Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: cdnsNzyw0hVqxIb89FETn19BtDdLkRn3Erit0aXakWY=
Subject key identifier: A6:8A:3E:17:C1:31:91:A9:EE:33:D4:1C:41:EC:B8:F6:16:F7:55:BF
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 019F91DAEDE6665C34707C525698C7E9CF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 0ADE
Signing time: Fri 24 Jul 2026 02:01:11 +0000
Manifest this update: Fri 24 Jul 2026 02:01:11 +0000
Manifest next update: Sat 25 Jul 2026 02:01:11 +0000
Files and hashes: 1: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (hash: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4=)
2: C-zWCgwAxUcB5PR-BZP8SY0imsc.roa (hash: tH6y5VegxHL/FivasKZlqGMSC8JeobbFVY2ZXp/Rp9w=)
3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: LJeNNzrd7sceXNyS+xHJYMkDGuwQ/8vkj0kOUF88Q8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ed:e6:66:5c:34:70:7c:52:56:98:c7:e9:cf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: Jul 24 02:01:11 2026 GMT
Not After : Jul 25 02:01:11 2026 GMT
Subject: CN=a68a3e17c13191a9ee33d41c41ecb8f616f755bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:36:48:ae:77:5e:6c:c9:61:4b:6a:be:ef:
59:70:b2:c5:0a:d1:61:5f:c2:f2:38:7d:ec:3b:d6:
88:87:3f:5d:66:e2:4f:9d:3c:ba:c4:b8:c0:63:49:
2e:9c:4e:ff:9b:c4:a8:71:44:3d:33:12:f6:89:e9:
58:37:f5:22:ba:44:a4:66:e2:9b:76:b5:f3:ce:a3:
6a:65:51:8b:d6:8c:5d:d8:db:38:14:73:80:ed:66:
19:3e:d9:92:b2:0e:4f:d5:0f:32:29:db:b6:00:3f:
a9:c5:e1:d5:bf:59:b9:98:60:dd:1a:c6:7a:fd:fa:
31:de:eb:2e:b3:7a:0c:87:7a:82:d2:04:f2:07:18:
c5:c1:31:41:c3:c7:0d:27:47:71:e7:f0:45:11:c1:
5c:2c:1f:88:82:6b:20:88:7c:85:45:4a:1c:e0:96:
21:6b:fe:d8:ce:57:e8:e5:b8:b6:28:0b:40:11:d9:
43:7a:9a:40:fa:ac:63:cb:70:de:b7:ac:a2:ef:d1:
de:2b:1d:00:6b:b5:9a:45:15:20:e5:ec:77:b9:88:
43:aa:28:07:d8:0a:ee:d9:e5:a7:59:d9:21:7f:74:
72:9f:3a:5c:58:ab:2d:1b:6e:e7:b2:73:21:d9:a2:
23:8c:0a:97:18:99:78:df:f5:c7:22:75:ae:74:59:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:3E:17:C1:31:91:A9:EE:33:D4:1C:41:EC:B8:F6:16:F7:55:BF
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:56:f5:8f:dd:ed:d9:fe:b7:e9:5a:12:44:f6:ce:e2:be:64:
fc:67:83:46:af:42:f5:21:08:dc:9a:90:8d:59:74:aa:0c:9f:
6d:89:13:a7:70:06:a0:f1:76:70:7a:d5:19:28:86:d9:67:28:
b0:f2:77:21:a6:42:6b:82:62:04:02:08:2d:96:4a:23:09:f4:
a1:95:30:7f:5c:7d:f4:d1:d5:22:6e:df:19:7d:34:ee:f5:aa:
9a:72:11:3b:f7:39:77:74:44:6a:a9:a3:26:88:19:ec:de:69:
4c:ce:49:5b:d2:45:a1:77:dc:9e:50:f5:fc:92:f0:2d:31:13:
7a:1e:7f:51:4d:47:b6:ac:b2:e7:e3:e7:12:00:72:39:60:75:
33:4c:12:80:cc:24:35:8d:7a:66:18:58:29:a6:68:a8:7a:62:
be:d1:65:d1:4d:91:a1:a3:77:dd:8a:a8:9d:c4:bc:70:e3:07:
97:12:04:36:d2:61:9c:a0:32:63:1c:92:21:66:ae:ba:9a:f1:
d0:7a:22:fa:3a:5b:70:a4:d4:97:ec:34:cc:82:58:ec:04:58:
de:5d:c1:ec:fb:0a:e2:e3:ab:5d:a9:92:64:bc:bf:6d:74:f8:
70:57:fa:7c:14:a2:05:8d:83:c6:bf:2b:87:c9:60:ee:82:99:
c4:c2:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:23 2026 by rpki-client