Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: swRJwwV1qakZehfOLdqb4hXM1+FrCfi0ngMd/DXH2sA=
Subject key identifier: 43:1E:C1:12:F4:53:05:1E:C1:CA:4A:3D:BE:E5:AB:62:C1:CF:94:5F
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 019E1D2228E9C63A664D33D0337C887B5517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 0A1D
Signing time: Tue 12 May 2026 17:00:38 +0000
Manifest this update: Tue 12 May 2026 17:00:38 +0000
Manifest next update: Wed 13 May 2026 17:00:38 +0000
Files and hashes: 1: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (hash: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4=)
2: C-zWCgwAxUcB5PR-BZP8SY0imsc.roa (hash: tH6y5VegxHL/FivasKZlqGMSC8JeobbFVY2ZXp/Rp9w=)
3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: YuITARsCAMB8krhkLC94l62aROfckvEOEBhMkYzuV4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:28:e9:c6:3a:66:4d:33:d0:33:7c:88:7b:55:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: May 12 17:00:38 2026 GMT
Not After : May 13 17:00:38 2026 GMT
Subject: CN=431ec112f453051ec1ca4a3dbee5ab62c1cf945f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:f2:f3:38:b8:63:ce:2a:30:6c:df:19:df:
9b:8b:08:96:c4:a3:f9:85:15:3d:2c:8c:e4:30:dd:
ee:4e:af:45:b7:06:f8:a5:b0:2c:93:b3:65:49:c8:
58:81:09:87:7c:0c:f9:71:c7:fd:6d:96:27:40:72:
8f:02:9f:27:63:97:47:bc:d4:bd:13:77:99:76:da:
9e:80:24:38:d7:7a:68:f2:d0:6f:dd:15:79:40:d7:
c1:39:b3:1d:7d:5b:33:4e:45:a7:cc:0f:21:a2:c7:
1c:28:1d:0f:83:18:b1:8a:7a:da:4d:6e:38:51:00:
23:e2:e6:df:60:b9:c1:d6:60:b4:7f:ba:b5:b9:32:
87:fc:21:a8:67:17:17:75:fc:37:38:fe:9a:f9:aa:
43:18:dd:2e:02:f6:1c:63:e1:bb:11:0c:c4:c1:f4:
37:5b:ee:15:1e:c4:61:e0:d2:55:71:64:e2:05:f4:
41:5c:5b:ac:1a:8d:35:99:db:1d:cc:ba:b6:e6:e9:
4f:43:70:5e:5b:b1:ca:7d:0f:28:44:6b:6e:1b:49:
69:8c:82:9c:89:bf:b1:02:94:99:15:25:68:60:e7:
53:3d:b2:e0:51:45:15:31:69:66:2b:00:c6:d5:d8:
4b:37:79:03:da:fb:92:29:64:64:65:f5:c2:c5:9d:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:C1:12:F4:53:05:1E:C1:CA:4A:3D:BE:E5:AB:62:C1:CF:94:5F
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:e2:c7:98:31:d1:f8:f7:ac:61:d6:aa:81:70:90:b1:3f:
30:da:ec:d0:6b:ed:cc:56:1c:3a:4f:65:bd:88:24:ef:59:27:
cf:48:1f:87:f4:ca:4e:48:4c:4e:de:92:1d:41:3d:84:0d:f2:
c1:70:ee:04:cf:5c:77:d3:7c:97:ec:56:6b:c4:16:bb:b0:68:
f5:a7:a8:25:00:39:8d:2a:9b:95:94:44:ca:36:31:c8:59:a5:
b7:b9:ae:bd:06:05:78:e0:e3:ff:91:a3:99:92:40:c0:66:b0:
39:12:7c:3b:1d:8d:dd:ff:ed:28:94:78:81:da:6f:3d:9f:ba:
9f:a9:fd:96:eb:32:c5:0a:47:0c:1e:34:ab:d0:93:cc:a8:43:
95:25:f6:3c:37:8f:eb:e1:e5:85:bd:c7:de:d2:72:12:d6:05:
cf:88:2d:93:ba:66:b5:0e:bf:43:71:ff:b4:20:8b:02:f4:88:
fc:4e:d6:da:ab:89:d1:f2:e1:aa:5f:82:5d:7b:f3:af:24:c5:
96:76:88:3c:74:5b:81:2b:d6:48:81:1f:e0:68:c8:06:d0:92:
c7:9b:9b:25:08:79:d8:1f:b6:47:2c:a6:25:5a:81:65:7a:8a:
c5:2d:bd:c1:56:f8:ad:3c:89:45:25:2e:ff:c8:84:bf:b7:41:
50:c4:2d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIijpxjpmTTPQM3yIe1UXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky
MmNkMmEwHhcNMjYwNTEyMTcwMDM4WhcNMjYwNTEzMTcwMDM4WjAzMTEwLwYDVQQD
Eyg0MzFlYzExMmY0NTMwNTFlYzFjYTRhM2RiZWU1YWI2MmMxY2Y5NDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTy8zi4Y84qMGzfGd+biwiWxKP5
hRU9LIzkMN3uTq9Ftwb4pbAsk7NlSchYgQmHfAz5ccf9bZYnQHKPAp8nY5dHvNS9
E3eZdtqegCQ413po8tBv3RV5QNfBObMdfVszTkWnzA8hosccKB0PgxixinraTW44
UQAj4ubfYLnB1mC0f7q1uTKH/CGoZxcXdfw3OP6a+apDGN0uAvYcY+G7EQzEwfQ3
W+4VHsRh4NJVcWTiBfRBXFusGo01mdsdzLq25ulPQ3BeW7HKfQ8oRGtuG0lpjIKc
ib+xApSZFSVoYOdTPbLgUUUVMWlmKwDG1dhLN3kD2vuSKWRkZfXCxZ1vBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMewRL0UwUewcpKPb7lq2LBz5RfMB8GA1UdIwQY
MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt
ZDAyNGFkNGI3YmViLzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi
LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIjix5gx
0fj3rGHWqoFwkLE/MNrs0GvtzFYcOk9lvYgk71knz0gfh/TKTkhMTt6SHUE9hA3y
wXDuBM9cd9N8l+xWa8QWu7Bo9aeoJQA5jSqblZREyjYxyFmlt7muvQYFeODj/5Gj
mZJAwGawORJ8Ox2N3f/tKJR4gdpvPZ+6n6n9lusyxQpHDB40q9CTzKhDlSX2PDeP
6+Hlhb3H3tJyEtYFz4gtk7pmtQ6/Q3H/tCCLAvSI/E7W2quJ0fLhql+CXXvzryTF
lnaIPHRbgSvWSIEf4GjIBtCSx5ubJQh52B+2RyymJVqBZXqKxS29wVb4rTyJRSUu
/8iEv7dBUMQt9A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:25 2026 by rpki-client