Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: 5JgVk8enVrStaJmtkwVHNlXGumDMcs7gwJ/Ejr7vRl4=
Subject key identifier: EF:89:C4:A9:AB:B6:46:73:3E:B0:A7:F2:C5:31:1E:3F:92:C7:F8:90
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019D97749D85D1371358E10D94A80945699E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 15F8
Signing time: Thu 16 Apr 2026 18:01:35 +0000
Manifest this update: Thu 16 Apr 2026 18:01:35 +0000
Manifest next update: Fri 17 Apr 2026 18:01:35 +0000
Files and hashes: 1: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: d5WVkLddS8HfnIbABw8AYBUyFkAsylNRu4xhdVxkcks=)
2: yzTR3xr8FfAmGlnLHCuEER5nDus.roa (hash: lCWnS4QZcDJFta+7yyGjqVSAbP1bGrYcZOR4x1RNMos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:9d:85:d1:37:13:58:e1:0d:94:a8:09:45:69:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Apr 16 18:01:35 2026 GMT
Not After : Apr 17 18:01:35 2026 GMT
Subject: CN=ef89c4a9abb646733eb0a7f2c5311e3f92c7f890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:43:42:a7:44:dd:d5:b5:a2:ae:20:3a:bb:
2f:2b:7b:52:44:f4:03:0b:71:36:8a:44:10:a4:b9:
69:e6:1a:0c:24:0d:66:f1:2d:dd:8d:4a:18:b7:0b:
cd:fa:2f:e9:32:18:35:6f:da:b4:74:87:01:9a:30:
28:e2:9d:41:bd:8a:c9:36:9a:fa:cb:34:b0:ae:e9:
90:c6:34:02:ee:3f:d2:97:cd:04:a2:5f:ec:09:6e:
8e:f9:c6:29:1d:91:22:0a:ea:7f:cb:a6:20:d4:c4:
d8:26:ab:1f:c7:fd:61:72:57:d5:0a:51:5e:f3:bb:
3b:13:3e:50:46:d5:1d:27:71:92:3c:26:9c:d8:bd:
3c:a2:85:38:ae:0e:3c:02:50:86:86:cb:9b:84:7b:
97:71:30:fa:01:96:00:a2:b4:85:56:f1:74:24:be:
3b:91:a2:1a:0a:66:7a:de:d7:2d:09:9e:d0:df:87:
eb:02:43:db:02:b9:81:eb:7b:04:9a:ac:d5:83:3e:
c5:3c:55:b4:d9:37:95:71:92:38:ac:f3:41:95:67:
8f:c7:b6:b0:8d:d5:f7:c6:1e:08:f4:b5:44:10:fc:
79:ec:24:7a:af:10:ca:a9:86:b2:f2:66:45:6e:f7:
e2:71:7b:bb:f7:ce:ab:23:e9:94:8a:42:a5:ba:66:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:C4:A9:AB:B6:46:73:3E:B0:A7:F2:C5:31:1E:3F:92:C7:F8:90
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:45:70:87:1a:8f:fc:5c:e4:6a:eb:2c:d3:92:a3:65:e8:
f3:c9:46:d8:db:12:ea:99:9d:5a:4a:fe:07:d4:5d:e3:f3:c0:
5e:64:6c:48:1f:c2:cf:a4:ad:3f:fb:7c:cf:6f:1c:db:32:a7:
63:23:47:93:83:05:6d:ed:a1:86:18:90:a2:19:a0:be:de:0b:
21:2b:f7:d2:d1:c4:1e:f7:89:79:c2:27:4c:dd:de:38:f1:69:
c2:3f:62:32:11:36:2d:b9:18:0c:fa:b9:84:2f:07:1c:a0:5b:
72:6f:07:fe:df:00:9d:4d:d8:cc:43:35:ef:52:b6:a9:ff:98:
e2:dc:a8:2b:af:1d:8e:6d:e7:66:19:a6:5f:51:27:50:aa:1a:
4a:f0:a8:cc:d9:20:4b:ae:06:93:59:57:71:2e:c5:6a:69:2b:
29:41:c4:43:8d:67:de:8c:95:2d:c9:d1:e8:80:93:6c:00:09:
5c:cd:c2:ca:ac:b2:44:15:74:6b:ac:85:cf:83:cd:93:5f:b6:
e0:4b:57:44:0b:7f:44:de:24:89:95:37:86:8f:66:51:d0:0c:
ac:f8:cd:8a:3f:e5:f2:83:38:9b:5a:b6:04:c4:2b:be:ab:87:
ba:3a:44:49:be:e5:4b:20:4b:ea:6e:ba:23:c9:c1:46:9c:05:
55:b2:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:16:45 2026 by rpki-client