Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: KHtJ/MCx3pyjo1g7FJjM5YO2AF09MEjURp4eZ1Pgp4k=
Subject key identifier: C1:09:55:E4:52:47:40:75:46:B8:8A:B2:41:D4:3E:41:EB:A1:90:0C
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019E1E6C0D1E8FD477E4B3D5E3E1827EBBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0B7E
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: GWTpIVTb0O+OlZV/dc/vhCpeGGlVKWlfJgAKlFUB1xY=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0d:1e:8f:d4:77:e4:b3:d5:e3:e1:82:7e:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=c10955e45247407546b88ab241d43e41eba1900c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:70:90:c2:85:64:33:51:0d:a5:f6:93:cb:
54:b3:38:04:12:38:3b:ce:6b:b7:c6:87:a7:19:29:
db:51:62:d3:b0:b0:34:e3:b5:74:1b:e4:c6:2a:d9:
05:92:a3:12:95:41:ff:9c:c5:e5:fa:14:6f:28:d2:
43:04:43:18:d7:ca:9c:c7:be:53:d1:0d:5a:8b:39:
43:7a:4a:8d:b7:f6:2d:73:cb:ba:c7:87:46:e0:33:
34:81:e7:b7:20:c0:e4:87:25:38:e8:69:a1:b9:d8:
0e:d6:49:17:e1:93:b9:18:29:a6:0a:4f:c1:b5:0f:
47:cd:1a:82:18:bf:f6:46:a2:8d:6d:0c:4d:9c:ce:
d2:fe:7b:59:e5:54:33:a3:65:2a:ab:4a:b9:04:e8:
1a:fa:a0:88:b0:e5:44:ab:61:bc:b8:07:43:a7:30:
8d:1a:09:09:45:8c:ae:25:c4:be:fd:00:f1:73:49:
b7:05:e2:98:0d:08:54:04:ff:fb:72:8a:d3:8e:d9:
50:2c:f7:1d:16:50:c4:1d:33:66:70:0a:cb:3e:cb:
c6:da:6d:d8:09:df:d1:fb:d7:1c:de:8c:90:9a:82:
6b:0f:07:e8:e7:ce:a3:fe:87:7d:38:ea:31:63:8f:
2a:70:58:b3:6b:86:84:1c:b7:6d:cd:ee:86:83:2f:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:09:55:E4:52:47:40:75:46:B8:8A:B2:41:D4:3E:41:EB:A1:90:0C
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d2:d3:8e:b8:4a:51:7c:d0:a4:ef:01:41:a8:b3:b0:76:a3:
5a:e5:df:c6:c1:f3:7d:99:6a:c7:f7:a1:09:58:e7:f8:ff:e8:
f9:47:6b:c3:f1:34:c4:ac:b8:66:e3:8a:e1:9d:27:92:9e:81:
43:ce:7d:0b:0f:f3:ec:db:0c:58:21:c2:07:91:f0:a9:3c:83:
f9:02:a4:f7:30:6b:34:2b:dd:84:ea:bb:be:3a:c6:50:25:b7:
73:e0:b0:d1:b5:1a:01:d7:eb:77:c6:45:d9:67:23:cd:c6:61:
90:06:f6:98:67:df:18:3c:eb:27:f2:61:58:10:ae:93:34:22:
f2:fa:1b:f8:f9:5c:9e:1d:d4:b8:1e:fd:62:32:90:76:7e:7c:
77:d0:ab:d5:94:78:63:83:dc:4a:21:87:58:ff:80:b6:9c:4a:
af:c0:81:03:a7:c9:81:f8:b9:73:58:ad:59:5c:aa:54:29:40:
66:cd:87:ce:e9:2f:3b:4b:ac:ce:e1:1a:4f:8b:fd:3d:b1:0e:
47:83:c2:5d:b3:08:b8:60:53:4e:ca:aa:97:51:26:5e:6d:d5:
60:a7:3f:c0:cc:7f:94:cc:41:08:b2:a6:25:3a:d1:ab:fb:b6:
35:5b:f9:92:e3:4a:f6:88:3d:a6:f8:e7:ee:bb:87:4c:66:df:
55:17:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:54:09 2026 by rpki-client