Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: 9XQYf+FjOpvRXbiq62/M5g8aRACwdaAhPfuU1VAMIwU=
Subject key identifier: BC:FF:BF:FD:98:96:4F:6E:43:F8:97:37:99:04:F2:71:67:54:8B:E1
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019D2816ABAFB3D7858F05539FE6E7073AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:07 +0000
Manifest this update: Thu 26 Mar 2026 03:01:07 +0000
Manifest next update: Fri 27 Mar 2026 03:01:07 +0000
Files and hashes: 1: 1P3PxTpub8TzcDJpehJ5veKID6U.roa (hash: WsKdxQ2rVgGdMLcTirR5hgZnDDCFOgPI4K/ODDZGIzk=)
2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=)
3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: 5jVIdionIiXJHRQGSif/sZvxN3oNTUIgO6Tie1wJRZM=)
4: u0aDlmSdDj71EM-iDNS3bskqYP8.roa (hash: 7duuGh5xzVloGi3w0t9gMbtpB8qNHncN9NT4g5kJltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ab:af:b3:d7:85:8f:05:53:9f:e6:e7:07:3a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Mar 26 03:01:07 2026 GMT
Not After : Mar 27 03:01:07 2026 GMT
Subject: CN=bcffbffd98964f6e43f897379904f27167548be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:0f:d9:d2:ef:aa:41:db:15:23:3c:1a:9b:
08:cb:1e:5c:7e:a5:10:10:91:e6:b7:19:f7:93:8a:
38:8e:80:1e:1c:89:64:0f:a6:a1:9a:cb:07:2c:44:
fc:eb:9d:88:bc:98:55:2a:dd:fc:18:53:00:70:e0:
b8:18:4f:e3:b6:4e:e1:e4:e7:a3:b0:77:98:ac:e1:
d3:d3:18:86:67:ec:31:5e:5e:d6:26:1d:1d:5e:71:
16:9c:02:fd:b4:ba:ec:ea:03:f1:4c:de:9c:6e:bd:
b4:85:2f:c1:1e:3d:81:2e:f1:56:b6:14:da:78:0f:
e3:f0:58:86:78:c1:02:d2:f6:55:07:5a:c3:50:7b:
e0:8e:be:1d:d8:1a:f5:6f:5e:77:62:1a:89:7e:48:
42:55:47:0a:4d:e4:d1:2a:0e:74:64:f2:71:98:c7:
75:71:4c:29:aa:2e:2d:a4:49:af:37:42:2b:38:96:
16:e6:55:10:b9:9c:2f:c9:f8:6a:1c:10:19:ca:39:
86:71:a5:b1:fb:b3:64:2f:55:89:b5:f1:f8:f4:e8:
10:92:6f:f6:79:35:2a:21:5c:3f:4d:4d:3c:51:d7:
a0:38:73:3d:68:81:be:a0:4d:33:51:64:f1:2c:ad:
f1:79:5d:16:36:68:f1:21:9b:90:0d:36:4e:48:57:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:BF:FD:98:96:4F:6E:43:F8:97:37:99:04:F2:71:67:54:8B:E1
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:51:33:92:44:e2:72:a9:f2:e5:ac:67:0b:59:25:3f:25:d9:
20:26:a3:f3:dc:a2:71:1f:c6:9f:68:0b:bb:2f:ea:b8:34:ff:
8f:c0:4a:a1:1f:f1:bf:33:8e:0c:1b:6f:00:20:05:be:db:41:
77:ed:05:9f:0d:3b:23:45:6f:4c:8b:ea:76:0e:ab:00:11:cd:
8b:31:c3:d7:eb:bc:03:57:fc:ca:68:a8:40:ef:07:4f:61:48:
1f:c0:e8:38:b6:a5:9b:a3:17:06:2b:e3:f8:30:53:70:5c:13:
ec:f3:f3:3c:12:62:e0:d4:bc:90:cb:52:43:09:82:36:e1:e8:
32:e7:74:86:58:66:31:d3:5e:7e:40:8b:12:d7:36:82:30:79:
61:b2:e3:b5:05:ba:0c:f9:14:60:82:7d:c6:02:62:42:73:fc:
2f:69:12:93:e1:85:9d:f3:4c:7e:34:a1:b6:48:c1:f4:b8:7b:
74:5b:02:00:07:db:b2:02:19:58:29:55:9d:6b:66:c4:f5:b2:
cb:e6:18:15:8a:0e:a3:6c:c9:cb:2e:e9:6a:80:e1:6c:dd:21:
42:11:d0:3e:88:34:a7:cc:9f:59:23:26:e5:5b:e1:5d:75:08:
a7:41:8d:d5:ad:90:73:6b:94:02:05:9f:d2:e3:f7:21:8f:ff:
a1:29:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:22 2026 by rpki-client