Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: k9r6HI0raZnmfwiWdW5ykz8pksG3/r2d721jrVTIIU8=
Subject key identifier: 14:C6:0E:2B:47:72:49:25:01:1C:BE:DD:E6:F6:3C:80:CA:94:AD:12
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 01A0201DF525951221F8D9733594FB3EAE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0C88
Signing time: Thu 20 Aug 2026 17:00:29 +0000
Manifest this update: Thu 20 Aug 2026 17:00:29 +0000
Manifest next update: Fri 21 Aug 2026 17:00:29 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: 3AOtykrJu+bN0JJWqB2kV4rZI/v4LwAxh6AFfRYz3pM=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1d:f5:25:95:12:21:f8:d9:73:35:94:fb:3e:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Aug 20 17:00:29 2026 GMT
Not After : Aug 21 17:00:29 2026 GMT
Subject: CN=14c60e2b47724925011cbedde6f63c80ca94ad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:21:18:dc:8c:a0:00:bf:98:8c:45:9e:5b:
2b:cf:cf:0a:a7:83:b7:d4:8c:0e:23:7a:cd:f5:c7:
fa:f9:69:94:1b:a0:1e:31:9d:e2:2b:01:b7:42:1f:
f3:75:aa:20:4e:a8:8c:57:39:40:2c:08:93:e5:e3:
56:a5:ac:99:9a:d5:27:0e:a6:0c:54:49:34:50:78:
bb:8c:89:46:8c:9a:e7:b7:b3:e6:1a:65:fd:29:8a:
4d:9c:4f:f3:ad:82:5b:4f:00:d9:dd:cf:b2:af:aa:
af:d6:ad:39:94:90:af:58:6d:83:79:aa:00:41:2b:
80:9f:f8:7b:81:2e:85:b2:2f:e5:49:9b:41:1d:cd:
2d:47:43:92:b0:83:82:f2:d3:45:37:b6:ff:6e:57:
8b:2a:90:5a:5d:73:fe:3d:4e:ca:40:29:d9:ce:20:
70:7d:19:71:ed:fd:a1:51:57:42:00:79:68:ce:ac:
04:de:a7:06:9f:a3:0b:bb:d1:33:fc:6b:df:5b:c6:
3e:21:f3:3a:a5:b4:ef:ba:58:c7:f8:e5:0a:67:62:
82:89:0e:f0:6b:ce:46:7f:6a:b8:83:28:30:b4:75:
9b:72:72:33:ba:b8:79:91:a1:7c:ca:f9:2a:51:32:
81:2c:06:18:97:f1:fb:e2:b9:44:bc:a7:7f:c1:e4:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C6:0E:2B:47:72:49:25:01:1C:BE:DD:E6:F6:3C:80:CA:94:AD:12
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:20:8b:c3:bc:33:b3:8f:96:69:94:54:af:90:7e:f4:23:41:
18:2b:b2:4a:25:12:c2:2a:cf:66:fe:32:85:27:be:81:d5:cd:
16:b6:42:9f:3e:7f:bc:6a:7b:b6:8b:b7:19:ea:03:ba:0c:23:
02:dd:bf:bd:85:9b:56:b1:86:db:07:29:6a:d4:39:1e:4c:e2:
d6:5d:10:fb:f5:b7:0f:51:3f:4f:10:c3:46:d0:61:f4:40:2c:
ea:a1:4f:b5:cb:ce:bc:e8:c4:0c:8f:6e:0b:a0:70:ac:2f:ef:
1e:5b:2e:2c:87:b5:af:35:5c:c4:d8:b3:93:2d:c5:70:1f:5e:
b9:41:b9:0e:74:4f:18:2b:1d:39:ee:a8:4a:6e:de:fe:e4:dc:
94:3e:67:5e:2b:fc:11:b5:ab:59:bf:d5:01:dd:56:3a:d7:cb:
79:32:2f:06:ef:52:21:2c:dd:7b:d4:37:25:f8:bc:7c:5e:9d:
2a:40:ba:62:85:42:c2:87:1c:09:41:bf:a2:3a:83:e3:c2:5b:
19:6e:63:4d:77:a8:5c:56:31:78:44:ab:d4:c7:7d:5f:ab:fd:
21:35:9a:1b:ef:a9:d1:88:74:1a:bd:37:59:d4:5e:e1:ea:85:
13:e0:cb:6b:e3:14:0a:e0:f6:a5:ad:4e:7e:65:27:3d:50:a4:
83:e9:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:11:20 2026 by rpki-client