Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: VRtWat71EvgL8PJIemd+2AADAe7pXocJtYVjrtO9AX0=
Subject key identifier: E2:02:25:9A:57:07:2E:AB:A7:66:7B:24:14:5B:ED:58:3C:91:E6:C7
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 019E20921E57EC425A4D2F2EC44E455CD7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 0428
Signing time: Wed 13 May 2026 09:01:47 +0000
Manifest this update: Wed 13 May 2026 09:01:47 +0000
Manifest next update: Thu 14 May 2026 09:01:47 +0000
Files and hashes: 1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: kJbfFMnZfs/A8vAkcoc8YWJEKdURkIF/ypX7K6gnppY=)
2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:1e:57:ec:42:5a:4d:2f:2e:c4:4e:45:5c:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: May 13 09:01:47 2026 GMT
Not After : May 14 09:01:47 2026 GMT
Subject: CN=e202259a57072eaba7667b24145bed583c91e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:cd:16:de:4a:6c:d9:e7:b8:80:6d:47:f1:
66:f1:66:62:2d:b5:ce:1a:02:31:0f:0b:86:e9:18:
c7:0a:c1:c6:b0:bc:41:6d:84:91:ea:64:87:8a:da:
70:d0:dd:b9:61:9d:18:32:a1:0f:ef:06:81:4b:c1:
6f:9a:e4:3d:90:cd:ff:02:9d:52:2b:c7:8b:c0:f8:
bd:3b:61:9c:f5:ba:cc:9d:3b:ea:c2:22:72:17:3d:
e5:3d:db:66:63:d1:58:56:c4:11:7b:d5:14:94:47:
1f:cf:45:9b:e5:98:ae:3d:1f:ff:4b:1c:b6:05:15:
31:2a:4f:42:fd:08:bf:17:be:ca:fc:16:32:30:e5:
ea:a9:b2:a5:ef:d2:e6:4e:c7:ed:2a:d2:17:93:58:
f7:1b:95:89:07:a4:05:f8:cf:59:bd:93:eb:48:35:
e1:5b:3c:bd:b9:11:87:89:03:07:16:e9:04:7d:12:
25:c8:df:9d:9e:3b:b8:74:55:63:d1:2f:61:aa:27:
99:d2:c6:88:dd:ad:54:8b:c4:c2:1c:01:92:e2:1c:
85:80:b3:a6:b5:8b:1d:a7:e5:70:27:ab:c4:cd:8e:
63:18:89:aa:80:09:d6:7b:8d:5d:3e:ef:ea:05:78:
15:80:03:7a:5a:0d:a3:ee:96:29:fe:df:92:43:45:
f7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:25:9A:57:07:2E:AB:A7:66:7B:24:14:5B:ED:58:3C:91:E6:C7
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bb:68:43:c2:32:d6:d5:17:04:c7:4e:e6:31:14:bd:65:97:
8c:f0:27:bf:39:f7:df:bf:9d:0e:b1:71:21:d2:39:d1:17:88:
eb:8b:1c:5c:2d:3e:bb:1f:9b:d2:cd:ca:7a:ab:58:66:ef:17:
83:91:c4:cc:ed:82:27:d2:5d:16:23:aa:c4:61:ce:3a:b3:e4:
f7:a0:5b:04:0a:0e:d4:56:06:6f:9d:41:98:d2:5e:b2:25:f1:
6d:10:af:48:94:ef:0f:f6:85:70:aa:1d:56:54:7f:89:91:b7:
ab:3f:bc:15:4c:c6:b8:f2:19:15:c0:17:00:9b:12:bc:f8:4b:
8a:32:56:5c:ce:32:eb:2f:0f:54:f7:80:21:c4:16:e0:8b:4c:
97:16:fc:00:6a:3c:d8:33:d1:b0:3f:d6:f2:d7:f9:2e:98:81:
07:4c:1c:c2:50:64:68:da:65:34:61:62:06:4a:6f:9e:c4:45:
be:bb:3b:13:ea:32:d4:48:8a:52:6b:9e:1a:89:26:5b:62:07:
bf:29:27:79:8f:20:33:2e:1c:b3:98:81:63:d1:4a:1b:0f:c0:
e7:a8:87:98:b1:ab:4b:2c:fa:49:d8:4c:71:26:d8:ba:1f:b4:
f2:88:61:5c:40:81:05:c4:cc:07:29:f9:0c:b1:cb:70:75:e9:
d3:90:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:57 2026 by rpki-client