Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: D32AeDOa6qi37hBWjjfMzebWoH57GUdkr8JyJS0sPRk=
Subject key identifier: D3:C7:9D:7D:F1:D6:E4:20:20:E2:B9:CC:E5:EC:90:8C:15:37:BF:56
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 01A0C6A1762FFB21AFA0CE6A6A7A44FF7FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 01:01:05 +0000
Manifest this update: Tue 22 Sep 2026 01:01:05 +0000
Manifest next update: Wed 23 Sep 2026 01:01:05 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: 0XPih9RvUQDJrfb4n6odhwvuzgzcoIrut8Zf7+6MMls=)
2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:76:2f:fb:21:af:a0:ce:6a:6a:7a:44:ff:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Sep 22 01:01:05 2026 GMT
Not After : Sep 23 01:01:05 2026 GMT
Subject: CN=d3c79d7df1d6e42020e2b9cce5ec908c1537bf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:11:7b:4a:d7:c3:29:89:12:56:8e:51:60:
3d:e9:68:47:59:ef:c2:eb:4c:51:1f:b4:d8:d2:c9:
aa:5d:5a:fc:ec:7d:64:5d:cd:1a:cd:d6:71:45:6e:
7c:84:e0:6e:14:f2:bf:e7:91:95:39:e1:3f:1c:b0:
31:33:66:11:89:c2:1c:b3:f8:ab:8f:d4:c7:5f:6f:
b3:e2:e7:22:c8:55:c9:dd:8a:f2:7d:a0:c6:1c:b9:
f6:4d:c8:8e:88:57:47:0b:3f:bc:6a:03:28:8f:7a:
dc:c6:67:ab:44:d1:31:33:46:1d:ab:f0:b0:e4:2a:
88:b9:4e:f8:9e:35:73:fe:8c:f4:78:f9:f8:a9:ac:
79:90:de:4a:73:0b:74:69:7b:3d:2f:0c:c9:19:d3:
71:8c:33:27:8e:25:c8:b0:02:f5:33:6c:24:dc:bd:
28:18:68:1f:02:fc:9c:b4:b4:53:24:56:c1:7a:75:
a1:67:fc:ad:47:69:0f:96:9b:9e:ac:b6:2d:e8:17:
5a:76:21:8c:05:e9:56:97:55:1a:e9:b3:46:27:d1:
45:f1:2e:11:96:09:80:d8:ef:bf:f7:61:16:c4:9e:
35:dd:2a:4f:90:78:26:9f:e7:95:df:67:a8:3a:7d:
4e:b3:cc:1c:9b:48:79:ab:f3:ea:f6:d9:f9:01:32:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:9D:7D:F1:D6:E4:20:20:E2:B9:CC:E5:EC:90:8C:15:37:BF:56
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:68:73:35:90:1e:5f:a6:bc:37:ae:f1:9e:2e:14:85:e3:
e7:05:bf:a9:ad:97:a7:e8:2c:53:7e:dd:42:4f:86:b4:80:21:
69:d5:e4:71:5a:5b:e8:72:db:74:2c:52:d8:0f:2a:82:8e:97:
73:b6:bd:36:23:63:97:1d:d9:79:b0:8f:c9:89:09:6e:a1:9f:
b1:84:8e:6e:59:7d:c2:8d:9f:08:ec:13:8c:2c:b2:03:2b:b5:
b3:0d:c1:5e:71:76:12:43:19:8a:24:26:97:cb:72:7c:e1:d1:
ba:18:88:c2:fd:c2:51:53:d6:f3:de:98:2a:bf:48:64:8e:a0:
5e:59:68:68:3b:a0:0f:7b:05:b9:f6:40:6a:71:a7:a0:d8:e7:
5a:ef:f2:47:69:4a:10:38:4a:8b:6e:7b:8c:97:0a:22:22:b0:
8e:ca:ae:cb:e5:3b:6d:aa:e6:8a:5d:77:14:a7:3e:08:e8:be:
27:d5:a5:2c:88:e9:6d:6a:ca:49:e8:b9:ae:df:cd:52:bc:ca:
6c:4d:33:a9:39:0a:c7:53:ee:53:a1:5d:3a:04:dd:02:85:ff:
b4:2b:57:d5:e5:2e:14:34:e9:ae:df:bc:d4:31:bb:ba:58:2e:
67:8d:76:0f:d1:70:50:29:65:f0:dc:bd:fb:30:aa:10:9e:10:
77:5a:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:20:30 2026 by rpki-client