8:f0:43:ee:90:4b:ae:09:90:d5:3e:4e:a3:ab:
76:15:b7:38:62:fc:c0:9b:ac:8f:ee:18:19:31:39:26:46:67:
a4:ea:14:c5:97:1c:99:d3:62:67:9d:a6:11:2d:60:26:6e:44:
69:ab:a6:3f:39:e4:16:47:d6:ab:1b:bc:f0:03:14:cc:7e:7e:
64:40:47:5d:c5:d3:55:c7:ca:dc:f4:c7:e6:16:d8:d0:b1:27:
90:52:ab:b9:eb:7d:fb:c7:3f:3f:01:4e:b2:90:96:1f:22:b0:
52:8f:27:59:44:08:30:73:f1:6b:84:40:08:67:72:73:4b:11:
c2:fc:45:c4:57:46:a3:63:7e:8a:32:89:0c:0f:c7:65:77:ae:
d8:ac:c3:e1:41:22:2e:bf:a2:ab:bd:cf:fb:b7:3f:78:a1:ee:
27:46:28:44:55:f6:8b:60:fd:7d:73:42:22:9a:79:3b:2a:9b:
67:12:d2:78:6a:43:c6:7a:84:c7:ba:63:f8:f5:42:c7:e0:7d:
a5:c9:09:0a:7a:0f:80:1b:4f:1a:bd:3d:cd:e7:3a:3e:99:90:
49:49:36:9f:27:06:52:f7:4c:c6:49:6d:6f:ab:c7:d4:07:58:
61:20:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:50 2026 by rpki-client