Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: XtCbSYA5Xv0aXxnWvniQdW1FdE6haV7ILDd5TfrFAgI=
Subject key identifier: 3E:40:1A:1D:D6:87:51:6A:06:6A:21:58:7C:E7:D2:03:30:A0:04:F2
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019D2703D1E42DA82E4264E601B813846BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: A-kESQFgScEyFER7yotzjt_cbmI.roa (hash: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=)
2: jpSNAjoIWW5o1dEpckRnfaNZUDo.roa (hash: kdIhMxsuZJUQm1IC9DaIIdMEPEig2DJxhqMNYmLbqDc=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: 2Cr4oW2rAQvNl1/dQMzCX1sY0LN/ez7XTNLH5s4o8AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d1:e4:2d:a8:2e:42:64:e6:01:b8:13:84:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=3e401a1dd687516a066a21587ce7d20330a004f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:2e:b1:6f:1f:38:32:b3:df:00:ac:b0:17:
1e:9c:de:b2:f3:a2:2a:6f:c9:fe:e1:09:45:88:e3:
86:7f:17:36:af:ec:c4:63:5f:df:cd:4e:32:4a:e4:
60:56:e6:2d:4b:d6:62:11:5b:3b:1d:ee:e6:1d:5c:
48:cd:42:f3:b5:44:50:07:a2:b3:7c:fc:50:aa:fe:
27:d9:3d:df:1c:28:26:ec:33:14:34:9f:cd:4e:5f:
a5:07:c5:c0:82:a5:e5:3c:ad:d5:d6:d9:ac:b0:c5:
9f:10:d7:ef:c6:90:c3:91:5a:fc:f3:49:fc:22:82:
b7:bd:7e:84:73:4b:7d:19:7f:62:9d:36:e6:e8:5b:
cd:67:50:12:2a:2b:3b:77:af:06:04:e9:f9:ee:f8:
90:80:73:b7:e5:15:c8:b8:74:b7:a3:70:15:db:b4:
fe:1e:d5:f7:29:99:20:45:ad:79:6c:7e:5e:1d:b0:
2d:25:5a:c0:41:9f:c9:55:a9:40:d6:4b:f2:b4:7d:
a2:a0:95:ac:29:82:e1:11:8c:22:ef:7e:77:fe:59:
fa:57:26:2e:db:b8:55:b7:3e:06:84:80:1f:e5:ac:
a3:03:98:0a:00:f5:b1:23:65:c0:dd:ca:ec:f5:e9:
e6:9d:ef:3b:9f:98:9d:90:47:dd:27:81:b9:30:23:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:1A:1D:D6:87:51:6A:06:6A:21:58:7C:E7:D2:03:30:A0:04:F2
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:df:be:cf:d4:37:a2:31:f5:5f:eb:af:9a:a8:3f:df:21:a9:
b5:d8:d0:7c:e7:dd:50:a5:62:db:e6:a2:e4:71:2b:e5:0e:74:
76:d6:6a:db:8b:23:67:d1:55:48:11:f7:45:70:54:54:0d:e4:
5e:37:6f:a3:bc:57:cb:42:76:89:25:9d:92:47:92:11:13:8a:
fe:02:14:ac:e7:b0:76:a4:03:4a:6e:5b:d4:88:bd:c7:d6:12:
43:8f:e8:8c:df:70:37:c6:5e:22:dd:0a:55:0b:0d:c7:75:4f:
0d:7a:33:b1:d2:f9:ad:d0:d2:bc:19:3b:61:89:3d:6d:b2:7d:
b6:b2:f9:41:ea:a0:8a:3e:4c:78:f2:05:7b:0d:b1:4b:27:3c:
bc:f6:7e:e3:2b:c5:60:c1:5f:f5:5c:19:d7:cc:0a:61:19:da:
d0:48:cf:e0:c1:be:d2:52:b9:6d:36:62:79:2d:6f:b6:fa:7d:
29:77:41:16:b7:3c:77:54:33:a5:6b:81:6b:7e:4d:7c:8b:3c:
b5:e2:74:7a:df:4f:49:55:31:53:da:b7:c0:d2:e8:c7:d7:9e:
f4:5b:7a:d5:9b:24:98:b2:d3:be:b0:26:47:d8:14:ee:35:5a:
08:ac:52:5c:66:fc:05:7b:f2:e0:dc:61:61:f6:ea:ec:39:42:
1f:b5:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:33 2026 by rpki-client