Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
File: pjsH69N0fmAPjCZNl5LeNE-Kp60.mft (raw, json)
Hash identifier: hT68x1Sf1hnS/63v5EMlFskHPoZ7JWFkXoY3Iur5HlE=
Subject key identifier: 12:EC:9D:45:B4:C4:C6:C7:BA:74:3E:AC:55:8D:10:05:B9:97:C8:BB
Authority key identifier: A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
Certificate issuer: /CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Certificate serial: 01A0E88946CCC8484BABB769955D2D91C59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
Manifest number: 025A
Signing time: Mon 28 Sep 2026 15:01:45 +0000
Manifest this update: Mon 28 Sep 2026 15:01:45 +0000
Manifest next update: Tue 29 Sep 2026 15:01:45 +0000
Files and hashes: 1: pjsH69N0fmAPjCZNl5LeNE-Kp60.crl (hash: FX2B2y41g6xS5x7FXqijTY3ZHgZwmg4OBFaVyP8fpVs=)
2: qY4yCOWTnlPWkTWa1a07dG8fIgA.asa (hash: vMaDRmq9yFz+m9oIbjqpXaC5rEWSYqU9EGUZqbMSeB8=)
3: v0mNpbcbj7PjoyxWiWPtV76PVIw.roa (hash: KSt6gZR31xbwnBxfk2quHntFt2V417a+6qM1Jg/Dr6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:46:cc:c8:48:4b:ab:b7:69:95:5d:2d:91:c5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63b07ebd3747e600f8c264d9792de344f8aa7ad
Validity
Not Before: Sep 28 15:01:45 2026 GMT
Not After : Sep 29 15:01:45 2026 GMT
Subject: CN=12ec9d45b4c4c6c7ba743eac558d1005b997c8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:f4:7a:29:fa:e3:f2:81:90:f6:3c:4d:49:
5c:74:12:94:2e:0f:5c:56:b3:66:ed:62:c5:f8:fa:
22:95:54:58:39:13:eb:28:0b:85:d7:a6:1d:24:0f:
b4:03:53:1d:80:28:ac:33:b3:0f:eb:75:81:b6:a9:
e2:fa:c3:af:fb:20:10:ed:9a:27:74:4f:29:82:4a:
ce:5e:70:37:ee:92:53:c7:dd:9d:fa:04:36:8e:2d:
76:69:be:52:c5:f6:d6:b0:ba:c3:56:df:a0:ca:14:
79:90:09:32:85:c3:f8:8e:e9:6b:93:f2:d4:7b:73:
26:36:6b:34:d0:5e:05:90:41:b9:d3:15:5e:95:cf:
0f:01:74:8e:2f:32:0f:f4:de:49:29:c2:d8:f8:2e:
63:6c:cc:b8:18:2f:1d:28:67:b2:58:3f:32:a5:dd:
19:b1:ec:6f:b6:0e:8a:02:c0:bc:b5:6c:10:b7:2a:
45:b6:25:e6:f6:63:eb:4c:1d:5e:06:06:fd:4f:fe:
7c:a5:74:54:24:24:4e:e0:62:2b:21:40:e9:63:dd:
77:61:1b:58:1a:e4:cb:7e:f0:ba:29:53:b3:5a:b4:
60:87:90:a0:d9:01:db:55:ac:b6:51:4d:36:52:96:
41:4c:dc:25:96:3f:fe:2f:87:4d:98:8f:7b:b2:52:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EC:9D:45:B4:C4:C6:C7:BA:74:3E:AC:55:8D:10:05:B9:97:C8:BB
X509v3 Authority Key Identifier:
keyid:A6:3B:07:EB:D3:74:7E:60:0F:8C:26:4D:97:92:DE:34:4F:8A:A7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsH69N0fmAPjCZNl5LeNE-Kp60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/54151a-fd97-491a-af3b-40f48226ecef/1/pjsH69N0fmAPjCZNl5LeNE-Kp60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4f:c2:4a:d0:91:17:2f:0d:fd:a3:fe:02:fa:eb:c6:81:da:
a2:67:2b:b3:e5:b2:e8:e5:99:d7:5c:15:af:bf:51:6d:24:2b:
2f:cc:e5:9c:ab:c6:6f:e5:18:bf:ac:98:b6:42:1f:94:6a:b3:
47:ff:a0:ab:fd:0f:28:1d:2d:22:4b:e3:65:9b:29:6d:57:e6:
72:15:89:67:94:ef:ac:a1:07:f4:30:34:77:33:e3:f9:12:16:
11:0d:43:ec:02:85:e2:09:24:24:df:84:b9:ad:09:de:9f:db:
3f:92:8e:1b:c8:e3:18:24:03:5e:41:50:a8:b7:e6:10:5b:23:
76:7c:75:c6:42:a4:14:2f:dd:b6:3c:bf:3c:cb:7c:10:4d:4d:
2c:eb:4a:61:12:ed:d9:67:c6:7c:40:2a:74:1b:fa:ed:74:b1:
d6:6b:14:93:b6:1a:b3:92:15:31:58:ae:3c:5e:21:93:c0:85:
43:d1:4b:b1:d8:53:fa:4f:4c:ec:a0:98:83:dd:ea:c1:16:3e:
17:55:a6:dc:d1:1a:5c:39:fb:89:24:8c:08:d4:8a:d1:3b:33:
65:ab:da:f4:0b:3c:16:9a:f5:aa:13:38:3f:be:60:5f:c9:97:
5a:c8:96:1d:0b:f4:38:fc:f4:26:49:4d:a4:32:7c:a9:1f:ed:
6f:00:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:56 2026 by rpki-client