Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: YqFIdhceADKepNKpi8QzknnNyjF6riotqrTlot1Ur0I=
Subject key identifier: 54:F3:F8:01:D0:FB:F4:31:C8:58:79:7F:BF:E4:33:74:35:C0:70:4E
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019D9AE26DC2BABFC0EFD9FEB43E944F8ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 10:00:23 +0000
Manifest this update: Fri 17 Apr 2026 10:00:23 +0000
Manifest next update: Sat 18 Apr 2026 10:00:23 +0000
Files and hashes: 1: A-kESQFgScEyFER7yotzjt_cbmI.roa (hash: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=)
2: jpSNAjoIWW5o1dEpckRnfaNZUDo.roa (hash: kdIhMxsuZJUQm1IC9DaIIdMEPEig2DJxhqMNYmLbqDc=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: bbeFDEfsiUO8wjQV8m++AYbW7dK7NvdtP+tg+W02Peo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:6d:c2:ba:bf:c0:ef:d9:fe:b4:3e:94:4f:8e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Apr 17 10:00:23 2026 GMT
Not After : Apr 18 10:00:23 2026 GMT
Subject: CN=54f3f801d0fbf431c858797fbfe4337435c0704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:ae:63:a0:dc:57:a9:58:34:ed:c3:cb:e7:
60:cb:59:4f:4e:e7:24:73:1f:eb:eb:64:03:72:20:
fe:af:5b:9e:94:25:b3:d8:32:87:35:f8:24:46:e6:
97:06:27:aa:11:3d:e8:97:05:8b:1d:46:7d:89:3a:
b2:11:20:90:ad:39:5b:c5:af:ac:93:ba:5a:4a:bf:
db:ac:8e:49:2c:62:1d:c5:73:a2:e8:cd:7a:6e:f1:
05:83:04:32:33:c8:95:38:3b:56:03:6b:3e:2d:1b:
87:bc:88:62:a1:14:02:b1:b0:b1:23:ba:b0:ac:fa:
0b:1d:99:a0:ae:49:c3:87:57:26:1c:d5:b1:04:24:
95:25:3b:b0:4b:d7:e9:48:f7:9b:85:78:45:7d:ca:
5e:7f:5a:e5:68:c5:a3:6b:01:18:5a:45:60:90:c2:
f7:c0:84:3d:de:6c:db:22:b3:21:89:86:52:e3:b8:
03:0e:49:1d:fd:69:92:6c:99:63:79:4c:79:8b:d3:
1e:d1:73:d6:42:9c:26:38:6b:0b:3d:9e:33:d3:2f:
45:23:f7:c9:dd:7c:7b:dc:5f:45:8b:18:7d:5c:06:
aa:e8:2b:2e:75:ab:b1:25:35:e5:ae:41:ed:28:9a:
a4:09:50:fa:ab:d2:d6:ba:b1:b8:f6:d1:df:95:30:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:F8:01:D0:FB:F4:31:C8:58:79:7F:BF:E4:33:74:35:C0:70:4E
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e7:97:4a:04:02:7c:97:cf:8e:8c:88:c5:85:ed:ca:34:dc:
1b:b3:5d:10:f3:b8:4d:54:e4:db:a7:1e:b1:f0:05:cc:87:4d:
d7:ab:bd:3b:28:82:5c:3e:22:f1:e0:da:8f:f0:06:06:3c:ed:
94:b4:33:cb:45:3b:0c:75:55:b6:5c:d5:c5:06:25:42:ac:6d:
82:1f:8d:91:b2:7f:51:e9:82:d1:e6:81:99:e5:f2:44:fe:c9:
18:89:d3:58:3c:10:dc:23:46:f1:d0:a5:39:b4:38:f5:7a:25:
ff:5d:cb:67:7a:ec:d5:1c:04:7b:4f:b4:e0:ff:b4:ad:15:09:
96:17:1d:eb:34:07:9c:87:5d:57:19:46:69:df:42:1b:c5:c1:
f3:17:5e:8d:13:73:b2:66:e6:a4:0d:5d:fa:f3:75:a3:78:54:
50:ac:c4:c9:1e:00:00:fa:10:da:a4:d3:88:6b:fd:07:95:15:
36:06:7b:f6:b9:dc:2b:03:cd:0b:1f:5a:b0:74:75:21:58:2b:
01:00:33:e4:ad:2e:b9:e0:75:c7:6f:6e:98:91:fc:d1:38:49:
c8:80:9f:cd:45:b5:6a:20:40:7a:c4:d7:2d:a4:bd:ab:a9:cd:
68:ad:f7:2c:2d:f9:64:80:e3:13:d3:30:8c:a1:45:7d:d4:0f:
a2:f1:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:01 2026 by rpki-client