Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: EKJBoiDl6KseXWRoq+VPkINTvaPmGTos7RtE3Q3TUU4=
Subject key identifier: EB:60:EE:24:E1:70:54:1E:3E:83:20:54:BE:E8:8E:3E:AF:8F:69:36
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 01A0F56906D44E66FFE6FCFF84F35921F7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0C99
Signing time: Thu 01 Oct 2026 03:01:35 +0000
Manifest this update: Thu 01 Oct 2026 03:01:35 +0000
Manifest next update: Fri 02 Oct 2026 03:01:35 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: 42hM1l89+VcMW4Ja81l/X74poUGaV2zZ9GfTT9NtuNM=)
2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:69:06:d4:4e:66:ff:e6:fc:ff:84:f3:59:21:f7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Oct 1 03:01:35 2026 GMT
Not After : Oct 2 03:01:35 2026 GMT
Subject: CN=eb60ee24e170541e3e832054bee88e3eaf8f6936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:a1:45:80:5f:7e:16:a1:47:f4:b2:ca:a1:
98:bb:d7:58:1b:33:5d:7f:a8:8d:05:0f:23:d8:51:
24:07:d3:d2:eb:6e:82:a0:63:16:10:e1:36:69:ef:
eb:87:74:25:7f:73:7a:62:70:62:f2:4e:d3:97:df:
e5:24:2b:a0:af:8b:99:23:4f:64:ad:76:94:5c:d5:
d3:f0:ad:36:f5:3c:30:89:a3:40:7a:55:8a:5b:ee:
b5:3a:5c:b7:c1:f1:00:9d:10:a6:d2:b0:07:7f:0f:
a3:46:08:60:ee:4d:31:c4:2a:1b:0e:4c:3f:0d:81:
1f:6a:0b:1b:42:3d:bf:81:30:84:3b:7f:d5:ba:05:
78:79:f6:07:58:e0:2c:49:71:f2:ae:cb:54:76:89:
74:fb:77:71:79:f4:9b:8c:1b:bb:f6:b4:99:66:ed:
91:47:47:aa:ff:c9:f3:73:19:b0:1b:a6:57:0b:a0:
e1:dc:63:1f:dd:14:9c:86:69:04:29:c5:87:3d:6d:
96:e3:bd:03:8f:76:27:d9:f3:62:8e:ec:f4:34:da:
aa:73:2c:16:c2:76:fc:e5:4b:92:22:f8:20:7d:6f:
3e:1e:51:49:40:92:1e:9c:c3:58:64:ea:8b:dc:28:
db:f3:dc:f8:28:4c:d5:88:a5:aa:e5:6b:0d:e5:22:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:60:EE:24:E1:70:54:1E:3E:83:20:54:BE:E8:8E:3E:AF:8F:69:36
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:d9:95:49:e1:b9:12:94:e4:b6:e6:ea:da:aa:3a:f1:2a:
d4:b3:9a:c3:10:82:4a:45:3b:d6:ca:37:a0:12:4a:3f:98:46:
27:b0:13:c3:04:59:7e:d1:b6:6a:2f:9c:20:23:e9:1b:b1:2c:
63:da:6c:ac:ee:2b:40:e2:5d:60:9a:17:e5:66:44:c5:9b:87:
17:ca:35:ef:5c:d7:7a:93:76:9d:15:6d:f0:b0:34:66:9d:74:
45:af:fa:32:a7:c8:7e:6e:bd:67:f5:87:df:50:ee:da:77:9c:
d8:65:d2:2a:25:07:0d:73:fa:8c:b8:db:b2:61:d9:3f:ad:c4:
bc:d6:27:ff:cd:df:00:a0:24:3e:d7:ed:62:6e:f7:ba:45:a3:
98:89:f3:39:de:32:87:0e:4b:0f:63:72:20:b4:68:f5:a9:33:
7e:e5:a1:5b:30:75:0d:69:2b:83:27:67:49:88:27:50:0a:04:
08:c9:1f:4d:90:b9:15:c1:43:cf:af:8b:cc:5d:b4:f3:30:a8:
d2:e4:30:ee:e6:d3:fc:c1:11:f6:ed:34:21:4f:7c:61:e7:26:
dd:1c:7b:da:70:f9:3c:50:33:b7:72:c8:1d:7b:c3:82:d7:da:
02:a7:83:5a:aa:8a:44:95:9d:e8:5e:dd:e4:d7:56:cc:5c:97:
8b:34:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:23:59 2026 by rpki-client