Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: TcERvlyxCXj8FMGKb2mHh9dXPwYb3GHS6uIfMBNjpMo=
Subject key identifier: 3D:1D:78:CC:07:1E:D8:7B:45:2D:F5:FF:6E:E4:AB:38:3C:96:B5:1B
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019D9B19D3A61E382A91A78BF49728CDBDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0B3A
Signing time: Fri 17 Apr 2026 11:00:54 +0000
Manifest this update: Fri 17 Apr 2026 11:00:54 +0000
Manifest next update: Sat 18 Apr 2026 11:00:54 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: aEv0iQSasDnlptJagHCZleYyl+srhZn58YswI4GB41k=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d3:a6:1e:38:2a:91:a7:8b:f4:97:28:cd:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Apr 17 11:00:54 2026 GMT
Not After : Apr 18 11:00:54 2026 GMT
Subject: CN=3d1d78cc071ed87b452df5ff6ee4ab383c96b51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:aa:75:97:c7:4d:b2:1e:56:8a:ad:04:ae:
3b:ed:c5:7e:7e:51:9f:91:4e:ea:51:71:78:52:a1:
3e:c6:2b:3a:08:5e:60:65:79:4a:42:48:20:6e:be:
26:04:d8:70:2e:31:22:9f:c1:bd:f8:4b:28:53:7b:
75:18:62:0d:20:65:77:2e:17:49:79:05:9d:e1:14:
5c:a0:3e:0d:4f:68:27:0d:b1:1c:ba:a7:e2:bc:50:
5d:40:95:c6:57:66:7c:ab:50:81:a0:9e:51:7c:3c:
98:3c:7c:8a:cd:ff:bb:90:ec:36:41:17:8d:e1:01:
8f:bc:84:31:7a:af:a9:b0:58:f5:8b:65:61:2c:8f:
8b:3a:12:1b:39:bd:15:59:91:bd:8b:f4:69:9a:6d:
5c:f5:b0:6c:a0:19:41:52:52:91:1b:44:a9:d3:ba:
de:7a:07:14:2b:f4:ba:c4:ab:96:66:08:65:4d:f4:
ec:97:00:27:21:24:58:8e:40:ab:4c:35:5c:b2:28:
cf:8e:8a:f5:48:42:a7:88:c8:12:42:49:02:c4:c0:
50:bf:d2:ed:7d:46:f6:a5:bb:05:54:21:34:6e:ae:
89:43:63:6b:84:9a:a7:ed:2b:38:5c:ff:cd:09:c0:
40:93:4e:31:9b:63:d2:13:01:c6:58:68:7e:b0:f2:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1D:78:CC:07:1E:D8:7B:45:2D:F5:FF:6E:E4:AB:38:3C:96:B5:1B
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:1e:c9:33:41:c2:dd:d3:25:fd:9f:46:71:7a:42:c6:db:
ca:1b:24:d8:3d:38:70:3c:90:b4:a7:d2:bf:8b:ec:43:11:3b:
57:12:35:d7:a4:fe:d9:b9:92:80:68:23:a1:bc:91:2d:3b:3e:
2d:29:af:1e:74:50:35:88:26:39:3a:0f:3b:10:f5:58:7b:2b:
f4:52:c0:de:fe:e1:51:cc:56:2b:99:4a:45:21:9b:be:3a:b7:
1a:e5:3f:b7:78:6b:f1:99:ed:21:86:79:ca:27:f2:50:ec:be:
4f:f0:de:ae:03:7e:a9:d9:39:8a:b6:13:0e:39:49:27:94:75:
ef:ee:55:ad:f8:6a:6c:8b:dd:27:24:7a:ae:fe:8c:0e:92:90:
81:07:54:2e:20:d1:da:0c:e2:01:d4:69:8f:3f:d3:e8:25:79:
7a:29:82:a4:64:cf:b1:20:a5:13:1e:ba:58:21:de:4b:48:b4:
2e:3d:23:6e:c5:5f:75:c1:b7:c0:9f:48:ad:2c:fa:02:cd:41:
44:93:5c:cf:39:67:79:10:60:66:12:32:2e:d9:0f:21:a3:61:
90:c3:62:77:82:a7:f1:64:8c:99:a4:3f:37:05:f6:04:c6:b8:
78:27:92:c6:4f:7c:b7:e1:70:0f:cf:f5:5c:26:23:10:ac:ce:
cf:ed:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:28 2026 by rpki-client