Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier: dH9f1PCsonFhNot2m4PdF7QZ1RDcun2/CReZdji4gIE=
Subject key identifier: D3:6C:DB:0E:4B:D9:97:7D:AD:24:6D:6C:9C:FB:8E:8E:48:24:96:24
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 019D28BB60EFB023DDB407869C13A04EAF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:01 +0000
Manifest this update: Thu 26 Mar 2026 06:01:01 +0000
Manifest next update: Fri 27 Mar 2026 06:01:01 +0000
Files and hashes: 1: _xbk6TstsNtf1uEDvwohYt6Gqmg.roa (hash: POljjhEax4aAurVZjBSXk9yYPwBhrXFZZutRKo1D0lI=)
2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: NDr0xvKdsbGZDXcV4wliICjGurMupNG7dQk8V2t7Tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:60:ef:b0:23:dd:b4:07:86:9c:13:a0:4e:af:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Mar 26 06:01:01 2026 GMT
Not After : Mar 27 06:01:01 2026 GMT
Subject: CN=d36cdb0e4bd9977dad246d6c9cfb8e8e48249624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:cc:72:7b:9b:4b:24:bc:3c:2a:e2:09:eb:
a2:68:29:26:93:d2:d8:c5:d9:ce:4b:e7:8b:df:86:
10:f6:65:cc:11:d2:96:f6:ce:4a:ca:2b:73:c2:53:
ce:c0:f8:4d:40:a3:48:a5:b5:8b:ec:52:46:11:ac:
99:fe:6d:fe:a7:6a:31:a9:ac:8c:ec:7b:cb:0b:eb:
e5:b5:f1:4a:b3:d6:fa:c1:67:ae:bd:43:32:0a:d4:
64:6c:87:70:21:18:e6:4d:cf:78:13:07:f7:f1:f3:
60:ea:2a:44:76:50:ef:ca:19:85:39:3c:27:38:d7:
fc:52:97:5f:98:0c:16:15:f3:f1:ed:cc:b2:d4:da:
3d:b5:b5:1b:0a:7d:59:40:12:ac:1c:be:5e:10:c0:
e6:a0:dd:77:86:d6:d0:01:ee:da:97:59:5e:d9:6b:
e4:5e:0c:d4:ee:7f:97:a3:26:4b:22:67:75:03:b7:
90:e7:aa:10:fd:cb:e1:24:4d:e3:33:fd:b0:02:02:
a3:17:8e:7a:cd:2c:c4:b3:54:16:9f:1f:66:25:5e:
4e:a2:dc:ee:4c:b1:fb:e5:5b:db:93:13:ef:1d:1e:
f6:ac:7b:25:a5:28:97:04:7d:ca:1f:b9:b3:91:63:
93:a1:06:62:43:35:45:0b:51:d0:9b:f2:c4:d5:79:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6C:DB:0E:4B:D9:97:7D:AD:24:6D:6C:9C:FB:8E:8E:48:24:96:24
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c6:da:a8:d4:54:3f:72:f5:6d:27:61:55:e4:42:35:d4:52:
c3:a5:37:43:9c:1e:74:cf:74:57:66:b8:d1:f6:18:4d:e0:2c:
6a:3f:d3:08:9e:eb:34:a4:54:c1:e4:83:b3:ae:85:3c:c8:da:
85:ae:22:c5:60:40:c9:c1:7b:84:b3:8b:4e:79:33:8c:ca:56:
8d:5f:45:13:9c:47:e9:45:50:8d:7f:69:2a:a9:b1:ec:61:1f:
72:17:a8:bb:17:b1:bc:15:0c:70:40:40:60:38:79:ad:59:b5:
07:30:31:2b:b5:f1:85:ef:3c:3a:78:8c:f4:a6:ee:e4:c3:06:
e2:59:70:58:6a:57:e4:e6:33:5e:9c:c5:48:90:ad:c3:d7:39:
87:2d:b9:cb:a7:82:90:32:a9:77:d9:05:fe:26:6a:bb:d1:91:
4e:7b:87:3c:05:ff:db:9e:8e:2a:86:ae:24:27:52:6f:22:8a:
1f:16:f1:b8:51:16:d2:28:bc:8d:17:21:c3:26:79:ba:af:44:
e6:d6:df:a9:08:69:ed:ef:b0:c1:04:c2:83:bb:16:8a:3f:c7:
84:3d:47:83:01:5c:63:f9:a7:28:f9:ae:7e:6a:8f:98:ff:9c:
b6:3d:91:ef:43:f9:b4:2d:0f:2e:65:46:03:ba:39:41:a2:0f:
30:a9:f8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:02 2026 by rpki-client