Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier: UJk6xX19b2nUz1uc/szA49rn/KXB5nfGiz4u01nHWs0=
Subject key identifier: 20:98:F4:81:DB:89:05:AD:C6:FC:59:7C:B0:64:4D:1E:9D:07:39:30
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial: 019D39E55C6AE25C2DAEB7E8E0F6620CEBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number: 0447
Signing time: Sun 29 Mar 2026 14:00:25 +0000
Manifest this update: Sun 29 Mar 2026 14:00:25 +0000
Manifest next update: Mon 30 Mar 2026 14:00:25 +0000
Files and hashes: 1: DTley2nDPplvZNQopBTQO4n1Ceo.roa (hash: u9j+aNgInYMXRDSEIlTiThKlupffu4ylSrg+Bxy7vx4=)
2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: oTtnlVSn7zaMoXxkzeqUgwJCZ4qlWDbxn7Kky/tacsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:5c:6a:e2:5c:2d:ae:b7:e8:e0:f6:62:0c:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
Validity
Not Before: Mar 29 14:00:25 2026 GMT
Not After : Mar 30 14:00:25 2026 GMT
Subject: CN=2098f481db8905adc6fc597cb0644d1e9d073930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3b:a3:ab:f5:f2:ac:4b:1a:c9:a9:93:3d:ec:
86:07:1b:af:1d:67:e4:1e:7f:59:8d:12:f4:ed:c9:
77:18:1e:ce:d0:37:a6:9f:1c:af:72:7f:98:bb:e2:
a0:4d:7c:84:4e:2d:ca:d6:16:9e:27:61:ef:8b:c8:
2e:65:cb:30:f6:c3:53:55:22:4c:3f:47:e3:f6:2c:
c1:ed:77:ac:69:0a:d0:d0:d6:ec:17:f3:32:72:c5:
48:ea:7a:a5:07:7c:35:ac:bc:02:fa:0c:74:4f:0e:
98:e5:81:24:75:af:2b:66:22:82:dc:48:77:6c:51:
01:46:2b:00:1c:c5:d4:93:1b:fa:a2:d3:e2:fa:bb:
7e:2c:65:ae:93:92:8d:25:e4:ce:c6:64:7e:eb:54:
fe:92:22:b3:30:9d:e3:d2:5c:9f:d6:cb:6f:f5:c7:
1a:51:82:ac:49:51:96:3f:d0:3b:0f:36:b7:9a:64:
1b:d4:ec:9f:65:3e:19:a7:87:e6:ae:05:6a:80:d9:
59:52:e2:46:15:5d:3d:84:b6:7c:a8:2c:7a:6d:fb:
d1:5c:c0:fd:9d:56:9b:66:cc:10:ae:f8:3b:dd:a6:
54:87:65:d8:9d:73:05:c9:3f:1a:02:cc:96:fe:17:
78:01:30:99:64:ec:ed:92:00:b6:0d:3f:a6:a3:e8:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:98:F4:81:DB:89:05:AD:C6:FC:59:7C:B0:64:4D:1E:9D:07:39:30
X509v3 Authority Key Identifier:
keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6d:c2:3a:3e:e2:98:a9:5d:12:ec:04:a8:d6:98:3c:5f:d8:
68:1e:1d:fb:00:66:cb:fd:71:db:68:ba:20:92:80:77:ea:35:
c6:79:a9:68:13:e1:12:28:ff:64:39:9c:23:cc:dd:03:c9:bc:
c7:04:20:bd:34:19:7d:71:75:6a:61:28:03:7b:89:f2:e5:12:
6f:d3:65:9d:5c:2c:a8:7c:c0:3d:3e:71:cd:d2:02:e6:c4:cb:
f6:99:76:e6:83:f7:8b:cb:4c:32:49:15:77:c2:6c:43:a3:b6:
c0:da:28:89:a1:8e:26:68:50:56:d2:56:71:5a:c9:f3:93:9a:
22:c9:dc:ab:c5:af:4c:61:37:68:14:5a:d9:8c:44:30:27:89:
ef:dd:c5:f8:9b:e6:97:e0:10:79:02:3f:54:e6:16:cc:b7:3b:
2c:31:29:43:c8:a7:e3:a0:5c:36:eb:e9:fa:26:5c:b5:e9:c3:
ae:fe:8e:78:7e:b9:39:8c:d1:f4:3b:d7:08:5e:7e:92:aa:40:
ce:13:21:9f:2c:8a:fc:d1:f4:32:95:a3:27:8a:14:d8:56:5a:
11:98:30:da:2f:9d:2f:bb:19:44:42:c8:ec:e4:45:3f:94:5f:
1d:9e:86:01:1f:97:02:90:02:28:07:9f:fc:02:fc:67:65:79:
4c:9a:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:05 2026 by rpki-client