Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: lHymwOjq+2c6BdeCZdt8dnPgnwKNhxRWikZPcThg748=
Subject key identifier: AC:D3:13:9E:7B:9C:AE:C2:52:F4:46:0E:81:16:F8:10:75:5C:0B:C9
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 019D386660EE04695A99C811E8E048CB4937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 093C
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: A47ejH-QND_4p5ZynnjdFhGZbf4.roa (hash: +HcmD5EzZ2PGTv159HFtwSPGyMK2+fjDllHmAYnxw3I=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: Wsk8Ji6fJKjFp651J09OhA2Qw6NVeYGNK7fjlr9QjUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:60:ee:04:69:5a:99:c8:11:e8:e0:48:cb:49:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=acd3139e7b9caec252f4460e8116f810755c0bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:bc:96:13:b9:03:56:e8:02:2d:81:97:41:
18:41:1f:4a:b8:2f:2f:cb:35:cf:76:f1:2f:e4:b2:
98:be:7e:76:81:17:c0:6f:03:a4:bf:5c:e1:9a:00:
2b:d0:f5:4d:f1:9a:98:d6:3b:20:e6:a1:0a:5d:48:
cf:dd:cf:75:e8:7e:8d:ac:bb:bc:0c:bb:d3:a5:aa:
e2:34:a8:f2:c3:0d:26:2a:7c:d5:aa:a4:34:ed:f8:
a0:ec:05:de:9b:b4:e8:02:07:d7:7a:83:19:57:2d:
c2:56:4e:9e:ba:ec:07:9a:ee:0c:be:57:d2:23:82:
02:6a:9a:30:f0:ee:db:5b:95:b3:9d:b1:39:a5:a3:
30:2a:ab:ea:7d:10:06:f9:b0:26:8e:d2:ee:f6:3d:
ae:6f:af:23:35:78:f3:f5:8f:62:2e:63:8d:65:14:
64:73:1f:81:2d:92:b8:c4:31:05:ac:59:dd:a5:52:
58:12:0c:a5:4c:35:11:d3:b3:6b:e9:f0:92:91:61:
e2:fc:66:a8:ba:44:ce:49:fc:24:26:03:08:3a:99:
25:45:8c:6d:ae:71:3b:0f:78:51:4e:a1:dc:27:96:
e1:9b:aa:44:e1:86:c1:e6:b4:a5:ab:92:14:a4:78:
97:79:fd:29:9a:8d:1e:65:b9:0d:4e:84:3d:26:dc:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:13:9E:7B:9C:AE:C2:52:F4:46:0E:81:16:F8:10:75:5C:0B:C9
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cb:14:a2:41:cd:ca:ad:b5:ad:7f:1d:5c:2d:7d:cf:fa:02:
69:2d:2e:88:41:d6:be:1a:9b:f9:21:74:69:68:f8:f2:00:73:
5e:29:cf:e8:31:a2:d6:33:cb:65:e8:ba:10:f0:b1:51:6a:00:
ca:0f:5f:df:cf:e5:63:7c:42:a6:2e:3f:6d:6e:b0:1b:51:38:
e1:76:c4:b7:98:5a:83:2f:1f:c2:29:2b:0a:7e:d7:ab:c0:fb:
49:5b:5e:92:c3:76:a0:5b:d2:3b:80:62:66:56:de:9a:70:3e:
8f:dc:bd:cf:db:e5:eb:d5:66:59:72:c8:61:23:35:26:c8:03:
23:a8:7c:da:cd:fb:d0:2f:9d:97:d0:8b:d1:61:45:bf:e3:9a:
50:1f:db:d9:e9:2e:ea:1c:9c:cf:a4:86:c8:56:14:56:01:ef:
f1:df:6d:7a:64:2b:91:49:e7:a3:83:7f:85:2b:8c:dd:bf:25:
4e:f4:8a:cf:94:8f:1e:bb:40:38:9a:1d:72:05:80:1f:c5:d5:
87:0a:7f:51:36:c3:8d:b0:0c:fb:e6:15:e2:21:51:a9:65:3f:
7f:07:52:26:9b:be:02:93:92:c5:04:cb:9f:41:54:ed:66:8c:
05:f4:c1:24:7f:66:cd:67:af:db:3c:59:16:9a:f6:25:b9:2a:
f3:2e:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:19 2026 by rpki-client