Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: NoLAsZ6eBUXmajziiltAsNyWCErZCFiOAPz9sJ3y68U=
Subject key identifier: F5:1F:21:4F:C3:DC:20:06:B6:67:6A:42:D7:6A:5B:15:20:F9:94:16
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019D26CCEDF57895D17F82230FF2C9DEE089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1584
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: fjfXG7/H0VK90I+WGGqU7vvU2/Zm/1xO/qI23MSLtwM=)
2: l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa (hash: ntncx83xvrR7GXBUBSWIBKho03vJeQ/rhh6Pkr3gi58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ed:f5:78:95:d1:7f:82:23:0f:f2:c9:de:e0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=f51f214fc3dc2006b6676a42d76a5b1520f99416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:55:7a:2e:c8:97:b1:82:fe:f9:38:8d:41:
dd:8f:d2:f7:a2:a7:d1:b8:87:e7:cd:de:a1:36:35:
c6:1c:51:97:d0:62:4d:34:e2:ea:05:65:3e:55:9d:
10:5d:51:18:33:46:b6:31:b8:df:4d:4b:4a:aa:3f:
fc:81:fd:ff:41:5b:af:d7:81:46:ff:00:3f:3d:57:
ab:35:7a:d4:d9:4c:e1:0d:fd:4d:a7:52:cf:be:bd:
fe:a8:29:93:43:60:79:b6:6d:aa:d2:80:82:4e:0c:
37:dc:28:fa:bf:7c:f3:b0:c7:21:f7:75:1b:a5:c2:
9d:55:3d:56:ef:3d:57:c3:8a:4f:4c:ae:5c:b8:a9:
86:1f:5c:6f:48:45:51:fd:da:3e:95:a3:1d:c0:ee:
23:49:b1:50:77:dc:96:fa:85:7d:72:8f:6e:ff:d4:
e7:28:ce:70:83:cb:e5:d6:d7:61:5b:32:5f:1b:fb:
48:a1:ce:55:64:cf:5e:aa:b7:e8:2f:a8:9f:5a:6a:
9b:ee:bc:86:e5:94:d8:b3:8c:60:85:86:bb:f7:dc:
cf:fd:f0:3d:40:44:79:f5:89:ba:60:c9:c0:3a:03:
16:74:a2:87:39:72:7d:1a:0c:ba:b8:59:73:4a:1b:
6b:6d:0e:ec:fc:4a:27:fb:f4:bd:e3:32:73:c2:21:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:21:4F:C3:DC:20:06:B6:67:6A:42:D7:6A:5B:15:20:F9:94:16
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:db:10:03:1e:d6:95:06:7b:db:58:91:d9:0b:df:18:2b:
7f:56:0b:a6:0b:f9:d4:05:bc:79:12:40:21:2b:d5:dd:b7:c8:
30:86:b8:ef:8b:33:32:cd:a4:66:af:50:89:b5:bf:31:97:94:
98:dc:d3:f2:08:46:1f:d7:bc:d6:94:44:00:e3:36:20:a4:20:
c1:91:bd:16:45:8f:72:3d:a6:b0:fe:53:8c:ea:f3:76:d9:fb:
0d:31:aa:ad:69:53:83:bb:dd:d8:33:fe:3d:ac:2d:63:f0:38:
47:3b:31:1a:98:bc:eb:46:05:12:62:bc:80:cf:ab:38:34:7b:
fb:b8:d4:94:12:0f:1c:5d:2c:ed:d7:ab:e6:f6:f7:21:99:1c:
8b:20:fe:cc:b3:79:f5:26:11:c1:e2:09:ef:59:d0:fe:b5:9f:
d6:05:49:5e:d7:b7:a1:7a:6f:eb:62:d6:cf:3f:af:cb:ad:bc:
b1:36:82:bc:27:3a:2a:78:d8:08:39:e5:8f:7c:39:12:3c:58:
5f:73:b3:fd:48:8c:57:72:f9:0f:16:00:bd:34:7a:66:67:33:
65:3e:81:16:18:cb:c6:85:c5:8d:8d:64:3e:26:09:bd:ec:58:
2c:24:de:09:a5:bd:cd:f6:c0:32:e7:ef:55:f0:b6:6a:16:5c:
b0:91:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:27:03 2026 by rpki-client