Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: AlR+L/h4LKmjfYqsO6GrJjU8gZ+cYG8Z1lWjCUvEKxg=
Subject key identifier: FF:42:69:10:27:D6:C6:B1:D6:D8:37:C8:78:20:2D:6A:F9:3C:24:E9
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019CAB6B6981AE120EE5FE46D4AC07B00198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: A-kESQFgScEyFER7yotzjt_cbmI.roa (hash: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=)
2: jpSNAjoIWW5o1dEpckRnfaNZUDo.roa (hash: kdIhMxsuZJUQm1IC9DaIIdMEPEig2DJxhqMNYmLbqDc=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: Dov0kZ2FuRPGGV9/aBIjZAKjpJ3L7aD8KdukyKCSt2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:69:81:ae:12:0e:e5:fe:46:d4:ac:07:b0:01:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=ff42691027d6c6b1d6d837c878202d6af93c24e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:b1:23:37:6b:f9:4c:65:3a:9e:1c:71:83:
a9:ba:81:f1:b0:17:6a:96:7a:19:f9:8a:d8:55:51:
76:5e:51:62:e8:a5:1d:38:7a:db:b1:96:f3:c6:72:
b8:c7:e1:17:0a:7d:17:5c:13:43:d8:56:aa:68:b7:
8c:ba:31:ae:c8:b9:71:2c:4c:90:84:45:02:a3:0e:
d0:70:92:2f:6b:c1:1e:dd:06:4e:d8:6f:22:de:04:
32:81:90:cf:4a:72:db:c6:3f:48:a9:38:bc:f4:0e:
23:06:43:e5:d9:a7:52:f1:4d:11:36:22:b0:bd:12:
f6:5f:de:34:7c:c8:51:51:58:5c:87:cf:7e:d2:ce:
d7:f5:10:32:5b:7a:e5:e4:fa:18:3d:d4:6b:27:1b:
db:ff:67:64:13:9a:93:74:6e:4c:a6:e5:d1:d3:6f:
b5:e8:40:5d:4b:82:c4:28:23:e2:da:16:cb:8c:ed:
f4:f1:2f:b6:41:79:fc:7d:17:24:06:71:58:c4:f8:
b9:66:ca:46:bf:56:0d:10:9d:88:66:fa:c7:ba:42:
de:56:76:f8:b8:19:62:9f:87:54:76:c6:39:9e:ad:
73:65:d2:54:01:59:ac:63:7d:39:17:f7:68:37:c4:
94:f1:d8:cc:eb:c7:31:98:2c:c1:11:48:a0:72:b6:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:69:10:27:D6:C6:B1:D6:D8:37:C8:78:20:2D:6A:F9:3C:24:E9
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d3:18:c9:af:de:42:27:c1:bb:1c:a4:a7:7e:1b:da:16:76:
ee:c6:91:01:a3:92:ad:3e:c5:1a:09:f2:b9:8d:b1:41:85:c8:
3c:33:f5:06:ae:b1:40:c5:04:9f:0e:0d:85:9f:6e:10:4c:5f:
ef:18:b2:a5:8c:c8:bf:a7:14:bb:b9:1d:bc:22:bb:5e:e3:c8:
3f:26:03:b9:71:ae:98:23:d9:50:92:7f:06:4b:ef:1c:0b:51:
78:cd:e9:25:66:1f:94:8e:6a:49:bc:08:1b:5b:fe:ed:a5:2c:
b5:0f:6d:4d:c3:24:24:f0:f9:56:ca:ac:a9:4c:0c:2c:8a:9d:
ff:90:67:ce:86:09:9f:79:e1:d1:6a:8b:90:96:aa:c5:48:79:
c6:d6:0e:ee:7e:4a:05:56:03:b0:65:74:06:20:c7:6a:c4:94:
29:bf:36:94:5c:51:1b:06:e4:6c:15:42:a1:e9:2a:07:b2:97:
9a:7f:96:38:1a:dd:0e:ab:3a:69:fe:b6:77:00:77:1a:35:1c:
2d:a9:9f:c1:64:e5:0e:68:ae:7b:47:25:ea:8f:7b:4e:d8:47:
e5:07:c0:24:94:05:b7:46:7d:48:ca:c2:0b:dd:bf:50:65:0f:
3f:46:8e:40:75:eb:46:2c:65:d4:e3:6a:0e:e3:27:36:fb:f6:
9d:df:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:40 2026 by rpki-client