Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: dHHaV+u6j04cT0nfsB0xItTwNlJPba9UVwAldxkOFBk=
Subject key identifier: 01:8E:B4:71:FB:5D:DA:D8:C0:8D:17:8C:61:AF:3A:88:53:4C:5E:36
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 019D99CFD8BA63472212D5815B67B7BC1326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 09D9
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (hash: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4=)
2: C-zWCgwAxUcB5PR-BZP8SY0imsc.roa (hash: tH6y5VegxHL/FivasKZlqGMSC8JeobbFVY2ZXp/Rp9w=)
3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: /BvaweapD1PxxAKCKk6y6fmbif1/dMbHwOJVQfba0+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d8:ba:63:47:22:12:d5:81:5b:67:b7:bc:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=018eb471fb5ddad8c08d178c61af3a88534c5e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:1e:06:2c:47:b7:a2:79:d6:ee:d8:96:75:
ec:46:8d:bf:ae:0d:12:79:2b:85:0f:ba:33:52:a1:
f3:bd:26:ac:ae:11:c3:6d:b9:c0:cc:72:22:34:91:
c4:96:1d:59:7b:5c:d3:8c:81:92:c1:52:dc:a5:8d:
1b:57:04:40:f5:c1:7a:c8:9d:0b:43:85:c4:59:a3:
5b:a1:1d:e8:a9:c7:27:94:15:65:33:b2:b7:c6:86:
b8:96:98:b4:1d:33:d9:bb:46:30:f7:4d:ac:58:a6:
f3:f7:62:5a:bc:ec:f0:90:dd:eb:f6:c6:1a:e8:83:
cc:a0:63:81:c6:23:48:2c:98:fe:84:71:2e:55:41:
94:86:00:97:80:b3:8f:8a:3a:dc:ac:f6:de:04:0a:
65:93:3f:4e:a8:66:82:dd:ca:2b:8b:f8:12:d7:1c:
b4:24:b9:d7:2d:62:8a:77:48:24:0c:db:eb:c9:46:
37:55:7c:38:39:3e:65:da:45:75:34:ff:42:a0:16:
d1:18:74:08:88:a1:ba:46:15:5b:5a:45:0a:5b:58:
9c:65:a2:fd:5f:cb:ba:fc:b6:14:ad:77:c4:c2:01:
07:e4:9e:82:f6:8d:b4:8b:30:f2:e0:b1:c8:87:07:
a9:08:53:e8:b8:04:e7:62:2f:f8:bc:3a:37:d2:94:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:B4:71:FB:5D:DA:D8:C0:8D:17:8C:61:AF:3A:88:53:4C:5E:36
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:bc:28:5f:84:a7:e1:64:19:b5:77:20:6e:24:55:c8:4f:
45:11:5d:ab:06:9b:5f:d2:b1:48:a4:20:98:55:50:b8:7b:50:
1c:f0:40:5b:1f:8e:40:4c:40:4f:40:cf:65:e1:de:61:85:fb:
e4:e6:ef:6b:08:07:24:6e:01:7f:cb:af:3f:c3:e6:6d:3e:7b:
ba:46:d2:e9:49:c2:4d:e2:21:91:17:19:29:10:73:d8:a3:ae:
69:88:43:fe:d1:b3:4b:c7:a0:14:aa:93:d8:69:04:11:83:d5:
6a:60:76:fd:36:d8:37:be:e0:0a:cc:a7:37:6e:01:cd:b1:3a:
78:aa:a4:94:af:18:be:52:56:7e:66:6f:74:c3:36:bf:fa:fe:
96:07:e4:71:53:6c:33:07:ed:db:79:3c:89:28:9a:b2:b1:6d:
0d:38:c9:d1:08:97:0b:c9:88:b5:03:68:07:f1:e8:5e:14:a7:
5f:76:f7:1f:47:47:87:eb:9f:e4:a8:c1:d6:ca:7c:e0:97:30:
f0:ea:9a:2d:63:41:b2:f4:01:2f:64:8d:17:cf:75:be:b2:44:
cd:8f:7b:bd:72:b1:49:b6:dc:f1:a2:06:75:ea:c8:c7:48:6a:
91:a8:2e:48:4d:a1:cd:3b:22:a4:a3:7b:eb:d5:0f:ce:bb:3b:
07:5c:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:46 2026 by rpki-client