Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
File: pJR6ZT3sU9F51XJPJRTHJW22nfg.mft (raw, json)
Hash identifier: pKh/byS8NCtIx6eCOz8vehfEj0GqhSZ6TqvX/4bwPgo=
Subject key identifier: 9A:F1:42:08:3E:D6:AB:92:17:C0:C6:03:A9:F2:8E:C9:FD:4C:85:2A
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: 019D28165E48CCF11367ACD7033160A42A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
Manifest number: 11B5
Signing time: Thu 26 Mar 2026 03:00:47 +0000
Manifest this update: Thu 26 Mar 2026 03:00:47 +0000
Manifest next update: Fri 27 Mar 2026 03:00:47 +0000
Files and hashes: 1: RMWRbbD_BdAd9CzTxDVfQGAvCWk.roa (hash: pFbz45/dgrlTncXp4cZG//XsRZw9h90zOSy0E/AZEIY=)
2: pJR6ZT3sU9F51XJPJRTHJW22nfg.crl (hash: 7fIL39yq+9pKFVYMAhtQ1KJgFmDk+FGFr3d9GcXU6pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5e:48:cc:f1:13:67:ac:d7:03:31:60:a4:2a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Mar 26 03:00:47 2026 GMT
Not After : Mar 27 03:00:47 2026 GMT
Subject: CN=9af142083ed6ab9217c0c603a9f28ec9fd4c852a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:b3:e8:45:cb:d4:8c:e8:b3:d7:f2:18:0e:
9c:bb:cb:a9:13:44:99:9a:20:4c:ec:b9:12:0a:f3:
50:9c:b0:b4:2b:7a:30:38:4d:1d:99:2f:b1:b4:7b:
4d:58:d2:c9:01:da:f6:57:90:b9:ab:7c:48:92:a6:
36:2e:87:7a:10:a9:b0:65:91:49:53:03:7e:01:f2:
ae:f2:9d:ca:67:3b:3a:9d:86:e3:20:29:7f:c2:93:
1d:52:d0:87:35:79:02:43:a5:9d:43:ae:ac:5e:27:
47:c2:8f:65:03:7d:10:09:80:06:9f:14:d8:b1:46:
43:33:82:32:83:53:50:03:06:4c:d2:ff:bc:85:48:
57:25:40:e6:b5:11:67:c0:a9:de:33:63:15:34:b7:
f8:be:0e:4f:27:41:ee:ae:01:e8:60:3d:90:62:a4:
27:8a:62:ea:78:cd:e7:80:e7:1a:a5:15:61:bd:49:
29:f4:71:b2:4e:c7:8f:5b:14:f9:38:bd:2b:9d:00:
0a:23:b8:be:1f:6f:62:da:ea:44:ec:0b:13:46:88:
5f:af:91:90:7a:3b:fe:42:e0:f4:24:23:c8:89:de:
ed:50:38:61:22:36:d5:4c:f0:75:72:9b:41:db:95:
60:c5:ba:3c:53:2d:7b:e5:4e:77:68:18:b2:8b:b0:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:42:08:3E:D6:AB:92:17:C0:C6:03:A9:F2:8E:C9:FD:4C:85:2A
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:52:0c:4d:7f:10:e4:41:6a:fa:09:b5:6d:01:62:e7:0c:db:
b9:ab:d2:8e:db:8e:f2:c1:32:4a:d2:13:42:6b:95:17:39:6b:
50:d8:00:7e:92:62:04:dd:44:c0:46:25:ed:e0:05:5d:3b:20:
46:fc:da:be:ed:ac:de:e4:c0:46:63:9d:78:69:2f:c6:3e:7d:
87:f7:b0:08:91:bd:0c:41:cc:ec:61:40:8b:36:6a:85:9e:13:
7f:8a:95:b7:6c:91:22:c1:ba:d6:73:58:89:57:cf:79:8a:2b:
bf:ea:6c:74:ab:59:f4:a9:ad:c6:f9:3d:19:39:7b:29:ca:82:
da:23:9f:0b:02:0f:24:77:61:37:25:c3:69:28:6b:d6:27:73:
61:6c:02:d2:03:cf:28:2a:e2:8c:c9:86:a6:79:82:67:58:d7:
ce:08:f1:73:47:24:92:64:cd:de:83:0f:8f:70:f2:cf:7c:7f:
04:04:03:7c:74:82:f2:e7:ad:c6:1f:04:cb:2f:69:9e:db:cb:
02:49:8d:ea:41:9b:b7:bc:c6:11:1f:6b:33:86:0a:2f:21:6d:
8b:24:6d:79:03:78:57:35:01:c5:b5:5b:88:ef:63:91:65:4f:
32:cb:c3:fc:64:b3:42:50:c0:7c:71:59:d0:6c:90:9d:f3:51:
85:23:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:50 2026 by rpki-client