Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: TcRopU4KYThOduG92mhF5DjBvyl2QB5fBz2zxFv+QbY=
Subject key identifier: 37:F3:3D:4D:AB:E8:53:DC:3F:C4:D8:D3:81:92:45:B5:27:DF:43:A1
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 019CAB6B319DD3706223A88A002B6B16E731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 08F3
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: A47ejH-QND_4p5ZynnjdFhGZbf4.roa (hash: +HcmD5EzZ2PGTv159HFtwSPGyMK2+fjDllHmAYnxw3I=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: jhCSknrRJ2W5t7F754eReEOoAgEPqOrFlY0xgZTAsic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:31:9d:d3:70:62:23:a8:8a:00:2b:6b:16:e7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=37f33d4dabe853dc3fc4d8d3819245b527df43a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:87:76:a2:44:5a:46:cf:be:d8:3e:ad:e4:
59:b4:b6:93:84:09:f5:cd:90:d9:0f:6a:08:20:51:
ca:ab:8e:0c:b6:41:a2:7f:eb:92:41:d6:47:8e:bf:
f4:4b:f5:75:ec:3d:23:61:ca:70:df:69:88:3f:de:
5a:d9:7f:28:50:9b:30:3a:56:f2:8c:a8:d1:99:9d:
0c:8f:92:e6:74:e4:4d:f8:d8:3c:cd:5b:82:87:3f:
e5:8e:f9:a2:c3:30:3d:1e:86:ab:00:8e:19:c8:25:
8a:be:d3:6c:b2:48:83:24:db:de:09:bd:b0:d5:c5:
80:65:23:ba:74:2b:0b:fd:da:ee:30:72:a2:c7:13:
4c:aa:67:cf:d5:84:d9:d5:a6:6e:2a:f9:0e:c2:e5:
eb:35:35:de:12:72:b4:63:95:27:7b:46:ac:f9:f9:
0b:a7:75:05:05:a8:c0:3e:49:e7:81:86:c8:9b:d1:
b0:1d:1a:20:a2:50:03:dd:1d:26:45:6a:ac:75:34:
e8:d0:08:f0:60:d3:c9:f0:81:ed:88:c5:1f:85:1f:
78:b9:f9:55:b6:ec:ae:a0:88:7b:fc:09:5b:f0:10:
eb:e7:c8:d3:e6:da:69:3e:46:5e:89:48:48:37:60:
92:8d:6c:71:a9:78:43:84:ee:ac:25:30:06:58:a9:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:3D:4D:AB:E8:53:DC:3F:C4:D8:D3:81:92:45:B5:27:DF:43:A1
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fe:d2:9d:9a:c7:b5:5d:be:b7:14:37:53:e3:56:39:1e:a5:
9b:2e:07:cf:43:6a:1f:fd:88:0c:03:2b:a3:73:ae:86:80:3d:
65:ee:64:5b:6a:f2:d5:b6:cb:f5:aa:23:83:e3:87:40:4f:ca:
c9:59:e7:69:87:db:75:3d:de:47:53:cb:6c:25:19:53:13:60:
2b:90:d7:96:d3:76:e8:27:fa:81:53:7d:c0:8e:ae:b7:fa:7e:
93:b9:d0:b6:eb:41:d5:8e:3e:64:51:ca:df:18:14:3f:3c:3e:
89:f3:66:c3:99:f8:97:a9:2e:bf:17:4c:f7:5e:91:cd:f4:e0:
3b:8a:53:2b:84:63:a9:b6:35:c3:84:1b:02:1a:8a:88:01:79:
6c:2b:bb:75:33:42:3c:c2:51:16:30:c9:14:10:65:3f:05:fe:
d7:1a:e4:43:b4:cb:60:14:20:55:ca:32:75:18:4b:0f:d4:2a:
f5:69:8f:83:bf:4b:aa:0f:e3:fa:12:16:fb:dd:d5:32:de:61:
56:e5:48:11:4c:f6:71:35:4f:cf:99:41:a1:7e:95:5f:11:da:
49:c3:db:98:7d:c1:16:0d:54:3e:df:eb:f4:75:cd:23:bf:50:
e3:12:8a:2a:1e:26:dd:85:90:ed:1d:30:8d:81:ad:3d:88:e0:
b4:ea:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:50 2026 by rpki-client