Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: WkvwWK/6Q/Ltyy9VIjVstrzvRK0WwSmZlAkqJ9OQ1+g=
Subject key identifier: 38:9B:48:C5:B3:54:7D:AF:AA:23:8F:F8:94:5A:AE:C0:AB:F4:5D:EE
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 019D37528F6E69E65767F2261670FEE7D10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0B1C
Signing time: Sun 29 Mar 2026 02:00:50 +0000
Manifest this update: Sun 29 Mar 2026 02:00:50 +0000
Manifest next update: Mon 30 Mar 2026 02:00:50 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: OFYlWHvwXE9gqNHVq6EaC3znci0.roa (hash: 3rjgdPpQqg9rUDFn+dwSMF6OJWtKwdxah8PhRfqx0fc=)
3: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: cDfMCsSNXuWNVwAA8VjXokhn6/szJ/PF8X9eoy0gaJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:8f:6e:69:e6:57:67:f2:26:16:70:fe:e7:d1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Mar 29 02:00:50 2026 GMT
Not After : Mar 30 02:00:50 2026 GMT
Subject: CN=389b48c5b3547dafaa238ff8945aaec0abf45dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:25:9e:3a:fc:33:4f:6b:a6:9f:92:23:3a:
31:42:19:50:2c:74:26:6a:de:09:11:28:9d:ba:35:
ea:7a:0c:f1:be:78:72:4f:08:69:6b:b3:b8:33:1b:
53:86:b6:7a:9e:93:3b:cd:8b:40:95:c3:c7:c2:ed:
9c:49:d5:95:b7:cb:d3:c4:93:25:4a:85:e4:c6:67:
b8:9b:1c:de:0f:df:e1:30:b4:9b:73:5f:cc:4c:8f:
a2:38:4d:e4:69:5b:f8:d2:61:35:9d:0f:3d:a6:f6:
6e:49:50:ff:0f:51:06:f0:41:0f:66:f8:7c:d5:89:
5d:dd:c1:60:3d:55:ac:74:80:ee:65:8d:79:ce:cc:
b5:dd:0f:2a:8e:b4:62:b9:c3:ff:da:3d:f7:0c:9d:
dc:5f:71:ab:af:a1:17:97:2d:a5:a3:33:27:da:3c:
53:16:e6:5f:00:63:4c:9b:b0:a8:f5:06:24:72:73:
b4:96:eb:c5:93:67:18:61:7d:5f:ba:9c:d9:64:1c:
b3:ad:00:18:90:60:db:6e:8b:c5:46:82:bc:4f:ba:
1f:13:dc:8d:ac:d4:ba:bb:3e:ba:66:b7:f2:34:6b:
28:ac:be:fc:96:25:6f:cd:b1:09:2a:49:c7:3a:ac:
f3:a2:1c:77:eb:7f:82:70:f9:21:76:6f:9e:8b:24:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:48:C5:B3:54:7D:AF:AA:23:8F:F8:94:5A:AE:C0:AB:F4:5D:EE
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:30:ce:45:d6:86:8d:63:36:d3:86:f5:27:e9:6f:be:aa:
d7:d1:28:73:56:38:25:49:1c:28:0c:98:20:73:09:01:0f:91:
2a:68:3c:c7:d8:68:de:e7:fc:80:4e:65:cd:eb:f1:23:c6:25:
69:8d:7d:c2:1f:fe:d7:56:9f:f9:9e:6f:1c:04:df:96:d8:84:
7e:a6:e0:46:aa:b5:cc:f7:f5:9a:98:19:dd:f1:b6:76:56:3e:
ac:64:31:24:f8:b7:19:0e:f3:4d:30:1f:e4:f6:f4:99:57:67:
b9:4b:54:64:5a:f3:bc:f9:94:3b:ba:f5:13:56:be:37:8c:7e:
63:0b:02:37:db:e0:0e:7f:3d:f1:98:33:b0:ea:cd:92:fd:3f:
7f:6b:ce:32:b4:4b:62:09:ba:dc:2b:28:f2:0a:b0:83:62:6c:
3f:50:d7:cb:fc:48:0b:02:e5:84:94:c9:00:f4:47:47:e1:01:
11:70:67:5f:b0:f3:14:b5:78:e9:19:f5:ce:f0:bb:32:8e:74:
0a:3d:32:02:8f:87:3c:68:c7:7d:51:94:7a:05:af:77:42:6f:
fe:05:78:73:77:81:01:a5:7d:10:f2:6c:c8:5a:7a:42:e3:14:
79:20:36:15:f6:1e:1a:9d:e6:be:59:a3:ae:13:b0:da:81:d1:
3f:2b:57:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uo9uaeZXZ/ImFnD+59EOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk
MmIwZmUwHhcNMjYwMzI5MDIwMDUwWhcNMjYwMzMwMDIwMDUwWjAzMTEwLwYDVQQD
EygzODliNDhjNWIzNTQ3ZGFmYWEyMzhmZjg5NDVhYWVjMGFiZjQ1ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hIlnjr8M09rpp+SIzoxQhlQLHQm
at4JESidujXqegzxvnhyTwhpa7O4MxtThrZ6npM7zYtAlcPHwu2cSdWVt8vTxJMl
SoXkxme4mxzeD9/hMLSbc1/MTI+iOE3kaVv40mE1nQ89pvZuSVD/D1EG8EEPZvh8
1Yld3cFgPVWsdIDuZY15zsy13Q8qjrRiucP/2j33DJ3cX3Grr6EXly2lozMn2jxT
FuZfAGNMm7Co9QYkcnO0luvFk2cYYX1fupzZZByzrQAYkGDbbovFRoK8T7ofE9yN
rNS6uz66ZrfyNGsorL78liVvzbEJKknHOqzzohx363+CcPkhdm+eiyRLOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDibSMWzVH2vqiOP+JRarsCr9F3uMB8GA1UdIwQY
MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt
NTQ4ODE2OTExOWU4LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4
LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhAwzkXW
ho1jNtOG9Sfpb76q19Eoc1Y4JUkcKAyYIHMJAQ+RKmg8x9ho3uf8gE5lzevxI8Yl
aY19wh/+11af+Z5vHATfltiEfqbgRqq1zPf1mpgZ3fG2dlY+rGQxJPi3GQ7zTTAf
5Pb0mVdnuUtUZFrzvPmUO7r1E1a+N4x+YwsCN9vgDn898ZgzsOrNkv0/f2vOMrRL
Ygm63Cso8gqwg2JsP1DXy/xICwLlhJTJAPRHR+EBEXBnX7DzFLV46Rn1zvC7Mo50
Cj0yAo+HPGjHfVGUegWvd0Jv/gV4c3eBAaV9EPJsyFp6QuMUeSA2FfYeGp3mvlmj
rhOw2oHRPytXjg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:25 2026 by rpki-client