Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: WvBJkWHvkYvHht+s43SEopLe2PfkI+ahMzrRwA6dGBM=
Subject key identifier: E9:96:17:7D:C4:B6:F4:7D:36:9F:8D:C3:69:2B:B5:ED:0E:7B:04:70
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019CABD8F492745DCABEA68953369981D820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 157E
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: ifdWtTkQRK4NCcNSBhuXP4YwRXS6BXVLEZxneeEmbsE=)
2: yzTR3xr8FfAmGlnLHCuEER5nDus.roa (hash: lCWnS4QZcDJFta+7yyGjqVSAbP1bGrYcZOR4x1RNMos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f4:92:74:5d:ca:be:a6:89:53:36:99:81:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=e996177dc4b6f47d369f8dc3692bb5ed0e7b0470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:4e:93:41:a1:da:10:12:6b:ce:75:ea:79:
7f:b5:2a:5f:a3:68:c9:f2:b4:35:42:96:17:28:a0:
5c:37:fa:6c:fb:1a:92:02:32:9f:ac:df:37:4a:11:
38:ed:e8:24:30:8a:22:62:09:c1:ea:3a:76:fb:f2:
bf:75:83:1e:cc:1c:69:da:17:17:e6:11:30:4f:be:
19:b1:f7:d5:bb:a3:18:0c:bd:a5:0e:99:dd:7f:d1:
ed:91:c3:d4:f1:a7:be:fa:45:cf:b1:25:58:96:be:
99:2d:b4:e2:ca:f5:94:40:35:d3:72:a9:46:17:dc:
5e:77:ff:dc:56:79:89:2b:95:a2:bf:dc:df:6e:be:
9d:b0:e4:4d:8e:df:5b:51:43:47:1d:ba:c8:17:db:
c7:37:66:0b:91:ca:50:62:b6:cb:d6:3c:bd:cd:31:
c6:99:ee:37:f4:a5:65:88:dd:84:a6:69:37:6d:64:
fe:6d:79:2e:ec:8b:3a:5c:3e:63:a6:0e:1f:c8:a4:
f3:b8:12:fc:75:bc:ae:9c:8b:5f:95:df:34:3f:e5:
67:5c:72:8c:38:9f:7f:a6:7b:c2:f3:de:4e:0b:80:
95:75:c8:56:10:fd:4b:39:7c:89:bc:6b:aa:a6:74:
99:d9:d3:f0:f8:fd:b9:46:e4:f0:99:f6:68:a3:72:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:17:7D:C4:B6:F4:7D:36:9F:8D:C3:69:2B:B5:ED:0E:7B:04:70
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ff:53:a2:41:da:29:0b:79:a5:1c:cd:8b:d1:45:22:21:03:
4d:c6:74:3b:d5:0b:b8:c5:16:b5:02:1a:0f:87:5e:21:b4:62:
0c:89:11:9f:0c:ad:41:a0:de:cd:cc:62:d8:cf:0f:12:44:97:
d9:56:d8:f0:01:ba:79:7a:29:6e:b6:f8:7e:53:d9:62:b9:56:
54:8d:33:c3:b1:6a:78:9a:04:d5:bc:5b:ae:f2:0f:1e:68:4b:
cb:a2:a6:b5:1e:2d:55:64:75:11:ee:12:59:ac:3a:31:b0:9f:
11:b8:57:36:e9:00:a1:9b:78:77:b2:99:d5:c8:4f:54:f8:ef:
6c:4b:9d:04:3d:92:73:2d:11:a1:7d:dd:b9:78:9e:8e:7a:3d:
77:58:f6:ee:5e:93:2f:eb:46:40:0b:10:fb:cd:bb:52:07:3d:
d2:7f:95:43:61:2a:71:9f:00:6c:0f:33:e2:56:3a:e7:46:d9:
89:7a:38:19:07:ec:45:59:6b:17:f5:82:d8:6c:d2:91:30:8c:
cb:be:5a:69:b8:48:33:89:30:6a:40:f5:24:a0:06:32:97:84:
b2:cf:71:67:e2:ef:cd:a7:c3:5f:e4:e4:03:9e:b7:45:f4:cc:
87:a1:b5:0b:0e:20:83:28:26:4a:2d:5c:29:11:aa:f6:38:fc:
3b:3b:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:50 2026 by rpki-client