Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: YqkTd8R7yxf2EaOwF5RU6A77gl1Gfdnz0TkK83xByDE=
Subject key identifier: 1D:C7:BA:3B:4F:57:FA:B0:D1:88:B6:DC:2B:F3:D4:0D:EC:D3:E0:52
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 01A14E0780D5ECD888BB0C1543B19E090DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 0D3B
Signing time: Sun 18 Oct 2026 08:01:16 +0000
Manifest this update: Sun 18 Oct 2026 08:01:16 +0000
Manifest next update: Mon 19 Oct 2026 08:01:16 +0000
Files and hashes: 1: IgZj-XNh3QdhlXKNNdT8B9gxjtQ.roa (hash: trthb+ZZVfcUoRGw0t6Hr4SEj5P8fuD7sBQcz4xh7rk=)
2: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: /6j7DpPMdGkcLIk/xIDpZeibsWRAw/6JQJwap4prg4s=)
3: lnOdYPSa1fJjp9hxjWl3EgyrWYc.roa (hash: DoHxm0kOg19QcnxI9nLwd4f3KAMdh5Bl8rlgUu8/7jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:07:80:d5:ec:d8:88:bb:0c:15:43:b1:9e:09:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Oct 18 08:01:16 2026 GMT
Not After : Oct 19 08:01:16 2026 GMT
Subject: CN=1dc7ba3b4f57fab0d188b6dc2bf3d40decd3e052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:ec:2e:15:b3:a6:45:95:db:1f:ac:4a:25:
a6:e4:0d:a5:35:79:ae:cf:5f:1a:f7:ad:6d:65:cf:
c3:83:6b:70:bf:af:9c:54:d0:aa:7a:a7:55:dc:a3:
26:65:4a:90:b8:6f:fe:3b:ea:ad:f1:89:05:c8:8c:
cf:07:44:0d:44:74:b5:ed:e5:5a:cb:88:5f:18:96:
41:8f:2f:9d:ba:f1:a8:cc:ca:8e:bc:80:be:69:9f:
07:ba:a5:92:8f:c2:c4:1b:37:47:91:b4:30:0d:28:
b3:43:8d:54:75:43:d1:98:29:65:1f:f0:f3:a2:6e:
ee:e8:35:91:95:86:32:4d:ad:a0:e4:74:d0:b3:43:
c5:79:2d:3d:e8:15:be:f3:6b:81:da:01:b2:18:0f:
b3:95:ea:06:a2:b3:07:93:4f:37:f6:46:da:12:be:
30:3e:92:cb:ad:53:5b:95:61:0f:39:b7:10:00:af:
43:d4:e2:dd:92:84:95:d1:27:13:9d:82:4d:0c:8b:
78:bb:b5:f7:18:39:ae:79:07:49:1b:5a:0e:87:b9:
12:6a:e8:fb:cc:6b:b4:04:8c:9a:be:c6:6e:74:68:
ab:7d:32:bb:83:88:2a:e5:4f:ca:8c:67:7c:e1:2a:
05:93:db:d7:c8:17:71:b3:69:5b:c1:fc:ba:64:2c:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:BA:3B:4F:57:FA:B0:D1:88:B6:DC:2B:F3:D4:0D:EC:D3:E0:52
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:85:e8:c0:0f:90:d0:d2:d0:1a:4e:60:76:bf:aa:02:fb:e0:
76:23:b3:f5:b4:62:78:17:ca:23:9e:8f:b7:87:b3:eb:c5:0a:
4b:01:4f:9d:3e:6f:ed:9c:5e:51:aa:0e:87:82:d7:53:59:c6:
8b:4b:d9:d4:93:51:0b:fe:06:29:d3:49:31:5e:83:9a:5b:bc:
5e:b2:7f:d6:ea:a7:c6:4b:e9:28:a8:58:e5:cf:a9:b7:cb:81:
0a:10:80:14:81:fa:41:a4:74:c0:88:6c:c9:eb:ee:41:bf:0d:
3d:c1:6a:07:ce:21:90:e2:b1:95:32:82:90:8d:bd:28:bb:4e:
ee:d7:1b:09:e6:95:a4:f8:b4:5a:d9:7f:31:04:e6:15:83:38:
48:62:ca:0a:d1:df:c1:ab:00:5e:c0:99:8a:0e:bb:9c:8f:a1:
5c:15:64:83:2d:c9:2e:89:05:a5:c3:69:fd:9b:99:13:82:39:
45:d0:8e:1d:bf:d7:ca:31:1e:46:0d:a5:1c:9c:88:f1:0c:ac:
44:cb:c7:b7:2f:3a:b9:7e:d9:0a:10:90:4b:ac:79:29:08:d0:
a8:bf:be:b3:79:a8:1e:1f:4a:81:ba:98:9f:c7:c2:c4:44:04:
1d:72:09:f7:08:19:01:b8:dd:49:e7:17:79:5b:86:b0:38:34:
69:a4:bf:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOB4DV7NiIuwwVQ7GeCQ3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk
MmIwZmUwHhcNMjYxMDE4MDgwMTE2WhcNMjYxMDE5MDgwMTE2WjAzMTEwLwYDVQQD
EygxZGM3YmEzYjRmNTdmYWIwZDE4OGI2ZGMyYmYzZDQwZGVjZDNlMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnHsLhWzpkWV2x+sSiWm5A2lNXmu
z18a961tZc/Dg2twv6+cVNCqeqdV3KMmZUqQuG/+O+qt8YkFyIzPB0QNRHS17eVa
y4hfGJZBjy+duvGozMqOvIC+aZ8HuqWSj8LEGzdHkbQwDSizQ41UdUPRmCllH/Dz
om7u6DWRlYYyTa2g5HTQs0PFeS096BW+82uB2gGyGA+zleoGorMHk0839kbaEr4w
PpLLrVNblWEPObcQAK9D1OLdkoSV0ScTnYJNDIt4u7X3GDmueQdJG1oOh7kSauj7
zGu0BIyavsZudGirfTK7g4gq5U/KjGd84SoFk9vXyBdxs2lbwfy6ZCyY/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3HujtPV/qw0Yi23Cvz1A3s0+BSMB8GA1UdIwQY
MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt
NTQ4ODE2OTExOWU4LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4
LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4XowA+Q
0NLQGk5gdr+qAvvgdiOz9bRieBfKI56Pt4ez68UKSwFPnT5v7ZxeUaoOh4LXU1nG
i0vZ1JNRC/4GKdNJMV6Dmlu8XrJ/1uqnxkvpKKhY5c+pt8uBChCAFIH6QaR0wIhs
yevuQb8NPcFqB84hkOKxlTKCkI29KLtO7tcbCeaVpPi0Wtl/MQTmFYM4SGLKCtHf
wasAXsCZig67nI+hXBVkgy3JLokFpcNp/ZuZE4I5RdCOHb/XyjEeRg2lHJyI8Qys
RMvHty86uX7ZChCQS6x5KQjQqL++s3moHh9KgbqYn8fCxEQEHXIJ9wgZAbjdSecX
eVuGsDg0aaS/ZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 14:40:14 2026 by rpki-client