Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: V+XbSTpg2Yg3wO4ZtJxAcbEPK+bau8eLDw5fNTDATJc=
Subject key identifier: 28:DF:16:39:16:19:B1:6E:05:E5:80:B3:9A:16:47:06:40:5E:E4:AD
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 019D9D3F1EF3A7125AC70A79E7C2C345C302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 03E4
Signing time: Fri 17 Apr 2026 21:00:52 +0000
Manifest this update: Fri 17 Apr 2026 21:00:52 +0000
Manifest next update: Sat 18 Apr 2026 21:00:52 +0000
Files and hashes: 1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: 7TYOX8PdVucS/U9xX3aGRAkrNrklaYIABpIoUQWXK/g=)
2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:1e:f3:a7:12:5a:c7:0a:79:e7:c2:c3:45:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Apr 17 21:00:52 2026 GMT
Not After : Apr 18 21:00:52 2026 GMT
Subject: CN=28df16391619b16e05e580b39a164706405ee4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:29:9a:28:8a:1d:76:f9:76:ab:a2:85:0c:28:
0c:cf:d9:ce:52:1e:36:1a:ee:c3:e6:16:e8:05:58:
ed:7b:85:7f:c6:fd:7c:b3:15:51:b3:42:7b:ef:b9:
30:c6:76:a6:42:8c:6d:7c:e9:6f:c4:83:1b:14:64:
45:3c:35:1e:96:46:c7:6c:bf:b8:7e:dd:89:c0:48:
0d:5a:1a:bc:44:1e:fc:42:b8:78:b2:18:bc:5e:c5:
ff:2e:90:ec:72:32:73:6d:48:f2:99:a9:56:a8:0a:
58:80:e2:92:65:55:c3:02:81:7a:08:ab:82:92:91:
93:4f:73:e3:10:08:bb:38:d9:9e:9c:f2:d9:fb:8b:
6c:3f:91:a3:22:f9:91:db:44:2c:c7:b4:6c:7d:97:
d2:83:f3:25:66:b9:b7:5f:f4:99:05:c0:74:6b:16:
86:41:81:97:b5:d0:67:63:44:41:cb:ed:df:98:5e:
0d:e6:d1:6f:10:c5:28:0a:0f:7d:85:1e:66:2b:4e:
39:bf:db:23:26:32:07:25:6b:b3:77:f4:26:c8:61:
f0:a2:49:aa:06:f5:bd:0f:ba:5f:4a:f2:4c:77:f4:
05:c6:4e:92:89:0e:a4:ec:4b:12:d4:19:50:66:c3:
57:8c:f3:1e:38:8b:8c:39:4f:9e:ed:cb:72:e9:0d:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:16:39:16:19:B1:6E:05:E5:80:B3:9A:16:47:06:40:5E:E4:AD
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:7f:ef:b6:1f:63:99:25:4a:bb:8b:87:cf:5f:ae:00:5a:
a1:f4:1d:84:08:2e:40:7f:de:e2:5f:69:e3:8d:98:ee:51:dc:
d6:8c:78:ef:b6:de:a0:94:90:a8:a7:35:f2:49:6c:52:6f:dd:
8c:52:3b:ad:bd:05:ed:8b:86:42:e1:3c:a7:89:45:5d:fc:35:
5b:59:55:cc:b9:96:08:c1:6a:73:59:ce:c1:a9:d4:40:90:3a:
1a:47:12:35:7c:16:a1:98:aa:2c:98:ad:1b:0c:e9:a7:7f:7f:
ca:a4:c7:e8:8f:f6:1c:77:0a:cf:5f:f4:9c:1d:f5:4f:09:e8:
fe:79:26:b1:e4:95:42:c6:f0:81:15:51:c0:13:3f:d9:c7:3f:
6b:2d:ac:05:d7:f2:f6:66:e7:00:b2:f7:8a:22:b0:2d:8e:41:
27:bc:4d:bf:ac:a2:d6:16:47:7c:20:06:32:66:a9:c7:b9:35:
15:d7:2c:28:a4:68:a2:db:3c:3b:0b:1e:4d:5b:60:34:f4:02:
45:63:5e:3a:5a:3a:74:0d:3a:9c:2b:ec:96:b2:a4:41:ae:ed:
23:43:37:f2:d6:fb:32:e6:3c:90:76:3c:30:0c:ba:94:89:17:
de:71:e9:5f:40:75:96:80:22:87:dd:2d:d3:6b:5f:2e:32:4e:
2e:b2:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:56 2026 by rpki-client