Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: L1oIJr1AuSq3jgDNIypgsYtsAGQbsk3Afbtg+br4n8I=
Subject key identifier: 9C:44:91:77:C1:71:86:B8:45:D5:F5:8D:E0:B7:84:7C:96:73:37:AE
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 019D99D091DE7856C77F52D7CBD782446FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 1817
Signing time: Fri 17 Apr 2026 05:01:15 +0000
Manifest this update: Fri 17 Apr 2026 05:01:15 +0000
Manifest next update: Sat 18 Apr 2026 05:01:15 +0000
Files and hashes: 1: od6HTbRFhmo0OmtuAcTadyxqJ_o.roa (hash: SE94fynzE1e+OXZNnakIBjjoFgfDLh4YMFdsKZ0xbjs=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: 4XhbsQ21yrN4/vVgJ3ljidgpHvU5MvLBP8oG8ZEl1Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:91:de:78:56:c7:7f:52:d7:cb:d7:82:44:6f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Apr 17 05:01:15 2026 GMT
Not After : Apr 18 05:01:15 2026 GMT
Subject: CN=9c449177c17186b845d5f58de0b7847c967337ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:6a:63:8e:b2:0f:8e:a9:22:c6:27:4a:d3:
81:fb:16:f8:84:4a:b0:96:f9:e5:c0:90:49:c8:ba:
2e:67:0a:ea:73:c1:a4:ba:b9:ee:d8:51:1b:43:c6:
37:9f:0b:7a:29:f3:5a:4b:6a:15:e6:ab:19:44:62:
82:d5:5b:bd:c6:60:58:cc:e4:12:a8:45:03:21:df:
ba:a9:16:99:89:0b:91:3e:6d:a7:62:4c:3f:44:66:
95:14:e0:52:4a:74:3f:5c:1b:ae:0e:31:1d:43:43:
a1:3d:c6:8b:37:1d:55:f4:b8:80:8b:14:2f:e6:57:
1a:38:58:4a:84:61:94:34:91:2e:53:b8:10:fe:05:
9e:3f:fb:b4:ce:31:56:d3:46:9a:4d:ff:a6:ce:21:
45:d5:de:a2:d2:5f:ae:29:b3:71:15:f3:d3:cb:76:
69:2f:a4:2a:41:8f:e6:14:34:8f:d3:45:21:7f:3e:
13:c1:19:1e:a8:20:e5:46:c8:f2:4e:f4:a5:e7:de:
28:c8:82:e1:78:08:c6:3d:3f:ee:3f:01:dd:42:d0:
73:46:43:c1:a9:bc:a9:73:c0:ea:4f:a9:10:8b:08:
5a:47:86:35:6f:e0:06:b7:1b:a4:57:76:f1:cb:48:
26:ff:7d:0c:b4:25:08:6a:e8:e6:94:6f:e9:78:31:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:91:77:C1:71:86:B8:45:D5:F5:8D:E0:B7:84:7C:96:73:37:AE
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2d:6b:23:9b:90:b6:5d:b8:10:e9:e7:0a:22:74:8a:2c:ae:
be:78:0d:3b:6e:33:6d:7c:bb:54:59:6c:a2:21:b0:eb:1d:ae:
92:ea:29:e3:91:4d:59:03:cd:81:5c:d0:46:07:2b:26:f5:ac:
f7:5c:7b:2d:ed:6d:66:f7:12:9d:6f:32:88:61:a2:fc:2d:0d:
c5:53:3f:32:07:ae:25:3e:d4:8e:61:be:28:4c:09:29:81:5c:
86:4d:32:5c:5d:f3:4e:c2:26:68:7e:af:a2:7a:35:81:c7:6b:
50:9a:a0:b0:d1:a1:0e:b8:f1:b1:06:03:b1:7c:f5:90:8a:e9:
f1:f1:c2:57:3b:93:f3:25:b7:79:ac:79:eb:c3:63:74:70:a5:
7b:60:a0:e3:98:2d:0a:67:d5:64:78:14:77:7c:eb:58:e9:d9:
0e:b9:5a:21:78:56:5d:a3:63:14:8a:0b:51:ab:80:9a:d0:0f:
dd:3e:ff:bc:cd:fa:20:b9:51:9c:71:6b:53:cc:65:b7:59:b4:
b3:10:2c:41:f3:db:1c:02:65:6c:6f:13:f5:57:f9:fb:af:e2:
23:e8:2e:14:40:a5:7f:70:3d:6c:e3:02:83:ac:76:64:1f:a3:
cd:3c:23:f1:f4:bf:8c:70:07:81:ec:a8:4f:ff:52:1b:c0:6d:
28:62:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:53 2026 by rpki-client