Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: qeeItop37yzEIr45quNPm/WGy8mYrd2kIy9Ks0fNXz0=
Subject key identifier: D8:95:B1:16:1A:95:F4:FB:2A:23:F1:07:6C:3C:A8:E1:C7:4D:F7:43
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019D9818DD1560EB46815FAB039A9BB08806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 21:00:59 +0000
Manifest this update: Thu 16 Apr 2026 21:00:59 +0000
Manifest next update: Fri 17 Apr 2026 21:00:59 +0000
Files and hashes: 1: 1P3PxTpub8TzcDJpehJ5veKID6U.roa (hash: WsKdxQ2rVgGdMLcTirR5hgZnDDCFOgPI4K/ODDZGIzk=)
2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=)
3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: dZE+zVG46eG5SGOq5a/HRNkdEpBSBnyO4FwD1uihk/A=)
4: u0aDlmSdDj71EM-iDNS3bskqYP8.roa (hash: 7duuGh5xzVloGi3w0t9gMbtpB8qNHncN9NT4g5kJltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:dd:15:60:eb:46:81:5f:ab:03:9a:9b:b0:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Apr 16 21:00:59 2026 GMT
Not After : Apr 17 21:00:59 2026 GMT
Subject: CN=d895b1161a95f4fb2a23f1076c3ca8e1c74df743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:26:d1:1a:d5:58:b8:cb:43:82:5f:62:cd:
3c:f3:58:69:a0:86:8e:32:76:99:ea:75:c7:43:bd:
29:12:d0:13:82:4a:69:32:78:27:b6:3b:c5:ad:24:
bd:d3:45:45:1f:80:47:8e:72:1d:94:e3:05:bd:54:
6a:59:9f:7d:97:2d:25:dc:4e:83:de:e7:05:5b:68:
47:d4:fa:3e:ce:df:ea:ac:2f:f8:4d:fe:44:35:24:
ef:4a:4b:b2:c8:c3:19:5f:83:e6:c8:5c:dc:85:a5:
23:23:0a:7c:d8:2c:b0:ac:44:77:f4:01:f9:4a:b7:
61:02:e8:b2:96:85:d5:e4:2e:cf:d0:83:7c:73:bf:
9e:54:3c:50:58:25:d5:23:8f:cc:71:3f:ea:35:a4:
e8:31:9b:41:93:1b:09:76:e7:2f:59:46:e8:34:28:
84:43:a7:55:ec:10:f8:c0:bb:4c:48:20:a0:f3:42:
ed:b7:04:da:c9:70:65:8a:cb:b2:73:05:e5:71:8e:
73:70:23:b3:c9:3c:de:e6:0b:15:b2:95:a2:54:d8:
37:22:14:d1:f7:eb:a2:a7:1d:0f:10:9e:61:bb:dd:
54:75:99:a5:1c:7b:88:21:c9:df:11:98:b0:57:f9:
72:b2:ee:89:fb:40:0a:f5:93:97:0b:af:0c:31:0b:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:B1:16:1A:95:F4:FB:2A:23:F1:07:6C:3C:A8:E1:C7:4D:F7:43
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9c:45:4d:ac:00:ad:ee:f7:1b:d6:dd:31:a4:f0:fc:04:23:
be:f2:8c:eb:2e:71:f9:08:0e:65:71:14:cd:89:cc:17:e4:19:
26:88:1a:02:7a:94:c0:45:c7:f9:e9:e5:bd:05:12:c2:71:bc:
a8:fa:3b:de:b8:93:ff:4a:b8:e0:9b:26:53:94:c0:3a:5d:5a:
5e:78:23:e8:0c:76:d9:d4:5f:33:cf:02:80:8a:88:7e:c4:44:
2b:87:1c:cc:78:6f:97:e6:1e:36:06:f4:a3:89:e6:6d:ea:63:
02:95:dc:a5:02:b1:a4:db:52:2e:45:1f:03:3e:65:f2:df:9b:
af:dc:0a:ef:a3:ad:27:52:fc:dd:8f:5c:67:42:6d:ef:a2:d1:
b8:b1:c1:a1:12:35:28:a6:02:b8:17:e9:3e:09:b7:56:02:40:
38:0e:4a:f8:07:8b:41:c4:a0:55:d4:90:6d:92:20:8a:b2:f7:
44:36:ca:db:e7:1a:4c:9c:ab:c4:13:81:96:f9:f7:41:24:16:
06:2b:43:ba:8a:3d:0f:b5:2f:3a:e5:3b:3a:da:8c:07:ba:65:
10:50:c8:11:03:44:28:b2:1f:71:0c:af:37:66:d1:ab:7b:31:
ad:dd:6a:b7:06:13:5f:9f:5d:9f:52:43:b6:01:0e:76:c9:dd:
ac:87:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:23 2026 by rpki-client