Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: 5UUFcwXW/aUDjT7Mczru81uTcjLykHW1a3pfB0P2cn8=
Subject key identifier: 69:8D:73:A9:EB:A9:0C:6F:30:AE:9E:19:85:16:D1:BA:84:66:31:EF
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019D382DD66EC1FCC6A3565624C54B71C885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 158D
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: oovlb3ymHDeJH/i5cwzmMq93Yl+aqvzyX/QiOf4oUbo=)
2: l-MTLKLVkCPLyVnX6_jxbVIMUkY.roa (hash: ntncx83xvrR7GXBUBSWIBKho03vJeQ/rhh6Pkr3gi58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d6:6e:c1:fc:c6:a3:56:56:24:c5:4b:71:c8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=698d73a9eba90c6f30ae9e198516d1ba846631ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:52:33:67:0e:d8:9e:1e:9c:c4:04:4d:04:
eb:ac:fd:c1:cc:6f:06:af:34:09:74:5a:15:cc:ad:
6c:41:a4:23:f6:c3:52:11:5a:5d:d4:fd:92:76:fd:
62:04:af:4d:b6:68:78:78:3c:54:95:54:c1:c0:eb:
43:b1:10:1e:d0:f0:97:33:cc:92:f4:d5:62:be:1e:
a5:4c:3a:6f:3f:43:6a:8d:33:d9:aa:ed:82:92:6e:
9f:87:7f:1f:f1:14:77:b7:1e:b3:2d:5d:82:a9:e6:
a6:6d:39:bd:ea:7b:33:82:4f:5b:f6:fa:76:7c:c9:
2f:55:fc:b0:1b:8e:49:48:71:e0:c3:ef:10:e6:9a:
07:9f:f9:42:06:c3:ef:e1:7c:0a:02:9a:2e:65:10:
2a:e4:48:1d:a0:40:7b:9d:43:18:74:c4:95:f8:95:
41:11:7e:64:d4:6f:aa:9c:40:10:db:c9:f8:ee:4e:
11:9b:59:10:e3:37:d8:7a:68:a6:a4:ca:0e:26:05:
77:7a:52:d4:a6:5a:8f:02:b5:48:7c:fd:69:2f:22:
68:ec:b8:86:05:0b:d0:a0:ea:90:ca:62:57:63:b0:
03:d2:bf:fb:31:43:52:1d:8f:55:7e:ee:a0:ff:e7:
bb:93:4d:4a:bf:eb:ca:98:b6:b8:3a:94:e6:22:60:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:73:A9:EB:A9:0C:6F:30:AE:9E:19:85:16:D1:BA:84:66:31:EF
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:9d:80:7b:c1:dd:1d:ba:0a:d4:02:65:4f:a6:31:3a:c4:
46:ea:36:e3:28:d5:5e:71:a2:3f:58:84:dd:12:9d:f4:ee:7c:
80:05:3a:5d:18:ea:5e:0d:03:c0:74:bf:77:66:64:5b:6e:be:
fd:3a:ad:f2:c3:93:6e:cd:bc:1e:87:d5:09:88:9a:ce:01:88:
0e:8b:38:de:58:30:a9:fb:07:e7:07:67:e8:3e:9f:cf:04:04:
3b:6e:d7:c2:55:a2:0b:71:65:e4:d4:b5:b5:2b:25:e0:48:b5:
75:b0:03:d4:f7:81:f9:dd:33:aa:a2:00:0c:d9:d2:9c:8a:91:
74:d1:7f:09:38:06:d5:a1:fa:41:4b:43:12:90:22:3b:3e:00:
30:55:40:82:83:95:69:84:ca:58:67:9c:5f:75:85:57:ef:07:
8e:f8:dc:3c:6c:7e:6d:15:0f:c4:ed:4c:91:cb:12:25:43:ae:
29:ad:54:fd:ad:f8:94:36:05:0f:92:8b:5c:e0:30:b3:a6:dc:
a7:a0:f8:b5:68:35:7d:21:d6:0f:85:e0:c4:cb:f2:5b:c2:a2:
ff:8d:19:b5:b4:ab:0d:39:06:07:db:34:43:a2:5c:31:53:67:
c1:78:44:5a:31:98:5d:52:58:f8:07:ba:6b:b3:3e:72:b4:30:
99:97:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:49 2026 by rpki-client