Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: OL0qBBcc4/CP1QgyS/K95lpZI6Wa4yZyFGXCJQ/yehw=
Subject key identifier: 63:87:97:6E:BB:B3:00:17:D9:36:86:48:BF:BC:55:9E:7A:0A:89:B9
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019FAA50544F7A9365AED4DC0D0006BAF11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0C4B
Signing time: Tue 28 Jul 2026 20:00:18 +0000
Manifest this update: Tue 28 Jul 2026 20:00:18 +0000
Manifest next update: Wed 29 Jul 2026 20:00:18 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: xZvQZBdfejloS2Qd4bsX3797lE8mgco1YrIH9PQXEII=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:54:4f:7a:93:65:ae:d4:dc:0d:00:06:ba:f1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Jul 28 20:00:18 2026 GMT
Not After : Jul 29 20:00:18 2026 GMT
Subject: CN=6387976ebbb30017d9368648bfbc559e7a0a89b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:af:34:ed:25:08:bb:cb:06:01:ab:89:1c:
21:4b:51:22:40:24:5f:ab:d5:86:65:d6:1a:72:93:
ad:c4:e9:85:28:70:d6:72:81:a4:f5:da:1f:83:58:
cd:60:0f:f1:63:3f:d5:aa:86:b3:52:1b:73:89:10:
07:6a:53:7d:1f:f8:a5:9a:6a:5b:ad:ca:5f:21:0d:
3c:ee:d4:ca:f3:a7:f2:c7:ab:88:17:92:cd:78:ec:
46:8d:fe:d2:ef:d1:a4:83:ae:c7:29:f9:c4:ea:d8:
b9:8e:a9:79:ca:97:01:84:38:dc:9c:2d:49:44:2c:
ba:bf:5a:f1:9a:3b:cf:ba:bd:81:d8:c9:f2:2a:03:
ae:34:04:78:56:6e:42:48:f3:6a:12:ce:53:dc:b9:
ee:1f:80:ad:e0:1d:b2:e8:0a:e3:95:bc:09:41:54:
e7:91:09:e9:52:4e:8b:e9:72:f1:b2:55:de:e0:78:
ad:e8:ed:26:46:6d:96:e6:61:b5:89:6c:6d:c4:59:
df:99:83:e9:21:5b:c8:73:28:ae:21:b5:20:d9:1a:
7b:74:71:bb:5e:c2:d5:ea:b3:a1:32:5e:7c:5c:af:
0d:a0:b3:0d:b7:ff:70:0e:8c:f5:44:ef:e2:70:57:
a6:74:4a:b7:50:40:eb:e9:1f:15:d8:04:78:4d:54:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:97:6E:BB:B3:00:17:D9:36:86:48:BF:BC:55:9E:7A:0A:89:B9
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:81:bc:48:b7:d5:65:96:73:c7:4d:cd:50:5a:ec:aa:5a:f9:
67:f7:97:6b:9f:a3:0b:7a:1a:47:7d:69:84:56:08:94:ff:83:
45:02:2a:a8:0f:6b:d3:cd:af:fc:00:da:c3:a5:f5:60:a5:68:
94:ce:0c:9e:dc:4f:b5:18:8c:ba:09:71:d0:c6:6e:63:25:d7:
5f:66:a0:90:11:74:c5:53:16:56:89:4b:16:b6:26:ac:99:dd:
23:9e:e4:fa:35:6e:80:39:41:0c:bc:1b:b9:23:20:80:c9:f6:
82:c5:e7:37:9e:45:7b:0b:98:5b:17:18:d9:27:64:e4:0c:f6:
6e:b7:8f:31:3d:8e:42:2f:52:03:91:23:ff:94:97:16:8e:b0:
22:51:c7:1f:87:e2:20:9e:e4:47:fe:d7:32:8c:8f:94:e4:ed:
6a:f6:7e:ea:a9:0f:6d:07:22:e2:99:72:4b:67:38:4f:ae:d2:
ae:c8:0d:d4:0d:fb:72:8f:82:9b:c7:7d:9b:66:f4:f9:6f:6c:
64:61:9e:70:ab:44:20:b2:f5:ee:15:1a:28:00:ec:b8:3f:7c:
8e:33:0b:5b:07:ba:31:f5:e3:fe:36:2e:cd:be:96:79:56:97:
f1:84:67:59:b8:da:b3:88:bc:c4:5c:ea:9a:35:5d:f2:a6:69:
0f:47:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:12:43 2026 by rpki-client