Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: cSjSYWl2YOeSg7j3N6C94FM+2z99mq9LxmH2MAhevSg=
Subject key identifier: 23:D0:6F:75:7E:A2:D8:98:A5:EB:36:A1:65:8E:50:38:1E:D9:A0:C2
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019DEC368E944F25A4174E6BF57C18CF49D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0B64
Signing time: Sun 03 May 2026 05:01:31 +0000
Manifest this update: Sun 03 May 2026 05:01:31 +0000
Manifest next update: Mon 04 May 2026 05:01:31 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: ibluAg6orR0nMipsDdqPewpbgYLoA0zXUYDrNyQYJWA=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:36:8e:94:4f:25:a4:17:4e:6b:f5:7c:18:cf:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: May 3 05:01:31 2026 GMT
Not After : May 4 05:01:31 2026 GMT
Subject: CN=23d06f757ea2d898a5eb36a1658e50381ed9a0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:4c:ae:cc:65:10:55:f0:a1:b6:39:de:79:
da:a9:e1:75:0b:ac:0b:26:4d:b9:5d:10:15:80:b4:
e7:13:e8:0f:ad:2a:d3:7e:15:44:97:4b:84:3c:b2:
44:08:bc:c0:36:b6:42:4a:c6:94:ed:f2:40:d5:7a:
ff:7a:ad:49:5d:dc:79:69:a1:b8:af:83:00:ac:48:
60:1d:0b:c7:51:cd:fb:ac:06:4e:c5:fb:e0:0f:f1:
27:d1:18:53:b1:82:8d:29:56:01:42:46:dc:ed:93:
9a:5d:50:4e:97:ce:f5:d3:f0:ab:cd:0c:f6:e7:d8:
67:e2:e6:3d:15:49:c7:f7:57:c0:a7:ba:7b:f9:2c:
bf:4d:44:30:de:c7:e8:6d:c4:e6:be:3e:c7:3e:0a:
7c:58:98:d6:9a:96:ea:df:42:5a:e9:e7:24:ec:af:
07:76:3a:07:49:64:b8:c3:cd:49:76:00:d9:ad:b0:
e0:5b:f5:36:9a:c8:ef:50:26:e0:8b:ca:13:01:ef:
17:36:d6:70:97:d2:78:1a:30:b7:ea:33:09:9e:43:
33:ed:34:2a:ca:2b:3a:4d:80:9f:96:f9:9c:ad:a1:
dd:17:54:ca:4e:77:63:fc:4c:92:23:ff:79:c0:31:
0a:78:a5:fa:24:2f:30:87:f6:3f:3d:8c:63:49:4b:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:6F:75:7E:A2:D8:98:A5:EB:36:A1:65:8E:50:38:1E:D9:A0:C2
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a3:fb:eb:73:7b:d6:5e:e4:a4:72:02:6f:45:2b:51:72:aa:
49:6b:f4:3c:be:cf:c0:ef:b9:aa:8f:8a:f0:f3:7e:53:7d:2b:
30:94:97:d0:ef:d0:f9:33:74:47:d6:e1:5e:66:ff:56:ef:06:
40:3f:5b:51:0b:09:d3:42:ea:54:2f:14:9f:aa:81:81:ea:4e:
46:ec:53:1d:3f:46:36:a9:c5:d3:49:55:81:f0:79:18:4e:86:
98:04:11:4f:5f:1c:58:4d:45:50:3c:f0:98:26:ad:26:70:ca:
63:ea:fa:c1:18:93:07:d4:6a:70:cf:2b:68:6e:02:a5:4d:50:
95:b5:43:3f:b0:80:6d:e8:b4:15:83:00:2b:9c:15:01:1c:5d:
78:ef:e8:fc:cb:ff:21:15:44:6f:59:7c:cb:4d:26:e5:c4:ee:
64:83:35:9a:4e:58:f3:89:e3:94:c8:5b:4a:96:61:12:34:9d:
9c:c6:b2:d0:1f:6a:70:1a:16:b7:4d:86:c8:d5:57:46:4f:40:
47:0a:3d:f6:b9:d7:c7:74:68:1f:8f:41:24:ce:b4:22:67:8d:
f9:e3:69:9a:aa:78:ab:0b:7f:53:7e:8a:55:2f:55:78:f6:e6:
86:cd:39:0e:04:9c:4a:f1:fb:7e:54:ac:1a:c0:4d:f2:3b:2e:
c1:2b:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:15:27 2026 by rpki-client