Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: oG3cl1wV/ezWCVSbNuZPBXvf6qNeO53Ypd43L/lek4Y=
Subject key identifier: D5:31:B4:CF:B4:74:38:F1:8E:11:75:2C:40:F7:30:B9:17:8D:78:F5
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 01A0E1E2C0E53B82588C72E1D4E0F59EC477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0D03
Signing time: Sun 27 Sep 2026 08:02:09 +0000
Manifest this update: Sun 27 Sep 2026 08:02:09 +0000
Manifest next update: Mon 28 Sep 2026 08:02:09 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: 0MiwlvUdMfesEQX2i7lJJ/EuuO+AwZj/fIoOnFd0AZY=)
3: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (hash: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:c0:e5:3b:82:58:8c:72:e1:d4:e0:f5:9e:c4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Sep 27 08:02:09 2026 GMT
Not After : Sep 28 08:02:09 2026 GMT
Subject: CN=d531b4cfb47438f18e11752c40f730b9178d78f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:39:92:7a:8c:ef:b2:2f:a8:bc:d3:a2:34:
fc:c1:46:a3:6a:8f:c0:cf:1c:74:21:c7:33:52:31:
ce:8c:55:3a:1b:a5:cc:d5:ae:22:1c:3f:37:15:9c:
b9:1c:99:5a:42:1b:7c:9a:96:f6:45:49:67:a0:1f:
18:21:69:0f:2e:42:a2:cd:1e:60:5d:3b:f5:a7:d2:
e8:0f:14:34:58:6e:77:fa:81:0b:d7:9e:2a:8d:c4:
94:9a:10:e6:9a:1d:76:4e:3a:76:b3:be:97:28:86:
13:9f:15:c2:e0:2e:a2:52:71:c2:4e:0a:2b:7a:0c:
2c:b0:71:75:b3:41:0a:7d:13:32:97:62:8d:17:d2:
a4:10:18:4a:f2:20:41:55:c1:40:a1:29:54:1c:20:
05:06:17:30:96:68:cb:df:91:21:f1:df:11:34:0d:
4e:11:09:67:f2:c9:ac:c3:12:e3:58:30:5a:d6:25:
dd:d6:93:e5:9f:13:eb:1c:6f:e3:a9:01:ac:aa:39:
d0:55:7b:1e:42:cf:f7:0f:2a:b4:dd:b8:09:d0:68:
f5:9d:5a:47:ec:f0:99:4b:79:bc:5d:3d:8a:04:af:
c3:16:e1:69:3e:48:a5:5c:d2:9a:0b:cb:cf:18:15:
8d:18:17:04:b3:7b:38:a1:2e:c4:f5:80:d5:28:d3:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:31:B4:CF:B4:74:38:F1:8E:11:75:2C:40:F7:30:B9:17:8D:78:F5
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3a:d5:5f:4b:61:fd:49:40:87:b6:3f:c7:33:3c:48:62:88:
b4:89:3f:53:82:b0:55:d2:34:d3:d2:3e:b2:4d:0f:63:80:31:
4c:3e:52:1c:34:81:69:ed:27:f3:2f:29:3a:1c:86:c9:7b:18:
45:46:d9:65:4e:fc:10:c4:d3:f6:28:33:71:06:cf:9f:e5:67:
4a:22:73:04:8e:74:c5:79:ee:8d:cd:94:74:45:d0:d2:20:df:
72:39:93:1f:d8:c0:dc:96:e8:c6:78:8f:cb:d5:92:50:14:f5:
b5:20:83:4b:11:78:6c:e9:e5:55:cc:56:5b:17:f1:4b:7f:e6:
e3:b4:6e:90:72:d8:1d:5a:e7:97:97:66:86:5e:a2:74:71:17:
a4:e6:47:af:53:32:17:e0:8e:7c:d3:cb:12:fb:e0:21:29:91:
1a:95:28:09:1a:b9:1a:0d:37:23:75:9f:77:7b:77:45:a2:81:
90:e7:b3:a9:2d:8e:26:63:d0:2a:42:e5:cf:08:bb:b5:17:44:
ef:c1:41:32:bb:36:20:19:99:64:3f:74:93:a4:cf:2d:f6:f3:
d7:a2:bf:d5:30:75:40:d3:64:c8:09:f5:81:7c:99:aa:31:c5:
ee:5a:37:9f:87:bf:1a:ea:3c:48:eb:aa:65:92:f9:f5:db:c5:
16:31:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:18:29 2026 by rpki-client