Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: jWF1n7NW2sCvpjDTzS7aVDHtsbK6YvMo8D/ZXYnr45U=
Subject key identifier: 59:A6:A9:81:41:C8:27:95:41:B4:A3:7D:63:80:0A:4D:C8:1E:6E:61
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019F93FFB569A75BF55935BDA4C170363A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0BE2
Signing time: Fri 24 Jul 2026 12:00:36 +0000
Manifest this update: Fri 24 Jul 2026 12:00:36 +0000
Manifest next update: Sat 25 Jul 2026 12:00:36 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: le70ROqhzLeISbXutVIuP6SM5g7efy4EIH/TZIZ72tk=)
2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:b5:69:a7:5b:f5:59:35:bd:a4:c1:70:36:3a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jul 24 12:00:36 2026 GMT
Not After : Jul 25 12:00:36 2026 GMT
Subject: CN=59a6a98141c8279541b4a37d63800a4dc81e6e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:32:cf:67:e6:fe:ea:75:f6:a5:50:62:d8:
66:1f:5b:ed:e3:ab:5e:c4:3d:72:23:c1:11:20:c9:
d9:0e:fc:7d:32:3f:e8:07:56:31:25:48:bb:a0:18:
17:2c:25:48:f0:a9:8b:0f:61:e4:c2:06:2a:76:cd:
55:17:d2:01:c2:f9:f1:35:98:bc:c4:50:38:9d:dd:
5f:e7:6d:f5:61:22:19:8a:6c:75:5b:a9:59:11:3b:
2a:dd:e5:51:77:dc:d8:f2:96:5b:77:c8:1d:dd:bd:
dc:46:94:f4:32:2b:b6:09:aa:12:1e:6e:19:06:ab:
82:34:d4:5c:77:6c:25:95:d2:bb:9c:07:8e:35:fb:
e9:20:41:e2:d2:5e:91:e9:a2:4c:1b:08:ec:50:db:
db:01:7d:5e:35:ed:77:02:7c:38:18:92:06:1a:08:
50:f7:21:25:bf:ca:0a:eb:84:0e:95:05:9a:4e:00:
2e:27:67:a5:36:4f:00:fa:58:62:5f:11:81:8c:5a:
13:d7:a5:68:9f:04:95:06:09:5e:4f:cd:ad:4c:57:
35:24:af:ee:9e:80:43:c6:d7:ca:20:f8:c0:8a:93:
c3:88:0b:4b:91:02:7d:53:ef:69:11:7d:1d:61:14:
c4:09:72:e0:d5:cc:d7:d4:5d:d7:97:d8:4d:c3:0e:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:A9:81:41:C8:27:95:41:B4:A3:7D:63:80:0A:4D:C8:1E:6E:61
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:c9:5a:d5:44:b2:cf:97:61:83:16:ea:1b:2e:4d:01:12:
6e:68:df:09:c8:87:e7:4a:5a:fc:84:40:21:0c:3c:36:00:c9:
a5:2f:72:70:b9:29:d4:9c:4a:bb:26:83:d9:74:f1:23:a5:87:
38:87:7a:9b:94:fd:8f:a3:83:c7:54:04:a0:55:a6:d4:b2:a1:
81:c2:a3:9b:ff:83:ce:5d:e0:a3:a8:e5:64:e0:41:a8:b5:95:
b0:81:a6:3d:00:93:4d:7b:94:bd:7d:c5:7f:97:b3:ff:c8:6c:
19:a9:22:60:ba:a7:b8:15:34:c6:d5:8c:9c:6f:f7:de:63:b7:
f7:c3:27:16:70:6e:df:4c:0f:19:44:b8:25:11:8b:27:d1:2d:
e5:48:0f:ef:a5:20:0f:c0:e6:57:d5:af:dc:63:37:98:f5:a7:
a6:f8:94:35:e3:a3:83:d1:52:29:19:c7:76:81:6a:d0:02:0b:
43:36:33:b2:ef:2f:64:24:9e:bf:6f:01:2f:cd:1f:f7:ef:bb:
d5:0d:6b:ae:8b:e3:8e:1b:a5:da:55:aa:3d:18:2b:12:43:65:
ee:d3:62:7f:d1:df:c4:0a:a8:51:af:c0:88:22:8e:61:e6:89:
b1:c1:91:46:d7:9b:9e:c3:cd:66:45:5d:6b:79:04:9d:a7:8e:
11:5e:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:42 2026 by rpki-client