Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: KMwJtJ3sRvScdYRFuavGr/HtOpJ7D/D8oiBo6/4j2YU=
Subject key identifier: B9:88:B4:13:A6:B3:CF:D0:0F:C1:5C:6E:1D:81:80:C1:6E:A6:E1:C9
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 019D0477B677C3F6C89F73B9988AC6B61A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0AEC
Signing time: Thu 19 Mar 2026 05:00:47 +0000
Manifest this update: Thu 19 Mar 2026 05:00:47 +0000
Manifest next update: Fri 20 Mar 2026 05:00:47 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: aAiPeKDZ0yV19MthbETqvyn8Is4e7WKcCqh/8XV7paQ=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:77:b6:77:c3:f6:c8:9f:73:b9:98:8a:c6:b6:1a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Mar 19 05:00:47 2026 GMT
Not After : Mar 20 05:00:47 2026 GMT
Subject: CN=b988b413a6b3cfd00fc15c6e1d8180c16ea6e1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:61:76:3b:f0:2f:58:17:ac:de:3b:2e:e7:
28:68:e4:89:b4:1e:04:c2:94:bc:68:ad:96:10:22:
ed:46:40:a7:38:14:60:bc:41:41:5d:a6:c3:e2:ce:
5e:a2:08:28:59:82:5d:eb:05:bf:21:cf:07:09:ed:
ee:12:53:c9:36:83:2b:74:c7:de:34:8e:6e:fb:c6:
af:f6:4c:1c:38:a4:d3:64:62:03:1a:0c:3b:b9:cc:
cc:3b:e6:f0:1d:13:ba:bd:50:e4:72:3d:f2:19:ca:
29:74:75:b4:e0:9d:a6:01:ef:da:56:a6:5a:43:7b:
57:21:d7:0d:7a:68:18:fa:36:aa:a9:e9:04:e3:a4:
13:e1:58:7f:23:71:b1:9d:45:73:5a:da:29:4c:5c:
c2:18:ec:ac:82:41:90:d9:36:cf:68:d1:8c:82:48:
7f:60:d9:b8:3e:95:ab:62:32:f1:c2:3f:d1:f2:14:
97:cd:b4:d7:60:a0:f9:6a:6d:b7:9b:1d:cf:1f:74:
df:54:9e:21:4b:93:9e:c0:15:48:a9:0f:60:07:69:
2f:39:2a:c2:d4:62:20:df:45:8a:d3:5a:33:59:e3:
fc:45:44:b7:52:23:b3:e3:e2:4c:86:2b:af:5c:7c:
5a:0c:b7:97:d0:dc:23:18:91:4a:3e:19:07:7c:43:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:B4:13:A6:B3:CF:D0:0F:C1:5C:6E:1D:81:80:C1:6E:A6:E1:C9
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:05:aa:fc:d9:1e:62:e7:92:dd:03:5d:f8:d0:3e:7f:1e:1f:
71:8a:cc:ce:53:31:e8:e9:48:97:2a:15:c1:c4:2f:41:bd:c6:
78:7f:fc:10:44:6f:72:3c:77:f5:38:21:26:bf:84:bc:ef:e9:
bc:3b:5d:c5:61:75:01:13:de:5b:e9:9c:6d:92:7d:7d:03:c8:
3e:c6:40:95:e5:3a:2e:a4:8a:2a:d8:86:21:66:ff:fc:57:a3:
bf:71:bf:6d:3d:09:bd:33:80:aa:96:8b:31:ec:ec:9a:55:e6:
f5:78:a3:39:4e:d2:77:06:74:69:6d:fc:f0:dd:2d:3b:c2:3d:
20:3a:4d:2e:e5:59:79:9d:70:a4:e2:38:9f:e7:ff:d7:8e:c7:
75:6b:24:3a:fc:5f:8f:bd:27:87:3a:d5:69:8c:03:89:a4:e3:
dc:db:27:f2:e2:c9:0b:21:88:28:e3:2f:fd:a1:a1:3f:99:02:
ab:90:8a:20:2f:e5:77:b5:e5:a3:48:fe:3f:5d:dc:1c:4a:e8:
84:4c:ac:fc:3a:7f:0c:bc:69:21:40:1e:5d:bd:e7:e4:a6:09:
2f:c2:b7:87:3e:55:1d:7d:8b:c3:e4:b3:76:f3:9b:68:00:c8:
61:ae:33:7c:c4:4f:33:e7:1f:a3:94:26:e6:7c:91:22:93:f3:
5d:47:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:49:17 2026 by rpki-client