Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: f+xYmaGmePzmqcefR+3Df1SXgDsaGJ7hBCp65SXux5s=
Subject key identifier: AD:C3:B6:A5:6C:EB:A1:98:4D:CD:4B:FF:85:60:49:4B:05:6E:C6:AF
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 019D27A8C4D47B8423C04C10056B4BBE5F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: RcpxQF5hy8HO45QNG59SlSFuKUw/cUZ6uBNGuzaWakA=)
2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c4:d4:7b:84:23:c0:4c:10:05:6b:4b:be:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=adc3b6a56ceba1984dcd4bff8560494b056ec6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:51:c5:7c:99:f5:af:9a:4d:55:b5:df:72:
75:f8:6d:19:5b:ee:fc:7d:eb:32:d6:ee:69:7c:26:
a3:45:1d:e5:37:a2:e8:63:16:c9:e1:dc:00:35:dc:
6d:82:90:6f:11:1d:d0:53:37:22:2b:d0:e7:a1:f4:
fd:32:dd:36:98:5a:84:b4:5c:a7:b4:9f:96:eb:57:
d9:e0:08:0f:6d:b9:1c:8e:c6:97:6d:04:9e:97:0f:
e1:6e:d9:dc:92:57:93:25:e5:16:56:d1:0b:a3:31:
e3:50:f0:a2:31:67:4a:c6:ac:0b:14:79:67:f2:3e:
4f:f4:06:e7:28:ee:bd:7b:66:2f:69:d3:57:d8:89:
71:38:8f:40:fc:02:a1:83:2b:76:02:d8:28:f4:0a:
16:df:6b:3b:de:fb:69:32:4a:17:ae:54:d2:9b:ce:
a7:29:8d:63:40:2b:4f:80:a4:77:0a:f4:aa:da:f6:
5f:8e:0d:92:4e:08:d2:b5:a0:dc:4e:c4:19:cd:8e:
b0:dd:4f:9b:fe:6b:38:6e:30:a3:b5:2e:35:0a:05:
fb:e8:fe:30:b2:3a:8b:16:b0:08:a0:42:f1:ce:b0:
cc:2e:20:e2:d0:7a:54:b3:84:ad:c3:40:25:fd:48:
82:6f:0c:95:94:b2:8b:5c:8b:90:24:34:fe:70:d9:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C3:B6:A5:6C:EB:A1:98:4D:CD:4B:FF:85:60:49:4B:05:6E:C6:AF
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:62:ee:f3:56:16:13:4e:2b:5d:3a:83:de:c6:55:a8:82:c1:
44:ef:26:e1:04:a4:99:d4:de:39:24:2b:a0:cd:1a:fd:7f:7a:
5d:43:ac:bb:5e:52:54:bb:d0:a4:76:35:7f:8a:aa:7e:f2:13:
74:c3:88:71:7c:99:cd:b6:cb:a5:9d:6a:7f:e1:75:ba:0f:11:
80:86:92:9c:c4:14:2f:7c:6f:52:c9:c6:9d:b0:5e:5d:d5:4c:
6f:f0:67:7f:a0:9d:d8:29:74:13:d8:51:16:c0:67:c6:b5:ba:
91:12:a5:44:ce:26:92:ab:44:92:68:cd:03:64:97:8a:d5:b5:
ab:1c:a4:b2:61:fe:df:f1:40:19:3e:56:2f:aa:45:7e:8f:b5:
15:93:30:9e:43:46:2e:48:55:47:0d:77:15:bf:e8:32:96:73:
b3:37:66:6f:48:c4:43:90:85:dd:70:d1:83:b2:32:2f:bb:c9:
e9:15:bb:67:71:8f:77:4d:c1:b6:9b:5d:f0:27:e8:f2:a3:f2:
9e:43:03:5e:38:ef:aa:52:dc:e2:d5:06:18:e1:e4:c6:1e:5d:
b3:d7:e1:0e:4f:8a:f5:b7:79:62:05:07:b8:34:29:14:08:ce:
f2:8d:e4:58:bb:fe:22:86:72:ad:62:91:52:34:11:03:45:e0:
8b:38:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:12 2026 by rpki-client