Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: Phxdc5j5tVsItNiLJxhN/BZkP7GFPBhiU5TjudAjvN4=
Subject key identifier: 1B:33:60:8D:D6:31:48:30:EC:28:71:0F:85:78:F0:03:96:63:06:0F
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019DA45444F3F89856188955E70FF0AF350C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 15C5
Signing time: Sun 19 Apr 2026 06:01:19 +0000
Manifest this update: Sun 19 Apr 2026 06:01:19 +0000
Manifest next update: Mon 20 Apr 2026 06:01:19 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: yTV5LWBpNUqezBMXmwIf1Nkpc7euLIB7qDi86IMUlGc=)
2: l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa (hash: ntncx83xvrR7GXBUBSWIBKho03vJeQ/rhh6Pkr3gi58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:44:f3:f8:98:56:18:89:55:e7:0f:f0:af:35:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Apr 19 06:01:19 2026 GMT
Not After : Apr 20 06:01:19 2026 GMT
Subject: CN=1b33608dd6314830ec28710f8578f0039663060f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:90:a2:ba:38:2d:c5:9d:f4:c5:be:4c:8b:
70:29:37:c6:79:5b:1d:23:bc:b4:05:71:ac:eb:c9:
5c:b8:44:bf:83:3c:59:e4:5b:57:ec:2a:b0:02:fd:
c5:c0:de:a3:60:ea:02:6f:ea:20:d7:03:e9:61:9d:
ed:ce:1f:64:63:2f:55:33:d2:b0:ae:03:8e:05:28:
7f:ea:2e:8d:8a:e1:f9:1f:fa:58:83:5a:c7:99:39:
b5:85:2d:70:ff:c1:cd:60:f2:d2:ed:d4:bc:ae:55:
a4:7c:ef:ac:57:3a:ee:74:d4:50:82:b2:b6:53:df:
5e:db:ef:58:14:a4:23:e0:07:3a:8c:77:5c:fa:dd:
77:02:d2:88:dd:ae:5b:4a:29:54:43:00:e4:b0:a7:
a1:e3:bf:46:aa:38:88:69:97:82:e0:43:dd:44:da:
d5:7a:46:52:0b:4e:bd:15:94:d1:27:f9:c5:11:b8:
16:ad:f0:d4:ab:93:b9:92:ab:a6:52:d3:3b:39:b1:
83:7a:24:49:5e:e0:e2:87:fb:ca:96:4d:6f:fb:36:
88:fa:d7:cf:ca:65:88:4d:f1:b2:81:c7:ac:45:6a:
d4:c0:70:91:ec:21:ce:d6:29:1d:7d:6b:7e:f4:fc:
78:cd:2b:d8:a8:1c:32:b0:6b:3d:45:bd:09:34:5e:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:60:8D:D6:31:48:30:EC:28:71:0F:85:78:F0:03:96:63:06:0F
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:75:da:a0:e5:4f:c3:a3:a6:88:48:56:a4:60:65:59:48:24:
4d:67:ee:bf:b1:8b:f9:6d:7e:bc:8d:6d:36:13:88:5e:bc:e8:
19:e9:aa:5e:6b:3b:0d:78:fa:ba:5d:f8:22:16:a9:e1:8b:16:
74:a0:28:03:69:a1:06:c8:b1:c1:ea:b5:c7:6c:cd:54:f8:5c:
7e:81:27:87:84:c1:ff:f8:d5:16:ac:d2:2f:49:5e:7d:a3:7a:
7f:d7:cc:51:7f:4b:0d:d5:cb:aa:09:e7:25:00:7f:7c:8c:e2:
94:03:7d:5f:b7:4b:0b:cf:e6:81:c5:e4:f5:18:06:af:58:cd:
93:4b:52:2a:41:cb:9a:d5:cf:69:e4:d3:41:e0:0c:41:33:f7:
5d:f3:a9:af:ae:50:5a:dc:55:3c:49:65:5f:7a:aa:c8:7c:21:
9e:73:32:87:d4:aa:1c:1f:21:2b:74:2a:ac:ec:8a:b0:20:f7:
64:37:74:14:e2:c5:13:e9:42:07:39:e2:58:1c:02:af:2b:49:
22:34:1e:7a:6d:94:66:ce:8c:89:4e:1d:d7:3c:5a:75:f6:5b:
16:50:dc:0c:7d:5b:66:54:c2:a1:69:07:80:a6:38:3d:39:d9:
7f:19:ca:f6:d6:1f:14:bd:8c:fd:ef:4b:92:fb:4c:08:4d:c0:
2d:13:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:16 2026 by rpki-client