Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: TT+xIgG/ibWo1Sb48QGxCYef4o36X2lZuCzt1GfFbFc=
Subject key identifier: 70:F3:D0:34:67:51:7A:03:E3:81:7C:1F:5A:A5:79:21:9E:26:F1:27
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 019D27DFBF28B6A77D5E30C8919BD6057648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0B14
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: OFYlWHvwXE9gqNHVq6EaC3znci0.roa (hash: 3rjgdPpQqg9rUDFn+dwSMF6OJWtKwdxah8PhRfqx0fc=)
3: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: z2tbsJPYzsb6hqwLFb9ZnXP3x6GheqixzTpKQipMDOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bf:28:b6:a7:7d:5e:30:c8:91:9b:d6:05:76:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=70f3d03467517a03e3817c1f5aa579219e26f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:29:86:03:2c:20:c0:5d:65:9d:cf:3d:f1:
8c:5b:7f:6c:c2:f6:d1:23:00:da:5d:ff:26:c5:fb:
d1:2b:2b:2d:f2:a0:eb:0b:b9:2e:1a:cc:65:ce:d6:
1b:87:d3:32:96:91:82:c7:3d:77:1a:29:48:1f:9c:
3f:5f:ec:56:b3:50:ae:b9:63:8a:b5:e8:41:e4:69:
5e:c4:88:3a:38:94:ac:b2:7d:4d:72:69:da:a4:36:
7c:c4:d3:50:0f:1d:a1:13:20:07:34:79:c3:04:d3:
9f:81:a1:3c:67:77:8e:dc:62:6a:0b:49:33:10:b5:
bb:2b:f0:45:3b:05:47:41:da:33:ab:9c:b1:92:45:
82:3d:dd:3a:df:4b:bc:d7:09:3e:17:31:1a:d7:2a:
9e:83:94:6f:98:dd:74:01:d2:a0:4c:9c:c1:b7:7b:
83:a2:6f:a3:51:6e:8f:d6:d4:8e:19:8a:1c:b0:32:
1d:e6:c5:63:7a:74:28:15:32:16:8a:fd:3a:c1:80:
de:f0:0c:d6:c5:1e:fc:43:94:85:f1:a5:fa:56:47:
fc:69:34:2f:0e:02:d7:b2:62:ab:03:83:f2:ff:02:
df:67:c9:4e:33:e2:7b:96:1b:38:11:9f:ed:1f:f3:
d0:33:63:bd:3b:fd:be:9f:a2:a6:5d:eb:73:77:4a:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F3:D0:34:67:51:7A:03:E3:81:7C:1F:5A:A5:79:21:9E:26:F1:27
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5e:b3:77:69:d6:85:59:1a:d4:dc:8a:18:73:35:11:17:15:
cf:4a:a0:c5:ce:be:fa:32:6a:aa:b9:c0:8e:69:cb:07:be:d4:
32:c0:68:61:7d:0f:24:87:22:38:a9:14:7e:e4:58:75:40:c7:
17:cb:44:e2:ae:e5:b4:d6:b7:5c:67:30:83:bf:8f:d3:e9:71:
2f:5d:b8:72:4f:62:7d:a6:04:0d:b1:21:77:e5:6e:1d:84:12:
c3:b9:78:2a:d5:7b:07:be:36:64:7a:b6:5f:c0:8b:27:bc:52:
c7:56:f9:01:d2:81:1d:e6:29:0f:68:71:ee:94:eb:5c:e1:1e:
0f:bd:aa:82:bc:82:14:6e:d2:9f:11:a1:e2:97:c9:95:16:82:
e4:6c:7e:ea:27:7e:c6:a1:de:a5:e0:35:d5:89:ee:03:c8:e7:
e7:42:d1:13:6a:b1:c8:77:25:82:0a:57:6d:e2:28:90:c0:45:
7a:0b:08:11:8d:c3:3e:6e:e4:10:a9:c5:04:ea:45:57:09:e4:
0e:91:27:9c:e3:78:2b:3b:6b:02:d4:87:ce:32:ac:6f:d7:9d:
d2:18:b3:d8:7d:5e:5a:90:64:0b:a8:f3:6b:b7:59:bb:76:a6:
a0:0a:d9:e7:0a:bb:2c:a1:83:d6:a6:38:30:c3:66:4a:d6:1c:
1c:4d:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:05 2026 by rpki-client