
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: whjSJ3DKk+U+NOZ9LOk9oLCNqEc29anAq7cr4F3MAd8=
Subject key identifier: 34:72:F2:13:4F:3F:10:48:02:E9:F0:23:A0:BE:94:F2:42:7E:E2:19
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 01A13258CDE65F102B94D03C63C831DB9408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0D16
Signing time: Mon 12 Oct 2026 23:00:42 +0000
Manifest this update: Mon 12 Oct 2026 23:00:42 +0000
Manifest next update: Tue 13 Oct 2026 23:00:42 +0000
Files and hashes: 1: c2vQVEHN6TNSHCrc8XakavTk5Vg.roa (hash: WCQYYJ/ZTp+voFTp9GkfFbnbhfArhwsuEiArrWfeZko=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: YeZMTH0g6yA3Q3iWVN5hh1doqL79jciIu9dsMqG2kFI=)
3: xKm57GReunR2ffbJxKuGcJAeOYk.roa (hash: cGbG594c8tC4/cj9e3kZQ+QWuZmMda7G3mnGYENWjyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:58:cd:e6:5f:10:2b:94:d0:3c:63:c8:31:db:94:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Oct 12 23:00:42 2026 GMT
Not After : Oct 13 23:00:42 2026 GMT
Subject: CN=3472f2134f3f104802e9f023a0be94f2427ee219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:82:df:95:53:a1:d2:e8:f5:17:35:d1:84:
4b:e9:36:b4:2b:08:49:b1:96:67:b8:29:aa:59:6c:
3e:d2:b6:51:ec:78:d0:f1:64:14:0c:36:59:6e:a7:
c0:6c:0f:34:ec:22:45:af:49:26:a3:f0:02:36:40:
59:ee:b8:5d:b0:33:3e:29:3a:aa:d0:cc:61:88:90:
f6:a7:b9:c5:03:dc:8e:36:81:18:01:3e:6c:31:21:
54:4f:f3:a5:a3:9e:01:86:38:82:4b:66:cc:78:86:
2d:eb:9f:54:3b:21:58:98:f3:e6:b6:00:b0:fd:79:
0f:5f:e6:9c:f3:e6:20:5e:a1:7c:3e:c2:08:1e:57:
90:4a:1e:f5:5e:02:59:3b:73:7c:62:04:c1:e8:bb:
c4:fc:00:b3:0b:f2:aa:f6:eb:79:98:d4:56:e2:2d:
49:da:d6:b2:41:76:6d:0c:14:68:e7:2c:a3:a5:ac:
30:35:0b:19:44:96:4a:ca:44:8d:fd:ed:a3:b1:cb:
30:94:ef:74:f9:a3:18:c1:52:c5:b3:c3:2b:c8:91:
f1:c3:5b:a0:91:d7:56:92:f9:d4:a8:4f:eb:49:32:
9d:a5:94:98:b8:e2:0a:a2:e2:31:f5:ca:8c:20:93:
d4:30:b6:ba:f9:bc:05:34:ba:07:18:17:dc:7c:f5:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:F2:13:4F:3F:10:48:02:E9:F0:23:A0:BE:94:F2:42:7E:E2:19
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6e:64:78:96:4e:86:3c:a9:e5:4e:a5:11:a0:e2:bb:91:e0:
99:55:6f:c0:39:af:be:19:58:27:af:ec:d3:d2:41:57:63:eb:
bd:06:e8:40:b5:43:a6:3a:2e:18:f4:58:2e:a0:44:f4:62:f7:
3a:04:12:53:12:63:c5:cd:4f:68:59:b3:64:17:fd:c7:0f:db:
3f:24:ae:64:7f:2c:ef:93:6f:00:62:56:00:57:71:a2:9f:b8:
dc:f8:cf:8c:5e:cc:93:12:36:6d:29:8f:14:b9:84:80:9f:cb:
fe:80:36:ac:92:1c:e1:93:89:c9:88:88:41:fb:18:22:5c:2b:
f4:a0:99:cb:a0:ca:b8:7d:ac:1c:a6:35:d4:fe:ba:74:f1:96:
c4:77:f0:25:81:a6:98:99:e5:28:e6:4e:b9:43:a0:af:6e:0c:
ae:cc:08:7a:2a:53:fd:65:6d:c5:80:f8:c0:91:df:db:d5:1b:
7c:a6:33:c7:fe:71:bf:70:76:82:c2:b7:10:5b:bb:de:cb:15:
12:81:e4:c3:7e:0e:5c:57:97:e6:81:ff:e6:4f:fa:3f:f7:5e:
f0:26:a1:ac:d1:dd:68:52:56:64:6c:9f:07:ee:e4:93:e7:0f:
4f:56:4b:70:54:fc:7f:7f:b2:52:a1:22:05:de:67:dd:f1:58:
4a:bb:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:29:21 2026 by rpki-client