Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: Acw1e6pKbCiy85vm2iO1nSkfYq1e5ji+TQQ8bbcswHA=
Subject key identifier: 35:4D:90:AE:30:6C:FA:4F:50:23:29:A4:D4:5E:F9:BA:7C:18:4F:16
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 01A0D3B866408A80163E9FDE68DBCB18D48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0CE5
Signing time: Thu 24 Sep 2026 14:01:12 +0000
Manifest this update: Thu 24 Sep 2026 14:01:12 +0000
Manifest next update: Fri 25 Sep 2026 14:01:12 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: /fepNuFMjkqa2l4RdLLm5VXEf2yiZK9ZJSbynhdJO68=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:66:40:8a:80:16:3e:9f:de:68:db:cb:18:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Sep 24 14:01:12 2026 GMT
Not After : Sep 25 14:01:12 2026 GMT
Subject: CN=354d90ae306cfa4f502329a4d45ef9ba7c184f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:b8:a3:13:18:44:0e:10:2f:68:d1:a6:6d:
07:3f:81:2b:04:65:68:3f:20:50:df:ac:08:e3:0c:
f1:14:5d:1c:87:3e:3b:d6:9f:18:8a:83:65:99:fe:
45:b5:51:af:31:40:34:38:cf:20:dc:b5:7c:d1:4c:
23:b5:f9:3c:b3:73:a4:01:6d:ae:d6:5d:30:24:8b:
99:1b:b7:bd:68:6c:47:b3:78:34:ea:79:97:cd:30:
a4:41:1f:3c:ff:f7:4d:24:ad:d3:9f:ad:27:10:4a:
fb:c7:63:97:61:e7:17:e9:d9:44:d8:4d:2d:9e:e4:
79:2b:43:52:37:66:42:7b:9a:14:a2:64:60:2b:79:
e9:d7:8a:7a:3c:23:1c:ed:90:8c:0a:88:c9:a6:7e:
9d:e5:eb:a4:64:be:ec:15:af:35:84:bc:9f:9a:6b:
75:4e:34:e3:fc:14:fe:d5:a3:d0:6b:23:d0:20:e3:
09:40:5b:5a:32:a3:0f:f4:a6:ab:a1:e9:37:85:b2:
99:ab:00:1a:6a:a2:52:e1:8d:63:7e:10:53:ac:32:
0e:a1:01:88:79:2c:39:60:25:83:bd:be:53:32:f9:
89:3f:0e:1a:e3:3c:e6:ae:17:c0:77:e5:03:ed:2d:
4c:ef:76:b6:cb:07:32:a0:90:f8:d9:51:81:e4:cb:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:90:AE:30:6C:FA:4F:50:23:29:A4:D4:5E:F9:BA:7C:18:4F:16
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ba:f5:11:92:33:5a:e8:69:55:74:47:db:b6:91:f0:98:45:
a5:fb:58:88:96:4b:2c:62:4a:ad:2e:d2:d0:8c:dc:b8:b3:01:
32:18:86:66:cf:5d:3f:67:6a:c7:69:a4:fe:a1:aa:c9:b6:09:
67:c1:32:dc:6a:9b:be:2a:b4:1a:96:ae:62:90:f7:d6:ec:15:
0a:3b:e6:5a:1a:d8:58:6c:59:b2:ee:7b:8a:1a:60:2e:46:cc:
5f:b5:77:07:41:78:37:b0:71:00:26:7a:9d:7a:50:9a:42:80:
8c:30:a6:1d:e4:d9:73:d0:33:d9:84:0e:4d:85:a9:bb:db:29:
b2:0b:6a:eb:fc:d9:ea:a6:2b:e8:52:c9:89:f9:ae:91:5d:e0:
03:be:a2:91:f4:d4:11:d3:83:6c:f3:21:99:af:dc:24:94:46:
d2:8b:ed:68:67:d7:31:09:a6:86:15:33:d3:3f:e8:f0:07:89:
6f:3a:67:33:7b:57:52:7d:01:7b:f9:f8:a1:43:4f:d2:39:b7:
58:7b:a2:15:91:4e:77:cd:5a:7e:85:82:c9:76:86:e1:ff:52:
68:2a:3e:9a:d6:16:07:bd:c7:7e:0a:bc:2f:ee:0c:e9:ea:97:
b1:8b:52:01:e0:02:a2:f1:85:d3:fe:d0:34:57:48:57:5a:d0:
ea:1e:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:59:20 2026 by rpki-client