Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: YwaghkN2i3ccYbFyJ4DQ2/B2LLsSjrQQyPB8Z+WwFb0=
Subject key identifier: 56:43:2E:8F:BC:12:70:7B:E4:2E:B2:35:6D:EC:57:72:49:C5:04:5A
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019D29292540D2D1978C405E5F6A2FE96A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0AFF
Signing time: Thu 26 Mar 2026 08:00:55 +0000
Manifest this update: Thu 26 Mar 2026 08:00:55 +0000
Manifest next update: Fri 27 Mar 2026 08:00:55 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: GRnm3/seAacvl5K1SY0muBRxdVyeZIjbf5nqHVgOh0g=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:25:40:d2:d1:97:8c:40:5e:5f:6a:2f:e9:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Mar 26 08:00:55 2026 GMT
Not After : Mar 27 08:00:55 2026 GMT
Subject: CN=56432e8fbc12707be42eb2356dec577249c5045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:61:31:0b:84:ff:d3:b6:66:d1:68:6c:e4:
ee:c5:96:89:3e:cf:d7:40:88:32:f5:77:e5:f1:75:
ce:d8:18:a5:a0:b5:8d:a0:6c:1f:01:0c:59:72:0e:
bf:10:fc:1a:da:b9:2e:33:53:54:97:9e:01:f1:63:
c9:b3:da:7b:78:46:24:6a:97:e1:9f:24:18:c1:9c:
2f:f6:61:f2:3d:52:a3:ff:35:96:13:f9:c6:42:43:
cb:2d:42:01:59:2c:fd:51:b7:ee:bf:af:9d:69:d8:
d9:57:a7:21:38:0d:11:2c:d1:c0:cc:bd:db:51:99:
14:32:56:c5:c2:62:1c:17:c3:c1:d5:81:3c:99:35:
04:33:8d:98:b6:d2:21:4a:a7:d8:de:96:31:a8:9f:
a9:e3:ba:64:f4:37:c4:e3:3a:38:d0:d9:7c:83:86:
53:46:0d:47:65:6b:3b:8f:b7:e2:61:26:76:93:e9:
af:d4:41:9c:06:e9:6a:c9:e1:39:fd:ab:b2:79:5d:
f4:ef:0a:b1:46:b3:c3:58:7e:5f:f9:d3:c0:d3:31:
e4:0f:c5:14:c9:fe:18:f0:43:a5:b8:d9:b3:57:61:
ae:6f:60:ba:b5:4e:0c:5c:ed:43:26:d5:08:b7:ed:
c8:d2:02:ae:50:66:4a:62:8f:b7:6b:63:6e:52:e5:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:43:2E:8F:BC:12:70:7B:E4:2E:B2:35:6D:EC:57:72:49:C5:04:5A
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:03:43:69:ed:dd:ac:da:1c:d4:bb:48:f0:18:81:e9:c3:7b:
a8:27:d5:1b:53:2c:dc:f1:45:56:aa:ac:6d:b0:84:2f:65:b9:
52:11:9e:00:5f:24:fd:67:93:0a:18:fc:bd:ee:4a:1e:1a:59:
be:d4:0f:6f:e9:ab:8a:ea:de:52:bc:9c:22:51:28:eb:c8:20:
f1:a8:ff:bd:13:a7:59:be:2f:92:03:2a:e8:cf:09:31:f8:f9:
16:b1:87:06:a7:83:c2:b9:c1:40:3d:a2:7d:c5:63:9a:1d:8b:
54:b5:59:5c:ae:60:19:6b:8e:bb:e0:c2:ad:8e:de:f3:15:fb:
be:5e:5b:92:16:d0:8c:7e:2a:11:54:92:c2:a4:2f:05:1a:f8:
09:ac:1e:86:7c:dd:2a:20:a6:6a:f8:7c:d7:fa:e9:cc:b9:a5:
fc:f4:a9:3b:ce:bf:f2:3e:b7:ed:2b:d7:32:05:11:38:36:c8:
0e:3d:64:ed:84:f3:2f:11:57:33:6e:e1:a1:80:b4:50:2b:3c:
f1:a1:e2:2b:d0:62:f7:91:9e:2b:72:e0:7b:b3:51:0c:d8:ce:
30:e4:ab:e2:6f:74:df:f4:63:67:67:c2:31:ed:9d:b3:9d:6a:
93:61:a1:5d:ae:fc:af:7c:5d:f7:85:d7:86:ba:55:d0:1e:fe:
09:32:c0:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKSVA0tGXjEBeX2ov6WoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2M2ZGJhZjJiY2Y1MmYyN2U1OGMyZDg5YzZjMWM1NWI5
NWRmMjYwHhcNMjYwMzI2MDgwMDU1WhcNMjYwMzI3MDgwMDU1WjAzMTEwLwYDVQQD
Eyg1NjQzMmU4ZmJjMTI3MDdiZTQyZWIyMzU2ZGVjNTc3MjQ5YzUwNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3idhMQuE/9O2ZtFobOTuxZaJPs/X
QIgy9Xfl8XXO2BiloLWNoGwfAQxZcg6/EPwa2rkuM1NUl54B8WPJs9p7eEYkapfh
nyQYwZwv9mHyPVKj/zWWE/nGQkPLLUIBWSz9Ubfuv6+dadjZV6chOA0RLNHAzL3b
UZkUMlbFwmIcF8PB1YE8mTUEM42YttIhSqfY3pYxqJ+p47pk9DfE4zo40Nl8g4ZT
Rg1HZWs7j7fiYSZ2k+mv1EGcBulqyeE5/auyeV307wqxRrPDWH5f+dPA0zHkD8UU
yf4Y8EOluNmzV2Gub2C6tU4MXO1DJtUIt+3I0gKuUGZKYo+3a2NuUuW1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZDLo+8EnB75C6yNW3sV3JJxQRaMB8GA1UdIwQY
MBaAFKY8bbryvPUvJ+WMLYnGwcVbld8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zM2Q3MWEtOTM1MC00MzQ1LWI2Yjgt
YTgzZDZjM2NmMDUzLzEvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zM2Q3MWEtOTM1MC00MzQ1LWI2YjgtYTgzZDZjM2NmMDUz
LzEvcGp4dHV2Szg5UzhuNVl3dGljYkJ4VnVWM3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgNDae3d
rNoc1LtI8BiB6cN7qCfVG1Ms3PFFVqqsbbCEL2W5UhGeAF8k/WeTChj8ve5KHhpZ
vtQPb+mriureUrycIlEo68gg8aj/vROnWb4vkgMq6M8JMfj5FrGHBqeDwrnBQD2i
fcVjmh2LVLVZXK5gGWuOu+DCrY7e8xX7vl5bkhbQjH4qEVSSwqQvBRr4Cawehnzd
KiCmavh81/rpzLml/PSpO86/8j637SvXMgURODbIDj1k7YTzLxFXM27hoYC0UCs8
8aHiK9Bi95GeK3Lge7NRDNjOMOSr4m903/RjZ2fCMe2ds51qk2GhXa78r3xd94XX
hrpV0B7+CTLAVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:12 2026 by rpki-client