Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: wWjfvWy1bh1Zdypkyt0g6Ry4/9v9rc9M9JRd+uzfyPY=
Subject key identifier: 1B:F5:28:C3:55:F0:6B:BF:2C:3F:A7:3C:A1:6C:CA:A6:6B:7E:82:26
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 01A0E99C33485F58259D762CF27C1041750B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0D07
Signing time: Mon 28 Sep 2026 20:02:02 +0000
Manifest this update: Mon 28 Sep 2026 20:02:02 +0000
Manifest next update: Tue 29 Sep 2026 20:02:02 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: junn3/sdKvhnkIN5iY4g/0bXdlbxXaJvyb1YZmMwtuE=)
3: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (hash: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 20:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:33:48:5f:58:25:9d:76:2c:f2:7c:10:41:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Sep 28 20:02:02 2026 GMT
Not After : Sep 29 20:02:02 2026 GMT
Subject: CN=1bf528c355f06bbf2c3fa73ca16ccaa66b7e8226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:59:93:8d:b1:d3:4f:a7:cc:08:55:7d:a3:
90:b0:05:8d:b6:c2:23:d0:e3:c3:40:9f:9f:e9:9b:
75:6d:5f:84:42:29:c7:0a:cc:14:a9:c8:9a:a5:9e:
02:f8:28:c7:42:47:f1:94:1f:be:fa:2c:b5:0f:c8:
b7:0f:cd:64:83:5b:8e:90:f5:21:b0:c1:20:15:32:
a0:97:7a:2f:b2:7c:89:27:d4:59:58:fb:60:2c:e7:
2e:e8:9f:b0:ba:d5:3e:4d:ad:18:1f:70:e6:ef:ef:
1e:74:c2:c2:a2:3a:1f:3d:f2:4d:d0:fa:96:19:36:
b7:06:f1:29:db:52:6a:a3:27:6b:3b:8f:de:bb:e0:
f5:02:13:53:54:21:8f:c8:ea:8d:ed:e5:6b:b0:e2:
fa:6e:b2:d4:63:33:e1:7f:91:b2:57:e3:83:72:9c:
10:9d:f6:f9:d2:4e:2b:98:c5:41:c4:c2:51:3c:fd:
0a:ed:ac:f9:72:be:99:ce:3e:5d:03:4d:9b:32:6d:
6c:a8:4c:a8:99:06:9d:b4:44:85:fa:4c:b9:6f:7d:
5a:46:2c:c1:48:ee:b0:0c:ff:26:38:74:af:e1:a9:
9e:a9:bc:66:79:3c:4e:12:d3:79:73:4c:3a:1a:f8:
20:3f:59:5a:a3:0a:3c:58:e6:15:fc:ff:b6:0d:43:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:28:C3:55:F0:6B:BF:2C:3F:A7:3C:A1:6C:CA:A6:6B:7E:82:26
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:79:e4:30:4e:ab:64:60:9d:65:b1:85:86:43:98:57:29:d6:
f1:29:44:36:6d:21:64:56:f0:f9:00:4a:f3:4d:8e:a6:fe:e1:
53:2b:bc:6f:fc:d3:a6:2c:bd:61:03:7f:e3:d5:18:68:5d:86:
e1:5f:0d:bc:23:18:97:6e:d9:99:35:ea:b5:db:17:e1:a2:63:
fe:15:9b:73:6d:9d:5b:91:26:38:9a:b2:e9:d1:f3:5e:ab:fe:
e3:3a:71:a7:c7:ae:f4:6a:fd:50:de:9a:4c:87:30:f7:f9:82:
4e:6a:9a:d1:5c:77:1c:02:c3:11:35:e4:c7:fa:16:6d:45:8b:
21:14:ef:8c:6e:b6:4e:21:81:5d:12:c4:0b:c4:70:e7:15:31:
9b:5e:80:f5:a2:f5:c9:30:38:a8:16:69:fb:79:03:fe:5b:4e:
b1:6c:4b:a2:5e:33:b8:54:05:22:96:fe:c2:a7:87:c9:3c:2e:
1a:d9:ba:10:d8:55:6a:01:86:b9:48:a3:c4:4a:64:2e:59:4e:
54:04:f6:ef:50:56:07:b1:a1:f2:1f:0e:02:4c:92:91:65:f4:
47:ba:60:24:73:bd:6c:8c:95:1a:0b:42:92:8d:0d:fd:e9:de:
b6:c9:6d:dd:0e:30:eb:26:b9:78:b6:6a:56:6d:e9:c2:97:76:
89:18:75:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpnDNIX1glnXYs8nwQQXULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk
MmIwZmUwHhcNMjYwOTI4MjAwMjAyWhcNMjYwOTI5MjAwMjAyWjAzMTEwLwYDVQQD
EygxYmY1MjhjMzU1ZjA2YmJmMmMzZmE3M2NhMTZjY2FhNjZiN2U4MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRdZk42x00+nzAhVfaOQsAWNtsIj
0OPDQJ+f6Zt1bV+EQinHCswUqciapZ4C+CjHQkfxlB+++iy1D8i3D81kg1uOkPUh
sMEgFTKgl3ovsnyJJ9RZWPtgLOcu6J+wutU+Ta0YH3Dm7+8edMLCojofPfJN0PqW
GTa3BvEp21JqoydrO4/eu+D1AhNTVCGPyOqN7eVrsOL6brLUYzPhf5GyV+ODcpwQ
nfb50k4rmMVBxMJRPP0K7az5cr6Zzj5dA02bMm1sqEyomQadtESF+ky5b31aRizB
SO6wDP8mOHSv4ameqbxmeTxOEtN5c0w6GvggP1laowo8WOYV/P+2DUMISQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv1KMNV8Gu/LD+nPKFsyqZrfoImMB8GA1UdIwQY
MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt
NTQ4ODE2OTExOWU4LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4
LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3nkME6r
ZGCdZbGFhkOYVynW8SlENm0hZFbw+QBK802Opv7hUyu8b/zTpiy9YQN/49UYaF2G
4V8NvCMYl27ZmTXqtdsX4aJj/hWbc22dW5EmOJqy6dHzXqv+4zpxp8eu9Gr9UN6a
TIcw9/mCTmqa0Vx3HALDETXkx/oWbUWLIRTvjG62TiGBXRLEC8Rw5xUxm16A9aL1
yTA4qBZp+3kD/ltOsWxLol4zuFQFIpb+wqeHyTwuGtm6ENhVagGGuUijxEpkLllO
VAT271BWB7Gh8h8OAkySkWX0R7pgJHO9bIyVGgtCko0N/enetslt3Q4w6ya5eLZq
Vm3pwpd2iRh1PQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:42:38 2026 by rpki-client