Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: hEimOgaE1wE8KnW9EfsR3ZDbksZs0euvqTPE7pwdlC8=
Subject key identifier: F8:1D:75:82:1C:48:8E:68:FC:21:11:30:6C:92:9B:BD:B3:73:D2:9C
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019E1D59D978CE8ADA244DA4520C9E2FED86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0B20
Signing time: Tue 12 May 2026 18:01:28 +0000
Manifest this update: Tue 12 May 2026 18:01:28 +0000
Manifest next update: Wed 13 May 2026 18:01:28 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: qbzIja/GeNObQzPk0esfqG8o8tKXJP56Vr1BAhMWgzQ=)
2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d9:78:ce:8a:da:24:4d:a4:52:0c:9e:2f:ed:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: May 12 18:01:28 2026 GMT
Not After : May 13 18:01:28 2026 GMT
Subject: CN=f81d75821c488e68fc2111306c929bbdb373d29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:35:68:64:7e:9d:a6:dc:d5:94:16:b1:60:
08:07:71:1e:51:8b:b4:f0:4b:88:1e:53:9e:05:33:
d3:f6:e5:44:b4:d1:aa:04:7f:b8:f2:dc:fc:eb:e6:
5e:32:c2:fb:67:4a:85:78:a4:f5:6a:1d:a1:be:73:
42:80:90:c5:e4:99:59:e2:5d:55:ea:86:d4:9c:da:
0d:b2:8f:dc:35:18:89:cc:80:36:d2:ab:0c:97:ea:
f0:98:7b:ca:29:1e:83:bc:2c:67:50:3f:ac:fe:ca:
e0:86:ff:5a:34:3b:3c:6a:18:a1:c0:be:2e:9d:31:
6d:2c:32:0a:2f:d8:04:fd:64:ae:d7:2d:ce:31:84:
bb:39:2b:f2:55:46:ea:db:d5:ff:9e:20:ef:14:03:
06:71:1e:05:99:65:5b:e1:57:43:7e:fa:fc:0a:a7:
5d:42:c1:35:49:d0:8f:cc:f4:a0:36:1d:0d:b4:15:
b7:a3:29:0c:63:5f:3b:de:a6:e8:b1:bc:9e:20:8d:
2b:f6:d8:e0:66:71:31:02:a8:7d:ba:79:06:e8:6e:
c9:0d:cf:6b:e3:cc:af:d9:b6:0f:cb:bf:f6:45:d4:
78:02:00:6f:2a:86:db:5e:7d:89:46:08:c5:18:d5:
b7:8a:53:e5:1e:b9:09:2c:55:99:70:9c:f9:ef:66:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:75:82:1C:48:8E:68:FC:21:11:30:6C:92:9B:BD:B3:73:D2:9C
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:64:49:e1:c7:66:a8:65:fd:ac:72:8c:56:e7:c6:9c:12:4f:
5c:a8:64:67:9c:6c:66:81:49:73:a1:3d:88:d6:6f:9d:0a:ee:
55:4d:80:ba:fe:8a:2c:74:a4:17:e2:53:93:ce:2d:51:33:35:
9d:57:20:d1:f2:d2:20:bc:1c:5b:1d:8a:f3:76:62:fc:e4:8a:
33:02:5e:89:ff:7c:76:ae:e4:71:0a:8e:5a:8d:01:92:8f:27:
2d:c6:42:e6:ca:8d:66:25:62:75:80:48:6e:a8:be:84:9d:df:
4a:97:79:73:86:61:d9:bb:cb:81:5b:89:4d:ca:a8:0d:8b:53:
a8:2b:aa:73:da:39:04:59:5f:a2:90:df:ed:77:3a:7b:c6:9f:
3f:f2:89:1f:00:91:51:31:f0:fe:2b:12:e6:4d:15:bf:74:59:
78:37:e5:fa:5c:6a:23:27:6b:86:32:b0:4c:ee:ac:08:a1:8c:
5c:9e:36:e5:38:dc:ec:d7:79:79:20:66:25:46:7b:2c:e2:22:
e1:f2:b7:e0:a7:1f:44:a6:87:df:fd:ac:b4:88:eb:36:ac:b1:
01:20:7e:e7:d1:4b:d5:6f:9d:86:10:96:99:8a:32:ab:98:fe:
98:03:13:3c:cd:c5:89:49:c6:66:ad:ca:0b:a3:51:36:b6:99:
22:ff:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:05 2026 by rpki-client