Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: EANCu8Q3xnjZFPU0gtdzFYv+iS1ydKB0gpuS02ydXWo=
Subject key identifier: 5B:C3:82:37:60:4E:00:EA:94:C9:1F:89:BD:8D:FF:63:3A:75:4D:6C
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 019D27E0215E5A8BE9C02DE03D13592687AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 0B04
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: T8H29xdvMM615tBBaetAKqxS1Lg.roa (hash: f1JOsohKbsQAHJoFy6fUS25sjpjOzZztTxeJ515Q3+k=)
2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: MDIfQNQFIzBmO3fgB3qtQ+q9ZnTKUdDEMw9jYEgZzg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:21:5e:5a:8b:e9:c0:2d:e0:3d:13:59:26:87:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=5bc38237604e00ea94c91f89bd8dff633a754d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:cc:63:af:e1:1c:dc:d3:4d:06:74:71:24:
b1:07:a8:37:57:81:b0:b5:06:7f:27:08:c8:64:35:
e1:da:84:7a:7a:05:35:c7:b1:08:b9:04:81:f8:98:
7b:f2:cd:b2:c4:85:43:3b:87:1f:d3:17:73:1b:f4:
dc:4a:10:25:58:c8:98:ff:90:a0:e9:23:fb:f9:76:
3b:67:f0:84:5c:81:9d:bc:2a:92:4f:b7:dd:20:7d:
31:73:a6:3d:c0:8c:57:8f:01:3a:53:4b:86:63:f7:
58:0b:6d:c8:58:18:83:dc:4a:f1:ce:30:f6:47:28:
f9:4f:a7:8a:6c:27:f1:e7:89:78:aa:4f:f4:7b:09:
1b:75:c7:3e:9e:56:d9:52:3d:31:1d:7d:48:ae:7a:
3e:8e:a5:0d:e8:2c:31:a3:4a:4a:94:91:d4:84:76:
72:f4:e1:ed:66:bf:f4:f1:b2:31:e5:ee:d5:db:16:
c0:70:e4:56:47:22:45:32:aa:47:24:ee:dc:b5:ed:
a1:09:6e:0a:08:4d:52:5f:8f:16:e5:be:df:42:85:
57:8b:3c:ca:17:4a:7e:9f:66:e8:c8:72:8c:01:a0:
a5:7d:76:b1:19:e4:f8:a6:68:b8:04:87:4e:8a:06:
33:84:cd:bc:c7:79:8e:31:97:2e:64:e8:e4:e0:bf:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C3:82:37:60:4E:00:EA:94:C9:1F:89:BD:8D:FF:63:3A:75:4D:6C
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:92:1b:81:72:2b:fe:b6:48:27:f3:67:74:f5:35:28:e8:
2d:f2:a8:be:3d:9a:88:17:da:5f:d5:a3:06:bc:24:01:6d:a1:
76:e5:13:46:5b:4b:74:7b:28:be:59:6b:9c:8c:62:04:4e:cd:
75:e0:91:ec:fd:8e:6e:1e:1b:c3:cc:24:67:be:74:f1:89:fd:
18:5d:51:92:21:43:e2:d7:6a:61:4d:41:9a:6e:07:92:a8:8d:
00:2e:1f:08:8e:f4:1d:8e:c6:0e:13:61:52:20:f3:8a:c5:f6:
a6:be:65:b3:55:ad:20:57:35:b5:aa:c8:c1:e9:f6:d7:3c:ee:
22:93:63:60:ea:0f:60:a0:0d:e4:4b:80:ae:96:ff:e3:67:d2:
ff:cf:51:6d:a9:71:48:5c:ce:dc:02:91:41:10:4c:3f:64:d5:
ce:79:77:69:1a:10:9a:00:95:d7:f5:a5:d3:58:e6:18:d3:05:
df:19:27:07:4d:19:85:f2:f7:62:ba:ad:5c:b6:ae:68:e3:ae:
07:2d:2b:20:51:9a:35:13:08:f3:d7:97:78:fe:25:40:db:78:
d4:b4:be:6b:77:07:35:8b:72:d4:b3:99:d4:39:f5:90:84:a9:
07:5a:dd:37:c6:cb:56:a2:12:9f:c1:f5:a8:08:de:ff:df:e2:
5a:43:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:03 2026 by rpki-client