Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: QmlG8MfUD+ZivmympF+EsR+Vtmx0xvsaxv3j0RCkZfM=
Subject key identifier: E4:F0:96:79:14:33:7A:98:2A:E2:0C:CF:4D:41:6D:EA:5E:87:29:51
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019DA3AEF6BD5FF98EEF5AEB94C55AB06646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 03:00:45 +0000
Manifest this update: Sun 19 Apr 2026 03:00:45 +0000
Manifest next update: Mon 20 Apr 2026 03:00:45 +0000
Files and hashes: 1: 1P3PxTpub8TzcDJpehJ5veKID6U.roa (hash: WsKdxQ2rVgGdMLcTirR5hgZnDDCFOgPI4K/ODDZGIzk=)
2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=)
3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: 4jCSIXj/17SCVyVI20Z6kaQD8BrbGZh99qQEcg+5dz4=)
4: u0aDlmSdDj71EM-iDNS3bskqYP8.roa (hash: 7duuGh5xzVloGi3w0t9gMbtpB8qNHncN9NT4g5kJltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:f6:bd:5f:f9:8e:ef:5a:eb:94:c5:5a:b0:66:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Apr 19 03:00:45 2026 GMT
Not After : Apr 20 03:00:45 2026 GMT
Subject: CN=e4f0967914337a982ae20ccf4d416dea5e872951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:c8:79:25:7a:5e:aa:e5:8e:09:bf:89:d1:
1c:37:c2:b3:e1:f8:86:c9:af:bf:2f:a1:35:1f:33:
f1:a7:fe:74:48:8a:74:da:c0:e9:46:f2:7f:f2:6e:
80:02:8c:3f:d5:74:a0:cc:67:ca:bc:6d:d3:5c:3a:
57:86:3b:36:98:76:00:af:49:1e:82:d2:d2:66:8c:
e1:b9:6f:ec:c2:45:ac:c8:61:c2:08:ae:25:37:93:
6e:e1:8d:e1:cc:27:91:5a:65:76:2c:79:df:e4:41:
1d:95:77:a6:ad:c7:50:0d:69:79:d5:3b:8a:16:32:
e8:34:e0:a9:ff:bd:25:49:5c:94:82:7d:65:55:2c:
0c:4d:8f:55:5c:c8:6c:c6:b9:5e:44:60:5b:18:9b:
bf:2e:96:c4:d9:b8:bb:98:27:b9:b5:0f:e4:03:6e:
f1:11:09:eb:0a:87:01:3a:6d:9a:be:7a:e3:d9:18:
86:7e:a9:24:05:92:9c:94:a7:fd:97:48:c7:f2:7f:
b6:aa:31:4e:35:d9:b5:a2:b7:6a:c6:32:4c:1e:0b:
03:f1:5f:73:1c:e5:7c:98:2f:0a:ab:ca:de:67:62:
c9:fc:ea:49:97:fd:0c:92:8d:0f:a1:10:d3:ee:bb:
cc:c3:71:37:f3:76:c1:8d:c1:23:a2:fe:63:48:87:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F0:96:79:14:33:7A:98:2A:E2:0C:CF:4D:41:6D:EA:5E:87:29:51
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e9:11:e8:3e:d1:f4:87:e3:89:38:5a:61:67:a3:4e:27:b6:
44:e0:6b:69:e7:b9:b5:ae:e3:5a:c6:37:30:df:32:fb:3d:28:
7a:03:50:86:48:8d:45:8a:d2:06:52:1a:77:4c:0c:c8:45:c1:
8d:bc:50:76:d1:da:30:8d:e7:29:40:a1:a9:44:62:5d:f4:7b:
bb:0b:ba:ee:64:5e:3c:e0:66:67:f0:6c:f6:ab:cc:95:24:35:
e2:53:8a:4b:5a:f2:dc:9a:d9:06:d4:15:83:8e:e4:cd:97:8e:
67:c7:e7:f1:9d:39:21:d2:22:cc:65:c8:0f:8d:e2:32:08:b1:
d6:79:09:68:c6:1e:7d:2b:b7:ac:51:40:06:58:6d:90:2e:9d:
47:23:fb:3e:d5:51:19:83:70:67:15:33:41:f0:a6:67:d5:7e:
a6:32:74:6d:db:d8:88:62:6e:35:bc:5c:68:7f:d8:e4:2b:5c:
f4:15:d3:61:6f:a9:d9:72:25:02:77:e1:d5:6b:27:c7:5e:a8:
32:60:18:90:30:3a:63:c9:36:67:2c:57:e5:99:82:85:4a:98:
f0:92:9e:15:b9:76:3f:40:a0:1d:87:7f:c0:73:c4:6b:4d:e6:
cb:99:f9:d6:c6:33:d6:f9:b0:fb:48:1a:3a:3c:fb:b6:bc:2d:
a8:26:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:23:01 2026 by rpki-client