Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: JK7xg3IE00N7U4NU6iWqgJIznWi98wxquxtf5IX8Yyg=
Subject key identifier: 35:FB:06:5C:3F:4F:13:05:39:F8:52:F0:32:09:54:46:AE:7C:9E:9F
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 01A003CB09B8D91067D9721307F880E9802D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0C90
Signing time: Sat 15 Aug 2026 05:00:32 +0000
Manifest this update: Sat 15 Aug 2026 05:00:32 +0000
Manifest next update: Sun 16 Aug 2026 05:00:32 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: CmrPI/HkQcQnin/Da2iZTz73hpu6C+pL/mFCOsN80ec=)
3: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (hash: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:09:b8:d9:10:67:d9:72:13:07:f8:80:e9:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Aug 15 05:00:32 2026 GMT
Not After : Aug 16 05:00:32 2026 GMT
Subject: CN=35fb065c3f4f130539f852f032095446ae7c9e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:4b:a1:1e:d9:35:82:75:79:86:43:b7:6d:
16:fa:14:3e:a8:55:80:43:07:7a:ad:5f:aa:b3:40:
92:2f:e4:bb:ca:f0:66:a7:1f:5c:fc:55:bf:43:0a:
b5:9f:2c:dd:8b:3a:7c:83:5f:87:ec:b3:46:9d:53:
c2:8e:f9:4e:06:f8:d6:c0:7c:5c:a3:e6:04:5c:29:
47:f2:67:a6:7a:7b:44:53:8f:03:35:af:d7:38:04:
8b:2a:6a:b8:f3:eb:69:68:05:65:cb:0a:7e:70:2c:
fa:14:53:a8:0f:80:3e:6a:80:1c:23:2f:5b:80:77:
e1:dd:7e:92:b6:a5:80:6b:d9:ff:52:75:41:92:d7:
3b:40:b4:e9:fc:70:36:41:9d:e0:23:e6:b9:c7:d4:
ab:a3:af:bf:05:06:80:2d:3b:43:36:1a:b4:a6:19:
c3:b2:df:99:e7:b9:7a:7c:e0:0a:28:79:61:eb:dd:
8d:16:4e:45:3c:7c:f0:92:b3:9d:d7:24:3d:c0:ed:
96:47:b4:42:07:de:31:07:1a:10:e7:66:be:3b:13:
05:61:f2:b8:39:50:04:31:3a:61:ad:56:c3:6b:22:
e9:a5:b9:20:bb:46:ca:4b:1d:03:93:6e:8d:9d:60:
44:9a:0b:ab:bd:25:46:1c:82:9f:66:05:98:28:6f:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FB:06:5C:3F:4F:13:05:39:F8:52:F0:32:09:54:46:AE:7C:9E:9F
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:02:5a:a5:d2:a5:6c:4d:4d:7c:70:f7:bf:12:8e:7a:6f:0a:
5e:09:9d:35:5c:f6:f1:bf:c9:65:3f:0b:cc:07:62:68:a0:2a:
02:a2:63:80:36:33:54:94:20:d4:ed:a5:5a:d1:b7:2c:c1:de:
5d:a6:6b:ee:a8:7b:a0:eb:f8:2c:48:51:5e:1d:79:df:58:97:
44:e3:20:6f:4c:e6:b5:b7:51:fb:81:9b:95:ad:aa:a9:fd:44:
72:22:f7:1d:8c:56:7e:19:c5:5a:7d:e5:fa:e0:7b:5c:b0:41:
ad:3d:0a:c2:2b:28:f3:df:01:0e:a1:5b:07:59:95:cf:8d:99:
05:6f:ce:62:61:9a:80:06:c0:54:00:31:ac:d5:13:58:3d:f0:
be:21:8b:87:f4:85:5a:b4:b2:67:71:bc:f4:50:44:56:cb:b5:
48:3b:6c:f9:b5:9d:c2:01:eb:db:55:3c:b8:a8:62:8c:f7:7e:
2e:a1:fa:c8:97:0a:37:c5:62:46:55:27:1f:6e:ea:ca:7a:b5:
9c:08:a3:f6:d9:18:73:fa:2a:69:2c:e9:af:66:1b:de:ad:a8:
54:4f:35:53:b3:4c:b2:88:34:32:89:16:d7:22:99:34:0d:54:
45:f4:6e:49:d1:38:59:80:60:ad:0a:28:7f:8f:0f:ca:0b:de:
4d:5a:32:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:34:10 2026 by rpki-client