Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: RLjRKv1D/TJRD+VjiOSSoph9NIuTCv7XDJSw6b/GNeY=
Subject key identifier: 21:D6:BC:D4:86:19:BB:E7:BF:F3:01:17:83:1A:82:BE:30:48:26:8F
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019D284D389AFBC1D553FDEA7E4D2002727D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 189F
Signing time: Thu 26 Mar 2026 04:00:42 +0000
Manifest this update: Thu 26 Mar 2026 04:00:42 +0000
Manifest next update: Fri 27 Mar 2026 04:00:42 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: 5Dzz3RMoDxSVrYzJSV6papVMqwHmJXz1lkQioD8x5/g=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:38:9a:fb:c1:d5:53:fd:ea:7e:4d:20:02:72:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Mar 26 04:00:42 2026 GMT
Not After : Mar 27 04:00:42 2026 GMT
Subject: CN=21d6bcd48619bbe7bff30117831a82be3048268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:6f:b0:65:74:ff:bc:43:c6:9d:e4:92:26:
70:0e:44:27:e4:a8:f7:e8:28:e2:a8:30:45:a0:c0:
8e:70:f0:bf:52:78:2f:66:9d:32:4a:6a:d0:ff:f8:
84:31:a4:29:cf:db:66:8c:10:9a:28:a5:72:d6:6c:
42:51:03:d2:7f:81:34:c4:75:f0:18:36:56:d4:a5:
b0:04:60:ac:2c:47:6f:8c:12:02:65:c2:e0:21:5a:
2b:d5:e5:1e:a6:e4:46:ff:41:5c:12:2a:47:ec:4b:
90:d0:01:8d:e7:99:09:23:17:8e:4f:67:b1:bc:d6:
bf:a5:70:b3:1f:76:e4:f6:83:96:a1:ad:75:c7:5d:
61:7d:ea:fb:26:29:ec:5b:c6:7e:15:8f:dd:2f:e4:
46:10:79:46:20:ac:b4:33:24:2f:6c:c9:c7:7d:70:
93:b5:17:88:9a:5e:08:28:72:51:fd:b2:52:e9:1e:
b9:7f:8e:08:2d:78:bc:18:e8:f1:b0:67:ed:3c:4d:
9c:69:ea:a7:d4:82:0f:65:ff:8f:16:1a:54:64:bb:
76:ac:7b:2c:01:fb:8f:91:8d:82:19:db:6b:2c:e3:
d4:67:1a:df:fc:6a:5e:39:ba:25:85:a9:ee:e4:1c:
3d:51:63:42:87:77:53:3a:de:65:91:4d:de:44:4f:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D6:BC:D4:86:19:BB:E7:BF:F3:01:17:83:1A:82:BE:30:48:26:8F
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:a2:d5:96:d2:57:04:f0:38:50:b0:c4:e7:45:35:d0:52:
44:bb:65:4d:77:6f:2e:c8:41:10:77:9e:95:06:c3:6e:54:86:
6b:f0:3c:8d:40:5b:68:8e:c8:f2:62:72:0a:83:0c:07:82:30:
53:40:28:00:b4:98:d2:e7:66:4b:f4:c8:d8:1f:ce:c3:70:c9:
3e:b5:19:5f:a7:bf:83:5d:33:4c:7f:c8:91:52:f6:61:98:b0:
5f:98:2f:09:c9:22:9f:0d:82:86:d1:ab:2d:24:76:45:41:a5:
d3:d8:10:70:e9:1d:3a:6d:89:16:23:c9:ba:79:4c:a2:2c:2f:
d7:ab:90:90:58:59:32:cb:0e:e2:93:81:d4:f2:c6:5b:e3:a9:
62:92:24:8b:d0:1d:3d:41:b8:ec:9b:44:cc:60:20:ba:bc:09:
72:f6:2e:a9:29:ef:40:8a:cc:2d:93:30:32:bf:c7:66:d9:6b:
5e:2b:8e:4a:2b:3a:6f:56:7c:45:bc:0f:bc:3a:dd:be:8f:2f:
7c:f3:f8:bb:c0:63:5c:89:57:f7:70:3a:4a:66:38:42:27:39:
9c:e5:ee:7d:dc:27:ef:7d:92:5d:b8:be:a2:13:10:b5:e5:fc:
b7:4d:8c:90:80:ff:a6:76:78:71:03:0c:1b:f7:15:24:0d:04:
23:5b:37:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTTia+8HVU/3qfk0gAnJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjYwMzI2MDQwMDQyWhcNMjYwMzI3MDQwMDQyWjAzMTEwLwYDVQQD
EygyMWQ2YmNkNDg2MTliYmU3YmZmMzAxMTc4MzFhODJiZTMwNDgyNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFpvsGV0/7xDxp3kkiZwDkQn5Kj3
6CjiqDBFoMCOcPC/UngvZp0ySmrQ//iEMaQpz9tmjBCaKKVy1mxCUQPSf4E0xHXw
GDZW1KWwBGCsLEdvjBICZcLgIVor1eUepuRG/0FcEipH7EuQ0AGN55kJIxeOT2ex
vNa/pXCzH3bk9oOWoa11x11hfer7JinsW8Z+FY/dL+RGEHlGIKy0MyQvbMnHfXCT
tReIml4IKHJR/bJS6R65f44ILXi8GOjxsGftPE2caeqn1IIPZf+PFhpUZLt2rHss
AfuPkY2CGdtrLOPUZxrf/GpeObolhanu5Bw9UWNCh3dTOt5lkU3eRE80rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHWvNSGGbvnv/MBF4Magr4wSCaPMB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0ii1ZbS
VwTwOFCwxOdFNdBSRLtlTXdvLshBEHeelQbDblSGa/A8jUBbaI7I8mJyCoMMB4Iw
U0AoALSY0udmS/TI2B/Ow3DJPrUZX6e/g10zTH/IkVL2YZiwX5gvCckinw2ChtGr
LSR2RUGl09gQcOkdOm2JFiPJunlMoiwv16uQkFhZMssO4pOB1PLGW+OpYpIki9Ad
PUG47JtEzGAgurwJcvYuqSnvQIrMLZMwMr/HZtlrXiuOSis6b1Z8RbwPvDrdvo8v
fPP4u8BjXIlX93A6SmY4Qic5nOXufdwn732SXbi+ohMQteX8t02MkID/pnZ4cQMM
G/cVJA0EI1s39w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:39 2026 by rpki-client