Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: DGYACtA5zARbzwGwABmA7EBhZtauzLj5HwGo+rtKag8=
Subject key identifier: D1:8F:19:DE:71:7D:9C:C3:33:2F:CA:F3:43:E1:EA:8F:F4:5E:BA:CD
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019D273B209C1EADC11E489FAF05C4A3CC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0AFE
Signing time: Wed 25 Mar 2026 23:01:19 +0000
Manifest this update: Wed 25 Mar 2026 23:01:19 +0000
Manifest next update: Thu 26 Mar 2026 23:01:19 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: WIKJAqLYxr6QjfoT5zh+Fhik+GxJLcCzZveRlVkeWbE=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:20:9c:1e:ad:c1:1e:48:9f:af:05:c4:a3:cc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Mar 25 23:01:19 2026 GMT
Not After : Mar 26 23:01:19 2026 GMT
Subject: CN=d18f19de717d9cc3332fcaf343e1ea8ff45ebacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:fe:8f:4d:68:51:35:ce:fa:82:85:87:f5:
f4:ce:99:04:85:c0:85:6a:c8:49:85:6d:99:a8:b7:
7c:3b:ca:25:17:b2:4f:e6:7d:d2:6c:56:86:15:59:
b6:93:22:a8:8b:ac:3c:c7:80:cf:94:78:53:67:94:
9f:a2:a6:57:3b:0f:e8:b7:71:ee:3b:1c:e7:71:7c:
3d:52:f6:bc:b6:0a:76:c1:15:be:1c:c1:21:36:67:
c3:69:36:f0:dd:60:9b:9a:72:7d:6e:46:bf:d0:9b:
4d:d6:d5:ef:42:a9:a3:37:af:1c:3c:c8:7b:3f:57:
92:0b:7b:5d:9c:35:8c:59:27:cc:af:e6:f4:52:02:
74:5b:8e:7a:93:0d:23:fc:4f:e9:a3:93:16:58:3e:
49:0b:af:ce:83:ba:de:66:9b:fe:ae:16:29:c1:11:
29:ba:2e:ef:86:01:48:6c:e2:37:31:9b:55:0e:3c:
98:a5:76:e6:55:9a:d9:96:6e:a0:81:08:a2:66:9f:
c4:be:fd:e8:f0:d7:d1:74:73:d3:d8:dd:d6:f4:96:
62:9a:64:2b:d1:d4:61:6d:d1:b0:36:dc:24:f2:ec:
c9:01:b2:d9:6f:1d:25:e5:55:8b:18:47:46:e6:70:
a6:db:ec:78:9b:bf:e9:a4:9c:33:b6:c4:ff:c2:d6:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8F:19:DE:71:7D:9C:C3:33:2F:CA:F3:43:E1:EA:8F:F4:5E:BA:CD
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:76:70:b2:67:2f:2b:a7:e7:1c:17:bd:3b:d1:87:fc:0b:c8:
c5:16:2e:37:2a:db:bf:8d:08:44:0d:91:16:f3:bd:81:72:6e:
d8:a5:b1:d1:2f:74:2d:58:e9:a2:d4:f6:a0:f2:80:71:b3:45:
a0:98:2f:d3:2a:ef:e0:00:4b:8e:b6:04:45:c7:e2:63:75:de:
35:e5:cb:92:63:a7:6c:5d:5a:a9:5f:aa:99:68:3c:3d:e6:5c:
63:d9:08:5b:5e:c3:06:22:aa:8e:47:b2:f1:56:6a:a4:60:35:
63:18:97:b2:fa:df:39:0c:fa:5e:5c:72:56:bb:29:20:20:70:
88:19:33:50:81:b3:0d:a3:a5:c6:bb:e4:43:91:46:65:4a:81:
a9:9c:e6:62:69:a4:f3:ce:2c:04:e5:b8:92:f2:67:7a:e2:f0:
23:4f:1e:de:f6:0b:05:e8:07:b0:81:37:a2:d6:17:8a:3c:1f:
63:a5:4e:0f:8a:79:a6:36:b6:7a:44:36:18:09:c0:3e:33:45:
ed:15:ab:23:68:52:e4:89:a3:57:6a:0e:00:cc:82:b6:b8:fa:
14:23:8a:e8:49:0e:e7:98:0f:2a:2e:48:4f:3b:0a:8b:28:6f:
95:b2:81:df:2c:ce:0f:3b:5c:e1:c9:5b:a9:3f:af:5f:a2:06:
57:02:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:21 2026 by rpki-client