Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: cNSjx368Ipg3y2Am0qHRvsdA0ysobWQQ/Jo4lOS53z8=
Subject key identifier: 8D:A7:C4:D9:6C:45:FE:D8:68:FD:49:E4:38:32:37:DA:32:1D:F6:50
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019CABA1ECDCE669423CD3BE566AC7BC2361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0ABE
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: CqRYD9FhwtO71X8FdDwXFkods5551mrPosfmZlOpuIY=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ec:dc:e6:69:42:3c:d3:be:56:6a:c7:bc:23:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=8da7c4d96c45fed868fd49e4383237da321df650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:38:c9:45:39:8b:a6:47:92:57:16:e0:fd:
1d:db:08:a2:2d:fa:62:a6:9c:77:6e:65:ad:a4:9e:
c9:81:5a:0d:11:ef:b4:d2:96:67:b2:ef:72:3a:d9:
41:d8:3e:7e:ae:c1:0d:1b:7e:63:52:c4:28:4a:79:
ba:24:8a:0d:e3:8c:1b:86:80:a2:95:97:b3:a4:3c:
bf:41:35:b9:2e:21:99:a0:23:8c:0b:51:3c:a7:36:
02:3e:1e:ed:95:e8:b6:89:d7:aa:59:26:1c:cc:02:
6d:6d:9d:4c:7c:2f:1a:74:67:9e:ca:76:39:e1:01:
2d:5a:f7:b4:4b:bb:53:be:d0:55:22:c7:30:58:c1:
63:40:79:27:60:86:a7:45:41:f3:70:7b:d8:c2:df:
e5:b6:82:8c:e3:be:9a:a5:1a:2e:bd:78:32:df:11:
64:12:f8:e4:65:94:1a:b3:04:85:f3:87:12:e8:63:
bb:d2:ad:3c:91:bc:c7:91:73:c7:59:ea:98:00:dc:
2b:6e:24:86:c2:cf:f9:fe:1b:da:7f:78:13:c9:e3:
51:aa:25:c9:f9:7d:48:7a:ce:06:dc:c2:bc:02:ef:
45:73:4b:8e:81:75:37:57:7d:3b:01:46:1f:c7:16:
b0:e0:a5:df:d2:d1:7e:00:30:13:a1:b8:04:0f:13:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A7:C4:D9:6C:45:FE:D8:68:FD:49:E4:38:32:37:DA:32:1D:F6:50
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1d:62:e5:81:b6:2e:7e:a7:8f:14:be:4b:55:5d:1d:ee:dd:
e3:d7:90:d1:13:45:f2:bb:f6:fc:b4:72:1d:a0:ec:c0:b5:a1:
79:1a:6f:6e:fc:ec:dc:b1:6c:e2:62:55:0f:a6:ba:86:cc:41:
21:17:a6:2c:a2:cf:85:fa:8d:92:d9:69:f9:5e:43:ce:b3:83:
ec:7b:bf:c8:2e:d8:86:b2:d5:79:d8:b6:2e:c2:6e:5e:e6:52:
a3:eb:aa:fd:7b:98:8b:50:6a:dc:46:2a:93:b7:aa:ef:88:4b:
8a:c6:63:85:4b:57:4d:62:35:d7:f1:66:36:41:cc:7b:cc:ef:
09:32:f7:ad:88:d1:7b:fa:6a:e7:a8:1f:18:8a:ea:6a:9b:cd:
b9:e1:aa:2a:68:7d:a8:7f:38:39:4a:3b:db:de:e2:5e:bb:8f:
2a:d0:35:52:56:61:aa:1d:a9:b0:13:3f:ab:da:c1:13:d2:94:
c3:93:2b:d2:31:2b:3e:66:81:ed:0b:ac:ba:53:5d:bc:28:26:
72:cd:6a:2f:0f:2c:dc:39:44:fd:2c:ee:1f:7c:e5:fb:af:ac:
87:0e:3c:fe:cb:d1:6e:3f:41:02:d2:97:22:e1:9f:e8:ac:50:
dc:c7:28:b7:99:b2:d8:a4:1b:ac:f4:df:19:da:a5:a6:db:b5:
5e:a2:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:11 2026 by rpki-client