Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: 3teRHdPFTHZaedskq8p9tvu1weLKgMebMiHl/i5+BPM=
Subject key identifier: F3:D8:0D:EA:CD:91:B5:7E:0B:60:1F:B7:37:13:4D:4A:1E:FA:8C:38
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 019D3909A45E2120FA5396B1E35A26E7C707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: E3Rl+WcCRNGczXIJagNNzdQcig8jMygPM3Wu76FUzAE=)
2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a4:5e:21:20:fa:53:96:b1:e3:5a:26:e7:c7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=f3d80deacd91b57e0b601fb737134d4a1efa8c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:76:04:21:77:73:04:45:e6:ed:78:6c:96:
5e:b9:fb:be:f9:74:a5:5f:55:c6:34:72:e0:ef:35:
4a:df:33:6d:36:10:0e:a2:55:be:a1:95:7c:a6:15:
5e:22:b5:5d:97:61:55:ff:25:17:8b:53:c6:67:e6:
d1:3f:b9:f7:15:4b:43:53:64:60:c9:c0:fe:7a:8a:
87:71:ad:6d:bf:77:a7:a7:43:e0:f8:6b:68:d9:b0:
b6:19:6f:d7:4c:af:35:86:bd:d4:a1:ef:83:ba:a4:
1e:b0:2d:72:ea:bb:ae:9c:fb:b4:6e:26:1a:ef:a7:
c7:d1:28:5b:34:41:5d:dd:f6:5e:49:e4:0b:9c:5c:
1e:fa:81:4f:86:c4:c5:9f:a3:69:e8:42:e9:2b:e4:
14:e8:42:87:ea:dc:22:36:5a:6c:ad:8d:da:9c:19:
e3:9c:ba:58:c2:cf:62:19:9e:73:da:21:9b:c4:18:
2c:cf:4e:fa:24:95:f2:e4:92:2e:ea:39:7f:3d:8f:
b6:4e:e3:65:7d:72:a9:30:9e:d9:f5:29:f4:bb:86:
5f:9a:f5:77:07:7d:c2:8a:a8:1d:00:0c:25:6e:d7:
0a:ee:60:c2:eb:56:33:03:67:6f:9d:3c:cc:c8:88:
01:bb:0a:76:95:dc:64:7a:ae:93:0a:68:6c:de:47:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:0D:EA:CD:91:B5:7E:0B:60:1F:B7:37:13:4D:4A:1E:FA:8C:38
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:12:92:7a:be:96:de:54:6b:36:e8:6b:a1:7b:46:a0:f6:
cd:75:0a:ed:50:16:6b:c6:f0:de:34:21:a3:02:a3:43:66:1c:
6b:0d:b9:d8:fb:86:39:d7:88:56:05:0b:ee:33:0c:46:0b:07:
d5:e4:1e:f3:37:e0:c3:98:6e:62:52:6f:af:23:aa:8d:50:40:
54:55:7a:55:6f:94:e3:69:c4:fd:2a:36:49:08:0c:95:b1:18:
f7:18:51:de:21:aa:8a:85:4d:cf:b9:8a:39:bb:a3:f7:f2:d6:
75:5a:8a:2a:48:db:3b:91:f9:cc:b5:c6:20:ae:2d:36:38:34:
6b:40:f0:29:ae:15:af:16:aa:fb:67:78:02:1a:a9:b0:6e:57:
7b:4e:a0:2d:97:ac:ec:b5:e3:89:f6:2c:bf:3f:f0:56:c0:6f:
c8:39:58:18:00:c1:3f:7b:16:1f:64:a4:c9:c6:cd:03:4d:8b:
2b:dd:66:58:38:5b:cf:50:55:a7:fe:6e:aa:22:ba:96:83:b0:
d4:1e:ff:30:3e:12:ec:db:8a:24:c2:6c:71:38:40:8f:35:a4:
22:90:50:3f:72:c4:48:e7:1c:a6:8a:fd:2e:af:05:3a:ed:f2:
4e:ab:d8:a9:e7:72:e5:a7:53:60:82:52:71:82:80:c5:7a:94:
3c:c1:f2:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CaReISD6U5ax41om58cHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy
NWQ5MWEwHhcNMjYwMzI5MTAwMDI2WhcNMjYwMzMwMTAwMDI2WjAzMTEwLwYDVQQD
EyhmM2Q4MGRlYWNkOTFiNTdlMGI2MDFmYjczNzEzNGQ0YTFlZmE4YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Rx2BCF3cwRF5u14bJZeufu++XSl
X1XGNHLg7zVK3zNtNhAOolW+oZV8phVeIrVdl2FV/yUXi1PGZ+bRP7n3FUtDU2Rg
ycD+eoqHca1tv3enp0Pg+Gto2bC2GW/XTK81hr3Uoe+DuqQesC1y6ruunPu0biYa
76fH0ShbNEFd3fZeSeQLnFwe+oFPhsTFn6Np6ELpK+QU6EKH6twiNlpsrY3anBnj
nLpYws9iGZ5z2iGbxBgsz076JJXy5JIu6jl/PY+2TuNlfXKpMJ7Z9Sn0u4ZfmvV3
B33CiqgdAAwlbtcK7mDC61YzA2dvnTzMyIgBuwp2ldxkeq6TCmhs3kdXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPYDerNkbV+C2AftzcTTUoe+ow4MB8GA1UdIwQY
MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt
ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4
LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSgSknq+
lt5Uazboa6F7RqD2zXUK7VAWa8bw3jQhowKjQ2Ycaw252PuGOdeIVgUL7jMMRgsH
1eQe8zfgw5huYlJvryOqjVBAVFV6VW+U42nE/So2SQgMlbEY9xhR3iGqioVNz7mK
Obuj9/LWdVqKKkjbO5H5zLXGIK4tNjg0a0DwKa4Vrxaq+2d4AhqpsG5Xe06gLZes
7LXjifYsvz/wVsBvyDlYGADBP3sWH2SkycbNA02LK91mWDhbz1BVp/5uqiK6loOw
1B7/MD4S7NuKJMJscThAjzWkIpBQP3LESOccpor9Lq8FOu3yTqvYqedy5adTYIJS
cYKAxXqUPMHywg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:13 2026 by rpki-client