Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: RAVgf5YQnlMDo1mKClmh4iNuMxkOYtPq201zC2B5Wdg=
Subject key identifier: 73:2F:D6:55:86:B8:5C:B0:92:DB:40:A1:27:7B:35:C1:AA:03:BF:55
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019D2771DE8F385C0F54EE064384A50CD635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 15BE
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: 5FpiDgVB4TwZtzuZBuEd9meFzZuBoB0YoqD1z3vb4g0=)
2: yzTR3xr8FfAmGlnLHCuEER5nDus.roa (hash: lCWnS4QZcDJFta+7yyGjqVSAbP1bGrYcZOR4x1RNMos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:de:8f:38:5c:0f:54:ee:06:43:84:a5:0c:d6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=732fd65586b85cb092db40a1277b35c1aa03bf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:85:24:ce:ce:da:99:67:7b:4d:38:94:78:
e4:7c:e3:18:ff:9f:4b:33:cb:2f:f8:81:56:e0:f4:
c1:9e:60:dc:0e:69:a4:29:e8:c4:ff:e3:42:8f:55:
52:dc:40:13:71:16:ea:d6:8b:0d:69:d7:2c:51:fb:
07:9f:c8:9b:82:ea:cb:17:4a:6b:f7:81:64:01:41:
c7:9f:6d:88:c7:23:8d:85:85:e9:28:85:b3:09:c8:
7d:56:2d:0c:49:7c:b0:94:9d:e6:7e:fe:2e:5c:a6:
f1:d1:b6:e8:32:2a:26:da:0e:5b:5d:f6:2b:2c:d0:
e4:1f:86:d4:de:f6:5d:5b:88:82:bf:d5:5d:7a:7b:
a9:18:2f:a7:c7:a2:c9:e0:56:20:e7:09:36:40:5f:
a2:45:56:34:98:3c:1c:18:db:a9:85:51:36:86:46:
55:ec:1e:0f:b0:87:20:3a:be:56:52:58:68:23:ed:
3e:32:1f:96:b3:8d:3c:f0:6f:84:5f:8b:90:12:4d:
47:1e:f3:b3:0b:b8:58:8d:98:81:48:e8:cd:54:88:
f0:89:cf:44:bd:12:55:6d:2e:91:6e:3a:7f:bd:84:
28:13:df:52:60:fb:0a:66:91:cf:e4:19:26:4d:8f:
d5:14:52:bd:77:46:77:37:5b:d8:64:84:ce:e8:e1:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:D6:55:86:B8:5C:B0:92:DB:40:A1:27:7B:35:C1:AA:03:BF:55
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0a:57:47:95:64:70:0e:14:ac:d4:74:05:55:b8:e0:d3:7c:
d4:d0:0a:fd:f8:17:ba:0d:05:6b:64:74:48:f1:24:ba:f4:2a:
0f:58:14:97:63:cd:b9:95:09:67:ea:c0:09:83:8a:4c:5c:6e:
6f:72:21:c6:55:97:b0:5e:70:de:18:cc:63:3c:64:65:f0:7f:
e0:3e:df:48:8c:d2:d4:a2:7a:90:2c:11:84:18:ff:4b:70:02:
04:97:8e:2e:ca:44:9c:13:bb:ec:a6:17:5c:d5:b7:01:b2:14:
59:02:18:85:3c:3b:38:f3:79:29:71:04:81:85:b9:ea:68:7a:
db:f4:46:6b:d0:3f:d7:b3:8e:ed:ae:94:14:65:fd:39:bc:46:
67:ed:fa:ab:34:75:c1:9d:35:03:1b:f5:b5:81:28:5e:61:22:
92:fe:a8:1c:76:b7:9d:10:c3:cc:74:bd:fc:44:ca:55:9a:6a:
f7:29:fb:c4:17:2d:82:51:bb:4f:64:1b:42:e0:94:1f:4b:18:
36:12:85:83:7c:79:51:8d:0a:bd:3e:5f:f6:fa:e6:17:95:d1:
15:e2:f1:40:08:73:19:6a:cf:65:7b:9a:42:e4:3c:5f:1b:10:
5d:c1:64:75:74:49:9e:82:f4:82:10:f5:fb:ea:97:0c:8e:e2:
a0:58:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:50 2026 by rpki-client