Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: RumhaT9GML8T8+FimP6xK/17SXEBLPria4EqQpOvs88=
Subject key identifier: 0C:5E:38:81:C8:8F:67:E6:6E:97:12:A3:52:18:5A:6E:08:21:AB:CA
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019D2816F770816804BD14898C92AF3E14B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0AA1
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: a16SX9INGFF7THPf0VI8uPxDZb9pHuoLaPSRpFzi6qc=)
2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:70:81:68:04:bd:14:89:8c:92:af:3e:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=0c5e3881c88f67e66e9712a352185a6e0821abca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:50:24:8e:51:ad:26:d6:4b:47:f6:02:33:
5d:d2:0a:24:a6:bb:90:a3:8a:51:a2:2e:8d:a0:76:
18:77:1f:19:26:ab:e0:b2:89:46:c5:68:5c:e4:b6:
c9:11:1f:c9:9e:8e:59:ae:c2:e1:84:21:d1:d9:89:
c8:b9:b6:98:96:72:71:2b:d1:31:25:18:15:3b:e0:
d9:e1:c9:06:78:31:b1:5c:21:92:15:b4:bb:ff:fb:
ec:c1:36:e6:16:ae:7d:18:26:9a:27:95:f5:ac:82:
d7:19:8d:d7:9f:49:d0:d3:af:10:54:67:51:fe:dc:
ac:28:65:66:41:70:4a:1d:08:87:a8:ef:b3:6f:b8:
26:44:17:90:50:4d:5f:61:bf:a7:97:85:63:fd:98:
a1:93:4f:84:70:f0:c3:93:f9:e4:24:80:fd:31:5c:
41:fb:aa:de:24:83:cc:e0:6c:ff:05:df:ca:72:96:
6b:8a:4d:be:91:2c:80:fa:2f:e8:64:e7:a3:56:36:
0d:dc:08:bd:a9:4b:31:d6:28:e9:59:8b:41:5b:03:
d1:83:f9:2f:40:c1:68:d2:7b:9a:dc:1b:f5:65:84:
f6:c9:77:a5:ff:c5:bd:aa:1f:21:bd:ff:05:b4:9a:
1a:fd:7b:e3:e5:79:74:05:97:e2:d3:67:20:c6:18:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5E:38:81:C8:8F:67:E6:6E:97:12:A3:52:18:5A:6E:08:21:AB:CA
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0f:a9:ff:19:cd:f3:40:67:a5:4f:96:87:6c:2c:34:23:36:
9f:1c:1a:34:81:c2:b3:73:1a:8b:10:6c:24:56:b2:f6:b3:56:
af:04:ab:94:94:46:14:84:a0:c0:ee:22:e4:14:ab:45:ef:85:
9e:f1:e8:28:d0:29:b9:8f:e8:54:5f:40:c9:01:4f:40:b5:8b:
7f:0d:78:2b:34:3c:eb:c4:ae:b2:73:6c:14:48:4f:65:27:65:
d2:82:0b:a9:fa:f3:6a:c2:cb:20:55:7b:53:d3:8a:9a:e2:1a:
0d:4e:92:4e:9b:8d:96:e8:58:31:69:b7:c5:e5:99:d3:c2:17:
8f:9b:3b:b2:2f:ed:dd:6c:a0:71:cd:e4:b0:9f:0f:d1:d0:8f:
2a:ab:69:d4:2f:ee:1c:38:31:5e:11:16:67:02:72:30:57:4d:
2d:3e:89:5f:9b:95:21:d9:dd:78:63:a0:8c:a7:73:a1:95:16:
19:75:5a:ea:cc:94:e0:9c:d2:c1:d4:b3:39:86:15:19:d6:b1:
7e:91:2b:e8:17:96:1b:7a:88:a0:2f:89:65:52:32:ab:b0:bd:
2e:ed:16:19:88:b4:59:7f:74:51:25:cd:b9:ae:c1:f5:0d:72:
dd:9b:c9:6f:d2:7d:9c:a9:5e:41:2f:2a:3a:56:f8:62:cf:42:
5b:32:32:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvdwgWgEvRSJjJKvPhS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi
Njc1MmQwHhcNMjYwMzI2MDMwMTI2WhcNMjYwMzI3MDMwMTI2WjAzMTEwLwYDVQQD
EygwYzVlMzg4MWM4OGY2N2U2NmU5NzEyYTM1MjE4NWE2ZTA4MjFhYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyohQJI5RrSbWS0f2AjNd0gokpruQ
o4pRoi6NoHYYdx8ZJqvgsolGxWhc5LbJER/Jno5ZrsLhhCHR2YnIubaYlnJxK9Ex
JRgVO+DZ4ckGeDGxXCGSFbS7//vswTbmFq59GCaaJ5X1rILXGY3Xn0nQ068QVGdR
/tysKGVmQXBKHQiHqO+zb7gmRBeQUE1fYb+nl4Vj/Zihk0+EcPDDk/nkJID9MVxB
+6reJIPM4Gz/Bd/KcpZrik2+kSyA+i/oZOejVjYN3Ai9qUsx1ijpWYtBWwPRg/kv
QMFo0nua3Bv1ZYT2yXel/8W9qh8hvf8FtJoa/Xvj5Xl0BZfi02cgxhifEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxeOIHIj2fmbpcSo1IYWm4IIavKMB8GA1UdIwQY
MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt
MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx
LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ+p/xnN
80BnpU+Wh2wsNCM2nxwaNIHCs3MaixBsJFay9rNWrwSrlJRGFISgwO4i5BSrRe+F
nvHoKNApuY/oVF9AyQFPQLWLfw14KzQ868SusnNsFEhPZSdl0oILqfrzasLLIFV7
U9OKmuIaDU6STpuNluhYMWm3xeWZ08IXj5s7si/t3Wygcc3ksJ8P0dCPKqtp1C/u
HDgxXhEWZwJyMFdNLT6JX5uVIdndeGOgjKdzoZUWGXVa6syU4JzSwdSzOYYVGdax
fpEr6BeWG3qIoC+JZVIyq7C9Lu0WGYi0WX90USXNua7B9Q1y3ZvJb9J9nKleQS8q
Olb4Ys9CWzIyGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:38 2026 by rpki-client