
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: xzk7gBtEX0X/ostV+Sxsp2R9uyxA2K1bVUX3jwarots=
Subject key identifier: 18:D1:94:AC:BF:13:03:BC:57:F3:36:49:D7:F2:9E:D6:4C:4B:D1:52
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 019D2628A070F62024A8F92D649A2424EEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 119B
Signing time: Wed 25 Mar 2026 18:01:29 +0000
Manifest this update: Wed 25 Mar 2026 18:01:29 +0000
Manifest next update: Thu 26 Mar 2026 18:01:29 +0000
Files and hashes: 1: nS0y39FHd_KBicbFUGi66q7vdag.roa (hash: Z3Fr6bAjwL99ER5kh2Zqj12sGL3oFe9ZTzwUUnAJ/DY=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: lrDL06rfaB7kp2WIKgy5vndzBjy/ABfxRy9O/Ha54Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a0:70:f6:20:24:a8:f9:2d:64:9a:24:24:ee:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Mar 25 18:01:29 2026 GMT
Not After : Mar 26 18:01:29 2026 GMT
Subject: CN=18d194acbf1303bc57f33649d7f29ed64c4bd152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:c0:c4:f5:29:a6:c1:cd:10:fe:2a:2e:02:
75:79:ac:8e:e9:a7:9f:eb:f1:ec:da:34:72:ab:48:
78:40:e1:82:7a:76:4a:f2:30:03:28:10:3b:76:38:
4d:1e:7c:08:ed:f5:ba:24:41:13:b2:72:9b:1a:e2:
48:7a:8e:42:c6:ec:cc:e7:e1:34:de:a3:87:48:c4:
cf:06:e2:17:f8:dd:a8:72:65:f7:b1:d2:92:f0:53:
13:f8:c7:54:26:be:a8:f1:14:9c:37:2b:9b:10:c3:
62:25:42:a3:e3:ee:ee:c0:5f:1e:bd:d1:6b:f1:3f:
19:ed:ab:af:02:26:9f:9d:a1:ef:a3:74:34:68:a6:
6f:ff:5e:41:2b:b6:9b:08:13:36:b0:62:4a:46:f0:
72:e8:09:18:61:92:e3:b0:eb:71:c0:f0:a6:88:44:
2f:08:ef:0f:ac:01:1e:f4:80:27:00:41:03:dc:be:
8e:44:f4:86:fd:90:8d:c1:1c:05:9a:80:40:4b:8b:
8d:16:46:97:c5:ce:b7:93:63:f5:5f:b6:48:84:34:
6d:31:f6:76:0e:37:75:54:0f:ec:83:b0:06:b6:b6:
1b:cd:63:af:3a:27:60:79:6b:a6:30:ff:43:82:33:
01:9e:e7:89:f2:ad:50:a4:ae:a8:5d:e5:af:9f:63:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D1:94:AC:BF:13:03:BC:57:F3:36:49:D7:F2:9E:D6:4C:4B:D1:52
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7a:16:1b:d2:03:56:08:cf:27:a6:be:c2:47:88:18:f2:b4:
62:95:04:62:fb:77:ad:33:fc:6c:78:cc:f0:63:67:0c:f7:b1:
02:1a:e7:2c:c0:01:2f:7b:4a:0b:1f:c0:f2:f6:d2:6a:54:40:
03:ce:a8:bb:56:c4:83:6b:3c:3b:cc:e5:eb:a2:ef:c4:5c:85:
d9:79:ea:34:3e:d2:1a:70:a0:c6:57:e7:cd:5f:dc:c0:d1:41:
58:24:ab:dc:c2:af:a6:41:c5:c6:d1:c9:fb:01:7a:05:95:ca:
34:0f:65:ca:22:a9:11:ba:e9:b0:64:67:01:bf:40:88:79:4b:
81:ac:02:e1:05:2b:89:b4:f7:48:b7:52:a2:43:3d:a3:ca:ff:
63:71:9e:22:90:ad:0f:6d:e3:27:eb:3a:8c:27:c4:81:c0:43:
00:8d:31:bf:6c:a4:1d:21:47:96:60:aa:3e:ec:df:9f:52:d3:
ac:65:73:88:59:31:d5:21:21:24:0d:2d:00:fa:f5:e8:d4:80:
74:ac:f6:b1:5b:3f:e7:8e:27:54:cb:3f:99:77:3c:0d:dc:38:
02:c9:3b:50:83:2c:a6:c2:52:2a:fb:e8:a0:18:48:63:62:db:
92:cb:43:73:52:6a:2a:34:bf:3d:32:dd:dc:d9:bc:cc:09:b7:
6e:66:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:52 2026 by rpki-client