Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: 4CtIEKE21lXFm5b6vMcGPUJJUiOy7XfJ2nqgcWu9GLo=
Subject key identifier: 5A:1E:DC:0A:44:2C:D5:20:1B:DC:0A:B5:FF:BF:DA:45:2E:69:D3:50
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 019D2772E0A9BF154F76DD0F8DADC84B4136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 03A7
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: MLsvu5Wygi0cdtSlpoET3Zy4fDg8KOYbuBdeNepvLY4=)
2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e0:a9:bf:15:4f:76:dd:0f:8d:ad:c8:4b:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=5a1edc0a442cd5201bdc0ab5ffbfda452e69d350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:c1:64:40:9e:74:cb:07:65:bc:34:7f:da:
2a:44:dc:59:42:1c:63:ec:6c:37:2f:34:5d:ee:28:
b8:d0:00:bd:35:eb:71:68:db:64:3f:17:f1:f4:f6:
91:14:b4:f4:db:0e:04:5b:9c:58:f6:a9:e8:67:b0:
b8:cb:41:65:08:a2:85:1f:d6:6c:ff:75:70:44:3d:
3c:bb:f1:b2:b4:1c:5f:6a:7a:6c:53:1a:0f:44:48:
ca:31:81:47:88:35:b6:9f:93:04:72:ed:f5:e7:c1:
fa:b8:96:9d:4a:c6:ab:9d:91:2d:f4:e3:74:69:89:
fd:9c:1b:b5:a0:b6:f2:25:fd:5e:3f:a1:6a:06:8d:
1c:00:65:1d:1e:2e:3d:f6:1e:cc:11:e3:2c:be:84:
82:d4:fe:e8:e7:d1:21:70:e8:7a:66:cd:45:d7:66:
4c:59:5d:e5:f2:79:70:a4:d2:35:46:ec:e8:ed:c7:
dd:28:15:88:1c:7d:42:2b:61:e6:1a:9c:59:6a:e7:
9d:15:68:f4:9f:51:5d:80:65:2a:0e:1e:b7:41:cd:
a4:e4:ca:d6:be:94:c3:0e:24:5e:d3:94:cc:af:e7:
ad:d4:ae:6b:10:13:cd:e2:79:64:0a:ee:cd:63:35:
dd:92:01:d4:ec:bb:6a:18:8e:fe:05:8e:ef:e0:4a:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1E:DC:0A:44:2C:D5:20:1B:DC:0A:B5:FF:BF:DA:45:2E:69:D3:50
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:de:32:46:e5:cb:15:1b:6d:9b:be:79:91:01:0b:a1:0d:
9e:3b:bd:ba:60:06:96:7d:9a:ea:a3:7e:86:0a:7a:2a:d1:ea:
dc:01:99:30:1b:20:96:4a:6a:98:bd:72:4e:2b:50:19:d1:a0:
7f:61:66:50:44:21:75:f9:ce:ff:a4:2f:af:0b:ac:bb:7a:08:
c9:bf:09:17:6a:98:29:5d:a9:8d:7c:06:52:c3:f7:23:d5:80:
4d:23:31:08:73:8f:6f:e5:07:a2:5c:e5:b7:db:f2:04:b8:fa:
03:f4:39:b0:b7:94:fe:e3:51:80:7f:32:ef:bd:26:78:0e:c7:
dd:28:1e:86:d7:aa:35:9e:22:d2:12:1c:5e:b9:ae:77:34:6d:
7d:3c:6b:50:99:f2:1c:11:96:74:c9:36:c0:62:94:33:1c:c9:
75:2a:4a:c0:89:8b:ce:b9:19:60:58:09:0d:ba:a6:8e:7b:5e:
e8:44:ab:f8:f7:19:78:d6:ea:77:43:7a:72:84:42:5d:c6:83:
b9:76:8d:83:fb:f5:b2:c7:7e:fd:2f:ee:1e:e9:a8:a7:95:7e:
6f:1e:3b:47:df:13:5b:6e:55:dd:05:78:88:c7:c2:7d:51:85:
5e:ad:72:c8:03:b1:d1:41:2e:f4:8b:2c:22:ed:c7:af:03:d3:
d8:c3:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:16 2026 by rpki-client