Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
File: pJR6ZT3sU9F51XJPJRTHJW22nfg.mft (raw, json)
Hash identifier: 1Ap0jF2ADbtVHzFtbB3deqEBHA4koySKISpUxcLWNj8=
Subject key identifier: 3E:4E:82:6C:3A:2D:50:1D:F7:E6:80:AE:49:5E:FC:82:5D:D1:FC:07
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: 019D3789490EA0279849D37FD87F6CCA19EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
Manifest number: 11BD
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: RMWRbbD_BdAd9CzTxDVfQGAvCWk.roa (hash: pFbz45/dgrlTncXp4cZG//XsRZw9h90zOSy0E/AZEIY=)
2: pJR6ZT3sU9F51XJPJRTHJW22nfg.crl (hash: O+on76jNjxcHKE95G8Yid9Kap/K1rFqsOgioMCldBJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:49:0e:a0:27:98:49:d3:7f:d8:7f:6c:ca:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=3e4e826c3a2d501df7e680ae495efc825dd1fc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:4d:08:ba:7d:57:57:11:b9:90:b1:60:29:
89:92:69:5a:20:14:ad:49:0e:8f:46:34:a5:0d:7d:
8a:25:3d:09:f0:0a:94:64:64:f0:b7:82:c8:d9:13:
e3:37:41:ce:7c:ed:42:1c:2b:77:85:92:28:9f:2c:
45:f6:04:03:55:16:d6:52:99:4e:a0:3e:28:b6:ba:
a4:87:16:14:16:21:62:96:3e:09:60:d0:79:03:26:
eb:67:7a:ac:0b:36:0e:d3:ca:7b:48:ba:74:2a:64:
f2:43:34:07:c5:19:85:96:aa:a7:08:f7:a9:b0:c2:
f0:d3:f8:b8:61:e6:77:08:53:fe:c9:ee:ad:57:8c:
31:9c:31:fb:df:1f:66:3f:c4:56:ab:93:5e:93:4b:
b9:48:c0:93:79:90:4e:73:9f:1e:fe:ad:68:e3:70:
b7:a3:d4:d3:93:df:68:a2:09:50:fc:3c:05:70:26:
ce:93:f6:1c:35:02:f1:e0:4e:90:9e:b3:d0:86:46:
f1:31:b2:4e:83:dc:8a:65:b7:3b:52:4a:98:54:bf:
d8:be:35:0c:48:f6:34:63:45:8e:49:bb:36:03:37:
cf:81:e4:8a:43:22:07:cf:78:e2:b0:9f:47:30:92:
e0:2c:13:30:9f:0d:08:ca:87:34:b3:c0:ea:4e:38:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:82:6C:3A:2D:50:1D:F7:E6:80:AE:49:5E:FC:82:5D:D1:FC:07
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:99:db:85:7c:b9:3d:33:50:0d:74:4a:0f:25:48:6d:d6:45:
74:0a:06:1f:f2:68:ab:18:90:4d:b7:f7:a4:92:26:a0:4c:ed:
d0:24:d5:95:a6:0c:18:f2:7f:2d:37:06:28:a8:63:1f:ca:14:
41:17:38:44:9d:3c:3c:7d:59:45:b0:c6:ce:d0:f5:24:d5:ab:
a1:cc:01:15:8b:a3:5a:04:ad:5a:da:c0:3e:9b:84:e4:5c:c8:
d9:d8:d3:c7:e0:d9:38:30:25:ce:a8:14:15:a8:03:3e:3c:d4:
8e:cd:36:9d:a7:22:69:c7:03:51:85:2c:c2:32:60:65:33:39:
6a:74:d4:db:64:d0:fc:79:18:be:21:87:39:fb:da:66:c2:c6:
ef:b2:f9:08:63:38:a7:37:1b:25:2b:6a:e3:16:48:0e:c3:38:
a6:02:93:33:a2:85:1c:3a:ce:cf:4e:a4:61:58:16:e3:c8:e6:
f8:8d:d7:b8:40:bd:44:ef:44:8f:97:01:fd:61:92:10:53:ab:
16:e8:09:c2:31:5c:b3:bb:f7:09:c6:15:02:d6:88:b9:fd:54:
44:48:14:d4:78:f6:e7:81:d3:cd:9c:25:6f:c0:ca:c8:44:d3:
ff:51:6a:0a:e4:b8:28:a6:01:21:23:88:71:e8:6a:26:18:14:
53:ad:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:04 2026 by rpki-client