
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: Bi6vySA3R7uWY6WPcI3FlV/vNDjXtgd3KsQ1P167LVg=
Subject key identifier: B4:8A:60:D1:B9:EE:DE:EB:B0:C9:40:F9:55:94:C8:B5:28:9C:39:59
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 019CAE3598B0A432E5BF8D7C4437496CEBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 179D
Signing time: Mon 02 Mar 2026 11:01:13 +0000
Manifest this update: Mon 02 Mar 2026 11:01:13 +0000
Manifest next update: Tue 03 Mar 2026 11:01:13 +0000
Files and hashes: 1: od6HTbRFhmo0OmtuAcTadyxqJ_o.roa (hash: SE94fynzE1e+OXZNnakIBjjoFgfDLh4YMFdsKZ0xbjs=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: +JX1X5mbk+aKO+8+Z5742lQRGWKkoBN25QC+JjbnLlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:98:b0:a4:32:e5:bf:8d:7c:44:37:49:6c:eb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Mar 2 11:01:13 2026 GMT
Not After : Mar 3 11:01:13 2026 GMT
Subject: CN=b48a60d1b9eedeebb0c940f95594c8b5289c3959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:c0:58:5c:fb:05:e5:5d:b2:da:f4:1c:86:
e8:b8:23:b7:35:eb:58:8e:02:f9:24:fb:42:34:2d:
7a:d8:1a:ca:ef:ed:bf:7f:ff:f4:d6:5d:ba:53:06:
23:6f:b7:54:a9:0e:3c:67:2a:d5:80:df:81:38:2c:
fc:c7:7c:9e:92:11:64:ac:1b:1a:55:7d:c6:41:26:
fd:57:fc:a4:96:69:4f:9b:30:74:1c:91:a4:e8:55:
08:1d:f5:90:ef:a9:51:81:13:2d:0a:64:20:51:f9:
ec:22:83:0e:d3:d9:65:7e:92:59:96:e5:84:c2:92:
8a:01:69:12:c0:de:7a:37:0a:25:b7:ae:1c:10:01:
fa:cd:e2:b9:32:32:66:35:3e:45:9d:7f:97:a9:d4:
60:fd:0c:05:88:84:8a:d2:e7:0b:d8:ab:59:f5:d3:
68:70:6e:a4:74:1f:2e:87:9b:8c:d1:b2:db:7c:e8:
d5:fa:26:c8:3a:ab:1f:1e:66:24:17:5b:a7:80:fb:
6f:8c:26:17:62:fe:3a:23:60:36:7f:cf:ab:7d:22:
fb:53:0a:d8:8e:5e:9d:8a:b7:cc:90:49:82:36:ae:
14:ad:15:d7:a0:7f:50:d3:ab:c2:cf:60:05:f1:db:
97:9a:d1:8a:1d:cf:0f:e4:e6:7b:0f:af:60:9d:af:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:60:D1:B9:EE:DE:EB:B0:C9:40:F9:55:94:C8:B5:28:9C:39:59
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5c:20:45:fa:36:e6:07:42:ec:13:02:95:83:47:39:03:3f:
f2:04:97:e1:9c:f0:ad:4a:a4:41:79:6f:4b:15:bd:d2:9c:94:
69:cf:c7:df:cf:1e:82:c4:8e:2d:d8:e1:d2:03:0e:d2:6b:99:
bb:3b:fb:b8:cd:24:b3:e5:a9:82:d8:a5:0e:51:aa:ed:d7:10:
b8:b7:bd:8f:6c:ca:21:67:e2:8c:ae:bf:dd:7b:9d:b1:f9:99:
fe:46:0e:68:6b:8d:cc:7d:50:71:91:9d:46:fa:f8:ac:ba:c6:
0f:91:08:6a:40:9e:2f:dd:f8:85:a5:14:8d:b6:49:76:69:ba:
ca:57:d0:9c:2e:5e:d5:26:73:ed:7f:29:2e:5b:5a:67:39:3c:
3e:7f:1b:73:39:66:a1:cf:16:ac:b2:3d:90:3f:50:9f:3d:30:
98:eb:77:1f:08:40:1d:50:44:c8:b4:5c:7c:c4:04:e8:9e:75:
4e:45:2e:40:6c:b8:de:d6:f6:d0:6b:20:0d:ce:62:79:d3:a9:
52:81:f5:df:28:95:3d:86:93:d1:41:88:b8:e6:d4:de:69:df:
e3:c2:bd:01:f2:b2:62:46:8d:f1:96:12:88:ef:09:4a:c9:34:
89:a6:c8:1f:0c:f9:d0:8c:57:e7:3f:64:d5:37:94:d1:f7:ff:
97:1c:c8:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNZiwpDLlv418RDdJbOvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0MmQ3Y2JhZmM5ZGQzMjA1ZDI0N2Q2NjJkODVhZmRk
OWExODYwHhcNMjYwMzAyMTEwMTEzWhcNMjYwMzAzMTEwMTEzWjAzMTEwLwYDVQQD
EyhiNDhhNjBkMWI5ZWVkZWViYjBjOTQwZjk1NTk0YzhiNTI4OWMzOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnbAWFz7BeVdstr0HIbouCO3NetY
jgL5JPtCNC162BrK7+2/f//01l26UwYjb7dUqQ48ZyrVgN+BOCz8x3yekhFkrBsa
VX3GQSb9V/yklmlPmzB0HJGk6FUIHfWQ76lRgRMtCmQgUfnsIoMO09llfpJZluWE
wpKKAWkSwN56Nwolt64cEAH6zeK5MjJmNT5FnX+XqdRg/QwFiISK0ucL2KtZ9dNo
cG6kdB8uh5uM0bLbfOjV+ibIOqsfHmYkF1ungPtvjCYXYv46I2A2f8+rfSL7UwrY
jl6dirfMkEmCNq4UrRXXoH9Q06vCz2AF8duXmtGKHc8P5OZ7D69gna9WHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSKYNG57t7rsMlA+VWUyLUonDlZMB8GA1UdIwQY
MBaAFKYOQtfLr8ndMgXSR9Zi2Fr92aGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzkt
NjQxZDQ1NjI4M2M0LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzktNjQxZDQ1NjI4M2M0
LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFwgRfo2
5gdC7BMClYNHOQM/8gSX4ZzwrUqkQXlvSxW90pyUac/H388egsSOLdjh0gMO0muZ
uzv7uM0ks+WpgtilDlGq7dcQuLe9j2zKIWfijK6/3XudsfmZ/kYOaGuNzH1QcZGd
Rvr4rLrGD5EIakCeL934haUUjbZJdmm6ylfQnC5e1SZz7X8pLltaZzk8Pn8bczlm
oc8WrLI9kD9Qnz0wmOt3HwhAHVBEyLRcfMQE6J51TkUuQGy43tb20GsgDc5iedOp
UoH13yiVPYaT0UGIuObU3mnf48K9AfKyYkaN8ZYSiO8JSsk0iabIHwz50IxX5z9k
1TeU0ff/lxzIhw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:17 2026 by rpki-client