Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: 3hCYh8Zau1PuyuhpCLSes659ZgbpJbAR9/qeNhzlAn8=
Subject key identifier: DE:79:2E:67:FF:EC:2A:94:7B:61:03:CB:25:EA:D9:70:65:0B:E0:FE
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 01A11DBF4958463702D8692F23EE14FAC4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0D22
Signing time: Thu 08 Oct 2026 23:00:37 +0000
Manifest this update: Thu 08 Oct 2026 23:00:37 +0000
Manifest next update: Fri 09 Oct 2026 23:00:37 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: t42pwaVCGEuST3mc71w7Phzjy1Qh14PzF5ul4rOs5Ug=)
3: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (hash: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:bf:49:58:46:37:02:d8:69:2f:23:ee:14:fa:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Oct 8 23:00:37 2026 GMT
Not After : Oct 9 23:00:37 2026 GMT
Subject: CN=de792e67ffec2a947b6103cb25ead970650be0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:fd:cd:4b:23:a1:8f:e9:a8:18:8f:34:92:
6e:53:dc:35:9d:9b:6d:5e:29:f5:9e:e2:da:2b:56:
38:41:6e:c9:92:bd:aa:2f:08:1b:74:06:2f:fc:56:
71:c6:29:dc:21:27:f1:b7:6e:08:69:d6:a8:1b:a1:
76:65:f2:de:f4:e7:5f:a0:2e:88:45:6a:a8:3b:f3:
fc:7c:f4:5e:be:77:e3:38:fa:82:2a:ef:52:05:34:
6a:a1:f8:cf:e2:0e:bd:0b:0e:48:41:69:c5:db:2d:
a5:90:e1:07:dd:85:c3:4a:73:cf:ab:72:80:e2:aa:
64:58:4e:14:03:44:82:85:e5:c1:b1:32:96:04:17:
5c:98:0b:76:e0:30:18:7b:3f:cc:e8:80:c9:38:b7:
17:e0:1e:e8:ab:03:76:70:cc:f1:7a:03:a3:2e:7e:
52:5c:c5:9f:80:2b:c6:45:04:00:55:82:1e:22:c4:
d4:25:f3:2f:55:33:81:f9:db:b4:11:59:07:09:1a:
ad:db:d2:6c:aa:f9:1e:2d:b5:4f:16:a6:e3:7a:d2:
48:fa:ae:df:01:76:33:b1:82:78:24:8b:16:eb:69:
af:44:d2:e4:0a:ff:d7:34:29:e6:ae:dc:ae:23:b4:
2f:5f:02:7f:92:ba:50:b5:ca:81:d5:7d:b7:a5:a8:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:2E:67:FF:EC:2A:94:7B:61:03:CB:25:EA:D9:70:65:0B:E0:FE
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:59:c9:d9:98:36:32:90:d0:e4:b5:93:61:3e:dc:88:17:99:
1d:65:54:94:e8:52:da:f4:84:4d:ed:26:8e:3d:d3:79:14:50:
e5:79:d4:e8:a0:83:92:76:e1:91:f2:7d:d2:3d:5b:7f:3b:99:
ac:b9:12:94:f1:ff:e7:1c:da:2a:3e:ec:52:0c:ce:c3:dc:0a:
0a:e4:f7:ac:e0:c5:27:81:08:0f:12:68:44:ee:3c:62:91:0e:
a5:f7:c6:dd:c1:e3:35:0e:87:be:95:22:b5:8a:f3:c4:a8:0d:
f2:0a:74:60:3d:8a:cd:45:27:99:fc:7a:b3:a5:34:c8:e6:cc:
81:f5:b1:df:a7:68:ad:8f:30:89:dd:77:d7:7f:f1:68:57:f6:
8c:3f:d5:49:b9:82:11:75:7b:d8:e9:e1:fb:df:59:73:3f:1c:
e2:05:f2:84:68:18:df:0a:8f:63:61:24:9d:7a:2c:e6:8f:3d:
5d:f9:68:b8:64:90:fa:c7:b8:75:80:5f:c9:c2:a2:2e:4a:66:
6c:b4:84:d8:0f:0b:7f:12:93:1b:0c:21:5e:0c:42:0c:c4:c0:
5d:7b:fd:ed:33:9e:5c:4d:15:08:65:0e:18:53:cb:23:b9:88:
fa:fd:82:f6:b7:95:f5:8a:ad:d1:fd:64:05:81:86:ba:d4:1c:
7d:0c:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:54:14 2026 by rpki-client