Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: x/G3x6xcYGJwxMDCJRuoKP8lZSGwywOevVZoAn6gu2I=
Subject key identifier: 10:C7:AC:37:6E:55:38:26:DB:CA:5B:8B:D3:99:B5:E6:82:2E:60:FF
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 019D2704553CC8AF355462CD29E261F56C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 0933
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: A47ejH-QND_4p5ZynnjdFhGZbf4.roa (hash: +HcmD5EzZ2PGTv159HFtwSPGyMK2+fjDllHmAYnxw3I=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: HHn/Owg0KpVL0rFxEefie37q85OPclNCdH2C+aoO0Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:55:3c:c8:af:35:54:62:cd:29:e2:61:f5:6c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=10c7ac376e553826dbca5b8bd399b5e6822e60ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:eb:cf:f5:7d:95:56:09:39:d5:ee:20:73:
26:91:d0:be:1d:2a:7e:c5:c4:08:08:cc:29:52:98:
94:a3:58:12:f3:09:0a:d5:2e:44:30:cc:cb:92:08:
a2:5e:63:68:7c:9f:3e:61:8f:00:53:02:40:eb:c2:
72:58:6d:ab:03:2a:a5:21:e1:77:c2:c2:52:30:2c:
1f:94:e9:23:c0:81:24:55:8c:7a:e3:b4:0c:c7:83:
cb:d4:a7:fa:f1:4d:7d:bb:a4:99:c1:05:dd:00:b5:
cf:95:69:72:4a:b8:ed:2f:69:ca:53:1a:e9:b3:ca:
d7:55:88:06:e5:72:2b:4b:c3:86:c2:57:c7:e2:b9:
55:e1:2e:c6:0e:58:9e:06:27:49:8f:e4:bb:d6:84:
99:35:19:b2:e2:9e:f9:cc:cb:e5:65:eb:a4:7d:24:
c8:7c:44:55:20:91:8e:e9:3c:7b:4d:32:27:37:79:
57:8b:b5:4c:72:69:bc:01:87:97:85:7b:36:e8:ae:
2e:0f:bb:1c:bc:cd:2e:ab:98:65:88:3e:af:21:a8:
5b:0f:a7:cb:65:bf:cd:03:62:d4:a8:cb:6c:8f:d0:
4b:68:2a:9d:53:ad:67:2f:fa:3e:08:ab:a9:a6:3a:
55:e2:05:83:9b:c4:31:75:93:0c:b7:4e:e0:6d:33:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:AC:37:6E:55:38:26:DB:CA:5B:8B:D3:99:B5:E6:82:2E:60:FF
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:db:e5:36:81:52:56:ca:72:26:c6:65:25:2f:56:9f:9d:aa:
69:9f:28:38:6e:86:a9:64:af:eb:da:20:6f:51:d4:2f:db:1a:
c5:2e:63:fc:ba:f3:2a:1e:7c:8c:21:a9:16:c6:7b:c5:c9:a1:
56:e1:19:e4:65:61:2b:bc:51:4c:20:cf:81:ed:8f:1a:95:71:
e0:b7:1b:1b:51:cd:27:84:43:41:a9:0f:82:f5:2c:6f:df:6a:
1e:a4:e0:31:f4:ab:ae:01:2b:6d:c3:06:25:c9:1b:c3:43:0b:
7f:9b:c1:86:16:d9:a0:d4:d4:27:40:0c:2a:96:eb:59:e5:18:
16:43:22:8b:48:00:df:11:ac:6f:60:af:af:9b:75:70:7f:f6:
1a:68:40:42:01:12:7c:cb:d1:63:ab:21:73:bd:d1:00:99:4d:
19:cf:27:ba:35:76:47:a7:96:d0:a1:e2:d6:d6:40:e6:3b:00:
72:09:32:67:aa:65:5d:9a:84:0d:0e:65:67:e6:52:5a:8a:d8:
92:c9:79:39:5d:93:50:d5:4d:6c:c8:6e:85:0e:1d:e1:01:b4:
2f:31:16:1a:fd:13:29:02:6d:ed:35:c0:f0:62:39:5d:e6:33:
4c:16:f0:3f:41:ff:3f:1b:55:03:65:e1:04:15:6b:6a:81:fc:
c9:f7:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:52 2026 by rpki-client