Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: oQsGsxIM04a3FHZ2d7nnEXRg8TD4UVvsSauuICthNas=
Subject key identifier: FF:78:E5:40:88:2C:D9:76:6B:03:4F:2B:6D:78:A4:9A:94:B8:68:CE
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 01A0D3EF43CF5F9DD69C44782FFDFB73197D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 11FC
Signing time: Thu 24 Sep 2026 15:01:08 +0000
Manifest this update: Thu 24 Sep 2026 15:01:08 +0000
Manifest next update: Fri 25 Sep 2026 15:01:08 +0000
Files and hashes: 1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: 9Beaqb9mhv47TAxdVi5IC5phnWUodYDzu6rbF/LNfhQ=)
3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:43:cf:5f:9d:d6:9c:44:78:2f:fd:fb:73:19:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Sep 24 15:01:08 2026 GMT
Not After : Sep 25 15:01:08 2026 GMT
Subject: CN=ff78e540882cd9766b034f2b6d78a49a94b868ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:09:8c:ce:31:d3:2e:5c:19:6a:bf:99:76:
51:c4:04:ed:5e:f7:d8:be:d0:0c:63:b7:5c:19:ff:
fc:76:d5:5f:10:6e:32:97:3a:41:f2:2d:8b:08:53:
1e:9b:da:5c:17:a8:81:97:55:7d:40:22:56:36:49:
f2:36:19:c8:ec:70:d8:b5:f6:f3:d3:28:37:88:08:
9f:74:af:4f:e6:e0:40:20:05:c1:77:d2:9a:d8:6c:
04:d8:40:ca:09:e9:72:34:0e:3f:f9:b7:6b:4a:29:
70:97:7f:9d:eb:5f:9c:5e:f5:55:d6:62:39:cc:00:
df:2a:fe:33:ba:ff:77:04:44:87:d2:ca:9f:ef:48:
bf:cf:e3:0c:a7:6e:8b:b5:fa:e3:aa:bc:72:9e:80:
2a:46:2b:8a:3e:24:5d:eb:30:bf:b5:3d:29:69:59:
8b:c0:59:4c:e8:94:d6:21:c0:73:c7:f9:10:d0:11:
ed:d9:e7:78:81:97:7d:40:00:fe:b4:bd:e7:86:ab:
0d:62:06:11:ef:23:82:0f:7a:fd:2f:b9:db:33:19:
e8:22:19:c7:67:a3:ee:82:d6:d3:77:94:9f:f8:57:
12:20:6f:ab:b0:cc:28:23:32:c0:40:91:62:14:95:
fc:91:97:c4:ce:71:dc:26:3a:12:a0:a7:21:37:78:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:E5:40:88:2C:D9:76:6B:03:4F:2B:6D:78:A4:9A:94:B8:68:CE
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:08:80:16:60:26:73:4a:82:88:6a:aa:fa:61:2a:70:6c:a2:
6c:1c:a1:42:16:0e:2b:1a:9d:a7:00:73:08:ac:56:de:67:b4:
cf:f8:f5:f2:c8:24:d2:da:99:16:65:6f:07:6b:3d:04:ac:37:
55:c8:20:36:72:65:75:cd:4b:e8:7b:be:89:5a:75:11:7b:19:
b7:ca:7f:89:f0:49:53:bd:d4:d5:e4:82:ba:78:3d:c7:25:a1:
59:8a:08:5b:19:f1:15:0a:82:18:95:06:9a:e9:12:51:eb:e7:
ef:95:ba:cf:94:f9:f4:54:fb:6c:a5:0e:d4:dc:96:4e:37:a2:
7c:83:6e:00:f6:7c:d2:cc:03:32:e3:bc:5d:a0:36:9b:d2:43:
a0:68:28:af:b1:68:55:e6:70:c6:37:36:40:80:07:f3:53:24:
9d:10:26:0d:6d:46:9d:73:bd:55:be:2c:02:57:84:ad:78:66:
a7:c4:33:ce:47:75:0e:94:12:f9:ee:e8:53:6c:be:bf:82:ae:
44:d6:49:cd:70:f4:99:1c:82:6d:8e:8e:10:58:43:7b:59:d7:
29:cb:f6:07:c2:6c:0f:1b:dd:04:83:06:a2:13:54:08:e1:40:
64:7f:88:c6:8f:60:6e:52:fe:2d:b1:bd:23:ca:04:a5:59:16:
0e:87:9f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:19 2026 by rpki-client