Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: HJrZn5ccNvA+cEsLYQSwwmrxWd9QGi0cd4V3LoQ0ing=
Subject key identifier: 4A:28:46:3D:E4:4B:9B:72:93:71:2F:E8:FF:8B:14:F1:E8:37:EF:18
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 019F1A1F987FC8BCBB84B0D48AC8CCA2D180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0C17
Signing time: Tue 30 Jun 2026 20:01:45 +0000
Manifest this update: Tue 30 Jun 2026 20:01:45 +0000
Manifest next update: Wed 01 Jul 2026 20:01:45 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: m3byWiv4jY8FbMjKys6mhOXX/C2aWOgwGkf169n1fUM=)
3: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (hash: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:98:7f:c8:bc:bb:84:b0:d4:8a:c8:cc:a2:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jun 30 20:01:45 2026 GMT
Not After : Jul 1 20:01:45 2026 GMT
Subject: CN=4a28463de44b9b7293712fe8ff8b14f1e837ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:63:58:d4:9f:8d:e7:ef:2c:14:90:19:d8:
d6:8e:16:e2:c8:f4:fb:da:d7:c2:70:e3:44:62:1e:
31:b2:08:2a:b3:15:29:88:a1:73:ba:d8:d5:5e:6b:
df:9f:76:b9:9f:0c:10:c7:92:10:de:67:90:37:d1:
f0:6d:6d:f4:2f:ae:11:75:e2:fc:4a:f9:17:b2:be:
92:37:3c:c0:d3:90:11:29:c1:ac:50:23:b1:10:06:
3a:6a:1b:5c:f7:a8:b3:67:1a:c7:46:2d:d3:c6:c3:
dd:b3:3c:e2:47:47:60:32:c1:46:86:6f:0a:3d:1c:
a5:8b:3c:e3:93:1a:a9:99:12:36:7b:73:9e:a8:b6:
8c:59:42:3d:8c:9e:3f:f4:e0:62:03:5e:12:3e:1f:
2a:27:c6:3d:cc:3d:56:aa:32:70:5e:dc:c9:41:98:
b2:d9:1a:c5:cb:f2:6a:df:83:e9:1c:88:89:5c:97:
95:29:cf:87:ae:47:27:0b:f4:66:ba:e1:c1:03:4f:
24:90:fd:ef:04:6d:97:08:64:79:62:bb:3c:41:69:
c7:41:09:41:6b:7a:18:12:b5:38:81:59:ac:27:79:
f0:fc:36:dd:17:cb:bb:c4:29:be:cf:3f:eb:b3:2a:
64:2f:9f:5c:4d:30:60:9e:ef:57:c0:c8:0f:b8:31:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:28:46:3D:E4:4B:9B:72:93:71:2F:E8:FF:8B:14:F1:E8:37:EF:18
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:34:4b:71:5a:b4:0a:e0:e5:70:7f:c6:1b:46:bc:2b:3d:
80:0f:e1:18:fb:8e:ba:e3:b9:ad:1b:81:51:7c:ac:83:40:0c:
9d:bf:ca:ca:c8:20:23:7c:6c:06:e4:f6:94:d7:c3:01:a6:eb:
0f:3d:f7:31:88:45:0a:73:ca:43:ea:0e:b7:cc:57:97:1d:db:
b3:23:08:ba:19:5d:db:8c:20:f3:4f:57:c0:a2:dc:f0:bf:55:
a4:57:c9:ed:10:d1:f7:2c:2b:a7:67:58:38:73:cd:0f:3c:c6:
d0:27:48:82:d3:14:39:5e:35:aa:51:55:22:16:a2:8d:c5:43:
bf:78:84:04:8b:97:8a:09:bd:76:a7:1a:aa:62:f2:f2:bb:00:
75:6d:fc:48:47:51:36:ae:2a:8f:9e:7d:a3:9d:58:4e:ce:26:
99:95:6a:66:90:d7:32:f8:f9:2a:bd:e9:f9:61:ca:fa:6b:cb:
ea:25:5c:3f:b2:8e:3a:4f:ec:ff:52:96:e3:fb:b3:86:74:52:
d0:e6:f0:56:2f:a8:0b:3e:51:53:fd:9c:e1:c6:ab:a0:70:87:
72:d9:1c:84:97:88:3a:9d:73:a5:8e:3c:77:b0:a4:7d:a7:e7:
ce:32:2d:ef:54:25:57:e0:d6:00:5e:ce:c2:57:46:f7:2d:5e:
61:fc:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:21 2026 by rpki-client