Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: Wm9Mmxi+4ipW3VH3De9RhAwdunFzDRyGQvMYM7G8jRQ=
Subject key identifier: A2:1B:C8:93:FC:B6:07:5C:D9:5E:21:5A:76:0D:DB:6F:CF:A7:44:B6
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019CAB33D86D620267CC46A704024F797D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1544
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: ToF5auTiwlGavdprAnJulo2DaloyAzaJt6/CGdMHtx0=)
2: l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa (hash: ntncx83xvrR7GXBUBSWIBKho03vJeQ/rhh6Pkr3gi58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d8:6d:62:02:67:cc:46:a7:04:02:4f:79:7d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=a21bc893fcb6075cd95e215a760ddb6fcfa744b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:8d:60:f6:e3:66:3c:f3:a1:b7:3c:4e:3f:
1b:48:2d:0f:21:6a:08:ee:84:02:d5:65:4a:cc:1b:
4b:e1:06:22:f7:9e:47:ce:87:04:35:e6:59:be:c1:
3e:1f:fb:79:a4:f4:8b:26:f8:9d:2e:82:58:3c:1b:
76:e9:92:aa:e5:92:22:5e:52:7b:28:22:92:cc:7b:
97:16:f3:13:a7:97:b5:73:44:ba:ac:3d:70:e1:ea:
b6:bd:7d:13:d6:a4:68:6a:31:a0:54:85:64:60:d6:
ea:de:d0:9e:5b:7a:ab:47:39:06:b9:4b:5d:8c:63:
0c:fa:5a:62:a4:8a:ee:8d:a4:89:09:6e:3e:e0:18:
7d:a4:4f:28:be:86:3b:0b:4e:77:ff:39:c3:4c:b0:
2d:04:ce:62:49:4d:23:ac:8e:19:86:d7:b2:0a:39:
29:c6:b7:1f:83:ed:15:da:35:55:de:be:bc:53:f6:
f2:9e:a0:ea:9e:45:4e:cd:74:38:4b:98:05:19:a9:
6b:1c:5e:0c:66:5e:ae:4a:52:42:34:30:1d:91:28:
d2:ca:65:bc:96:bd:8c:ae:91:78:31:b8:cf:82:8b:
a4:50:66:c8:2c:bf:1b:f0:2a:db:78:5c:1b:9d:ea:
4e:b9:53:01:6b:96:67:c4:58:bd:21:d2:b0:81:91:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:C8:93:FC:B6:07:5C:D9:5E:21:5A:76:0D:DB:6F:CF:A7:44:B6
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:95:79:d4:4e:b5:9b:b7:fd:72:40:d5:60:99:d2:6e:65:
97:ed:cb:80:63:11:c3:a3:25:a1:f1:b3:dc:c5:6e:f9:35:f4:
69:07:31:55:65:b0:02:1d:b4:eb:1a:ff:b7:df:61:62:d5:7b:
a9:a4:6e:d4:fd:35:57:63:fc:db:ae:1b:f4:93:c9:1d:7c:07:
02:84:ab:5b:93:51:fd:5f:21:b8:40:aa:d5:15:91:63:1f:e5:
55:95:58:81:37:b0:6b:ba:46:8f:0f:6a:53:d5:aa:dd:9a:78:
f8:d5:cf:3b:64:27:25:cd:a5:31:9b:55:80:2e:4f:80:01:d1:
10:fd:fe:6f:4c:a6:74:35:64:f7:db:cb:61:46:3d:a1:ba:4c:
ee:29:5e:fc:6b:6a:e5:5d:c2:77:e5:3e:a4:78:cd:e9:ec:85:
fb:cb:fd:35:4b:ec:70:20:cd:fa:10:1a:58:65:8b:13:ad:73:
24:67:b6:5a:75:9a:72:c2:de:10:09:cf:6a:0c:86:14:f3:7d:
15:90:2c:55:65:54:c0:61:65:02:63:13:0e:d6:e4:08:00:8a:
bb:d5:01:22:5f:d8:1e:62:db:7a:d1:c9:1e:ef:e6:73:6f:2c:
49:1e:40:cf:96:d8:fe:a1:d5:e0:26:ca:88:05:9a:3b:1b:df:
83:3d:e8:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM9htYgJnzEanBAJPeX1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOTMxZjI2NWE4NDcxZDMyY2U4NDQ5ZDllMTg2ZjBkYzcx
MTRhN2EwHhcNMjYwMzAxMjEwMDI3WhcNMjYwMzAyMjEwMDI3WjAzMTEwLwYDVQQD
EyhhMjFiYzg5M2ZjYjYwNzVjZDk1ZTIxNWE3NjBkZGI2ZmNmYTc0NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6NYPbjZjzzobc8Tj8bSC0PIWoI
7oQC1WVKzBtL4QYi955HzocENeZZvsE+H/t5pPSLJvidLoJYPBt26ZKq5ZIiXlJ7
KCKSzHuXFvMTp5e1c0S6rD1w4eq2vX0T1qRoajGgVIVkYNbq3tCeW3qrRzkGuUtd
jGMM+lpipIrujaSJCW4+4Bh9pE8ovoY7C053/znDTLAtBM5iSU0jrI4ZhteyCjkp
xrcfg+0V2jVV3r68U/bynqDqnkVOzXQ4S5gFGalrHF4MZl6uSlJCNDAdkSjSymW8
lr2MrpF4MbjPgoukUGbILL8b8CrbeFwbnepOuVMBa5ZnxFi9IdKwgZFcJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIbyJP8tgdc2V4hWnYN22/Pp0S2MB8GA1UdIwQY
MBaAFDyTHyZahHHTLOhEnZ4Ybw3HEUp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEt
NWUwMDI2MzAzNjI5LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNTBiZGEtNjg5OS00ZWVmLWEyMzEtNWUwMDI2MzAzNjI5
LzEvUEpNZkpscUVjZE1zNkVTZG5oaHZEY2NSU25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3qVedRO
tZu3/XJA1WCZ0m5ll+3LgGMRw6MlofGz3MVu+TX0aQcxVWWwAh206xr/t99hYtV7
qaRu1P01V2P8264b9JPJHXwHAoSrW5NR/V8huECq1RWRYx/lVZVYgTewa7pGjw9q
U9Wq3Zp4+NXPO2QnJc2lMZtVgC5PgAHREP3+b0ymdDVk99vLYUY9obpM7ile/Gtq
5V3Cd+U+pHjN6eyF+8v9NUvscCDN+hAaWGWLE61zJGe2WnWacsLeEAnPagyGFPN9
FZAsVWVUwGFlAmMTDtbkCACKu9UBIl/YHmLbetHJHu/mc28sSR5Az5bY/qHV4CbK
iAWaOxvfgz3oKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:49 2026 by rpki-client