Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: qifQYi45gH3UvowOS7lh1pMH1rWcl/je/2TWtlOf0kU=
Subject key identifier: 96:69:D0:A4:08:D7:7E:E6:94:DA:18:C5:8C:4F:05:F2:CA:CC:3F:55
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 019EC14979734A6FA2F1D950051E5908C7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0BE9
Signing time: Sat 13 Jun 2026 14:01:18 +0000
Manifest this update: Sat 13 Jun 2026 14:01:18 +0000
Manifest next update: Sun 14 Jun 2026 14:01:18 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: CqKim3l4wUa80KkDoGaUdlRbhwWGZJw4eMlrxHGVhgA=)
3: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (hash: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:79:73:4a:6f:a2:f1:d9:50:05:1e:59:08:c7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jun 13 14:01:18 2026 GMT
Not After : Jun 14 14:01:18 2026 GMT
Subject: CN=9669d0a408d77ee694da18c58c4f05f2cacc3f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:32:53:1f:38:c9:e7:01:fd:55:4e:60:c3:
ce:f9:43:e4:8e:02:16:0d:d4:82:8b:c6:53:f5:27:
9d:51:40:db:ad:e8:37:6c:ec:fe:de:fa:44:27:ad:
04:93:1a:cf:79:e6:43:73:93:49:3d:93:84:82:60:
f7:04:7f:04:fd:18:77:c1:e1:e0:af:f0:91:70:97:
22:39:35:cd:ed:31:51:88:b8:75:4e:81:6f:19:ab:
5f:52:7b:dd:4b:91:bc:44:37:74:8a:94:79:2f:ad:
28:88:03:24:c5:82:ff:98:29:1b:94:47:5e:06:01:
6d:1e:37:3b:45:39:0a:d8:77:0c:b3:3e:2e:7b:64:
97:75:51:08:8e:1f:6e:60:45:fa:b1:bf:bc:4f:27:
2c:3f:4d:57:97:30:ee:77:ec:47:ed:b8:16:99:7c:
dd:53:c7:34:91:12:55:57:8f:fa:04:24:ec:cf:52:
6c:64:2c:da:0c:a4:57:b8:72:ff:df:08:4f:17:92:
84:5a:17:da:d9:ea:a3:7a:79:54:17:5f:51:34:0d:
cd:0e:a6:40:f0:e7:d6:af:a7:01:c4:be:4b:a0:f0:
e8:ff:e1:2b:fa:0b:92:40:a7:1e:de:2e:4d:8b:f2:
40:27:47:2b:b4:3c:c5:9b:70:9e:b0:02:db:51:40:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:69:D0:A4:08:D7:7E:E6:94:DA:18:C5:8C:4F:05:F2:CA:CC:3F:55
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e1:72:aa:a7:4d:1c:03:a1:68:65:92:78:2b:1d:f4:04:2d:
65:cf:7c:b7:f7:d0:4c:82:24:79:5a:1a:93:6a:ca:f6:12:98:
13:e6:8b:44:5f:f9:34:c2:80:2f:3c:1b:3e:bf:84:ef:de:a6:
10:5d:c7:b5:bb:19:a8:58:f2:ae:c6:ad:fa:55:fe:25:0b:f1:
c2:f8:9e:18:eb:8e:4d:71:23:3a:64:6c:fb:a6:7a:7a:dd:c8:
ca:3a:b3:8d:0c:bc:b7:a5:21:66:e0:65:6d:26:c6:e2:f1:3e:
7b:47:20:20:8d:3e:2b:5b:6b:b6:ba:76:8f:28:f2:40:5f:40:
b0:4e:65:f8:41:6b:ce:87:48:bc:21:9e:2b:22:dd:38:1e:3d:
7b:11:b6:e4:ee:0c:14:7c:19:bd:b3:67:43:65:71:e1:d5:48:
2e:da:7b:b5:7f:32:d4:db:29:dd:d4:69:78:3b:8f:26:4b:2f:
ee:f9:57:d8:82:68:6e:37:9b:93:e5:2c:ed:0c:81:39:fd:70:
5d:f7:91:09:83:c0:ce:1e:d8:20:60:df:10:d1:9c:b5:0d:b5:
54:d5:99:e8:76:78:7b:fa:06:6f:cb:bd:70:45:1a:ee:b5:c6:
49:6e:09:c3:a1:86:5a:1d:e3:a5:6e:ed:0a:a8:bf:d6:11:c1:
be:48:ca:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSXlzSm+i8dlQBR5ZCMfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk
MmIwZmUwHhcNMjYwNjEzMTQwMTE4WhcNMjYwNjE0MTQwMTE4WjAzMTEwLwYDVQQD
Eyg5NjY5ZDBhNDA4ZDc3ZWU2OTRkYTE4YzU4YzRmMDVmMmNhY2MzZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKUyUx84yecB/VVOYMPO+UPkjgIW
DdSCi8ZT9SedUUDbreg3bOz+3vpEJ60EkxrPeeZDc5NJPZOEgmD3BH8E/Rh3weHg
r/CRcJciOTXN7TFRiLh1ToFvGatfUnvdS5G8RDd0ipR5L60oiAMkxYL/mCkblEde
BgFtHjc7RTkK2HcMsz4ue2SXdVEIjh9uYEX6sb+8TycsP01XlzDud+xH7bgWmXzd
U8c0kRJVV4/6BCTsz1JsZCzaDKRXuHL/3whPF5KEWhfa2eqjenlUF19RNA3NDqZA
8OfWr6cBxL5LoPDo/+Er+guSQKce3i5Ni/JAJ0crtDzFm3CesALbUUCoDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZp0KQI137mlNoYxYxPBfLKzD9VMB8GA1UdIwQY
MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt
NTQ4ODE2OTExOWU4LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4
LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeFyqqdN
HAOhaGWSeCsd9AQtZc98t/fQTIIkeVoak2rK9hKYE+aLRF/5NMKALzwbPr+E796m
EF3HtbsZqFjyrsat+lX+JQvxwvieGOuOTXEjOmRs+6Z6et3IyjqzjQy8t6UhZuBl
bSbG4vE+e0cgII0+K1trtrp2jyjyQF9AsE5l+EFrzodIvCGeKyLdOB49exG25O4M
FHwZvbNnQ2Vx4dVILtp7tX8y1Nsp3dRpeDuPJksv7vlX2IJobjebk+Us7QyBOf1w
XfeRCYPAzh7YIGDfENGctQ21VNWZ6HZ4e/oGb8u9cEUa7rXGSW4Jw6GGWh3jpW7t
Cqi/1hHBvkjKKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:19:52 2026 by rpki-client