Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: WPRBHosJBsvm801xf99JnZptfMnQh0VCD0VrcRZvu0Y=
Subject key identifier: 71:0B:D7:95:A8:59:72:F7:CA:94:26:D4:20:D0:B8:93:9C:AE:A2:6F
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 01A11B2BAF71D37C5AF65F1D3E0C0E15CE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0D0A
Signing time: Thu 08 Oct 2026 11:00:09 +0000
Manifest this update: Thu 08 Oct 2026 11:00:09 +0000
Manifest next update: Fri 09 Oct 2026 11:00:09 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: qhW/bdNHjykFsMCUR/N6TL2Tk1VhE57IxC2O1q9GBWQ=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2b:af:71:d3:7c:5a:f6:5f:1d:3e:0c:0e:15:ce:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Oct 8 11:00:09 2026 GMT
Not After : Oct 9 11:00:09 2026 GMT
Subject: CN=710bd795a85972f7ca9426d420d0b8939caea26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:be:60:22:bb:26:4a:02:41:6f:9d:5d:b3:
e7:fa:e7:49:a7:d5:d6:35:ef:73:78:6c:c1:d5:18:
39:a0:a1:1c:66:3c:99:19:a3:be:aa:c0:d3:0f:5a:
d0:f5:52:dc:90:24:1a:86:25:ff:ac:5a:18:b8:e0:
e7:a9:83:a4:ce:74:d1:f0:a3:a9:50:4f:56:b5:5d:
3e:64:97:eb:80:56:ee:ac:ad:37:5e:7c:31:72:37:
97:10:bb:65:65:35:a8:4e:07:a4:0b:e9:43:69:c2:
d1:26:aa:78:19:7a:65:ae:95:f9:1f:29:2a:b9:1a:
d9:d3:dd:4a:59:c9:1b:11:df:a5:8c:30:63:75:09:
eb:80:52:a4:9b:56:a1:a7:23:dc:e4:ed:7c:bd:c9:
7b:c0:9d:96:5f:64:5d:48:9a:82:34:04:18:67:75:
f1:58:7c:4d:7b:7f:33:50:f9:db:a3:aa:f0:4f:9a:
76:2b:d1:41:af:01:43:ed:df:4d:b1:d1:bc:c4:4c:
94:a3:8f:ca:4e:35:ca:a6:7e:e2:14:45:63:69:70:
f8:09:75:79:d8:04:51:08:0b:9b:96:15:7b:79:26:
21:84:26:e4:60:a9:93:7f:fe:74:ec:c0:24:0a:14:
47:7c:df:12:82:77:e2:60:c0:e1:57:b3:01:ef:13:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0B:D7:95:A8:59:72:F7:CA:94:26:D4:20:D0:B8:93:9C:AE:A2:6F
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:80:26:7c:45:5b:39:5d:b1:e4:14:c7:d9:1a:a4:6a:26:36:
fb:0b:35:35:13:76:a5:cc:2b:52:cb:10:6f:d1:db:e8:c8:58:
b4:63:64:6d:e0:9b:b2:f0:1b:63:c3:58:d8:26:15:36:58:e1:
ae:45:ed:7b:b5:54:3d:11:5c:2f:fb:c8:7c:05:33:6b:e3:2b:
7c:1d:fc:40:ea:29:e4:5e:1d:bd:35:2e:0c:11:61:1b:4f:5a:
2c:7b:a8:84:a4:1e:66:f7:2d:34:b8:0c:f1:69:36:cf:b4:6e:
4b:17:e4:bb:01:5b:89:2a:2c:9d:8e:85:fb:a9:dc:57:1e:a4:
0f:ba:d3:85:18:2b:1b:4b:ff:48:2b:f0:07:81:94:1e:9e:80:
91:33:1b:c3:0f:2f:07:4e:e5:4a:90:a8:d2:22:20:99:7f:17:
80:f6:6d:24:eb:f6:27:d6:d7:fe:87:44:20:0b:55:3b:4c:e5:
77:9e:40:16:3b:a8:6a:b8:04:02:58:be:62:fb:5d:ef:c7:df:
78:b3:00:57:e6:f5:2d:bc:1d:1a:e8:6c:f5:2e:9d:34:e5:d8:
cc:96:28:5d:2e:81:37:05:4d:08:32:30:43:74:4e:7d:00:d9:
c0:8a:ab:5d:ec:ed:30:85:b2:98:94:6d:68:42:a6:3b:c3:27:
bd:af:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:29:48 2026 by rpki-client