Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: 8K3soFDuOQG37wC7IA/wtcLQGYhFZV7IAtxwQPzpOTQ=
Subject key identifier: FE:B6:B8:DB:E5:57:35:D2:A8:7D:39:D4:55:1E:55:12:D1:3E:47:E5
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 01A138FFA48D31F02DFCF49582125A437721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0CBC
Signing time: Wed 14 Oct 2026 06:00:39 +0000
Manifest this update: Wed 14 Oct 2026 06:00:39 +0000
Manifest next update: Thu 15 Oct 2026 06:00:39 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: 1Rv4brIY9orZHJRyb4Ivv1s4ahEF4WTRCWfJ5v7lwGI=)
2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:a4:8d:31:f0:2d:fc:f4:95:82:12:5a:43:77:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Oct 14 06:00:39 2026 GMT
Not After : Oct 15 06:00:39 2026 GMT
Subject: CN=feb6b8dbe55735d2a87d39d4551e5512d13e47e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:51:53:b9:9f:28:37:19:91:d8:5a:45:74:
49:cd:41:73:6f:7f:c2:de:48:fc:2a:4b:f1:ad:4d:
02:7a:aa:90:f5:2e:e9:06:26:68:67:51:7f:d7:a9:
7f:e8:ba:b8:d6:67:7f:25:d6:ec:bd:26:9f:70:a8:
df:d2:48:59:ab:5f:ca:f8:41:eb:df:4e:77:3d:9e:
19:ae:aa:4e:f8:b6:37:c9:e4:69:7e:ed:20:a6:bc:
6e:a5:e7:68:87:64:f2:15:69:d1:9c:48:58:3c:72:
12:f0:81:2d:0b:bb:b4:c9:c5:06:8b:a7:00:77:41:
a8:df:d5:b6:7c:fe:2c:a4:7a:ff:51:c2:19:91:08:
ee:e2:1c:10:2d:86:6d:e4:55:35:da:52:57:a5:5d:
e9:e7:0c:b6:18:93:30:82:ee:04:87:63:a9:18:f7:
22:b0:40:22:01:29:43:b5:34:28:ac:b0:8e:77:f4:
51:cd:fe:3a:5a:c6:ee:75:9a:0f:04:03:5e:50:6f:
69:59:52:bb:42:8e:89:e6:06:53:67:04:75:46:e6:
e9:f2:6e:07:91:2d:65:5f:41:97:70:de:6d:82:19:
dc:f8:cb:4b:38:5f:36:3c:d3:36:a1:7f:3b:a0:9a:
e9:49:1d:48:28:df:d5:dc:5e:b9:1e:58:00:41:d4:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:B8:DB:E5:57:35:D2:A8:7D:39:D4:55:1E:55:12:D1:3E:47:E5
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ed:be:43:75:2a:6c:ca:26:bc:14:99:c6:f4:05:49:31:3b:
c6:26:ca:cd:f7:4a:d3:ad:c5:01:d5:d6:cd:e3:c3:7a:9c:ee:
a0:80:3f:7d:17:35:4e:2f:ac:7f:f6:33:d4:ed:35:98:e2:d0:
e3:39:46:0d:a8:64:1a:1c:e6:ae:fe:c2:d0:4d:da:a9:bb:52:
35:6d:f5:b1:ca:01:ce:2c:51:86:e7:85:64:f6:3d:0d:d5:5b:
09:f9:39:4c:bd:5c:26:2b:26:00:d4:4f:7e:8a:fe:dd:c5:05:
85:95:6f:6f:3d:6d:c1:2f:11:b2:db:a2:fe:64:72:94:67:ec:
69:fc:95:ec:86:98:20:7f:21:98:6f:e9:bb:80:53:47:a9:75:
81:30:d7:2a:63:66:b1:27:bd:da:23:00:e3:ed:61:3e:49:1e:
d5:08:2e:ab:4b:fc:18:65:89:38:03:37:4c:48:96:be:8a:63:
7a:e8:64:c9:d3:fe:bb:d6:55:2b:ab:a7:db:0e:05:14:13:d0:
55:ee:16:3f:4a:1a:82:9d:fa:97:7e:83:32:31:1f:19:ea:53:
cc:fc:60:53:d6:db:31:95:45:3d:fd:0c:4e:d2:1c:6e:bb:e1:
20:ea:61:b8:c2:1d:bd:79:60:f3:5e:fe:01:9c:b7:18:36:d7:
b9:92:41:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4/6SNMfAt/PSVghJaQ3chMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzRiMDJlZGM3YzI4NzhmOTRjNTEwNGNhZmE4OTc4YWZi
Njc1MmQwHhcNMjYxMDE0MDYwMDM5WhcNMjYxMDE1MDYwMDM5WjAzMTEwLwYDVQQD
EyhmZWI2YjhkYmU1NTczNWQyYTg3ZDM5ZDQ1NTFlNTUxMmQxM2U0N2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUlRU7mfKDcZkdhaRXRJzUFzb3/C
3kj8KkvxrU0CeqqQ9S7pBiZoZ1F/16l/6Lq41md/JdbsvSafcKjf0khZq1/K+EHr
3053PZ4ZrqpO+LY3yeRpfu0gprxupedoh2TyFWnRnEhYPHIS8IEtC7u0ycUGi6cA
d0Go39W2fP4spHr/UcIZkQju4hwQLYZt5FU12lJXpV3p5wy2GJMwgu4Eh2OpGPci
sEAiASlDtTQorLCOd/RRzf46WsbudZoPBANeUG9pWVK7Qo6J5gZTZwR1Rubp8m4H
kS1lX0GXcN5tghnc+MtLOF82PNM2oX87oJrpSR1IKN/V3F65HlgAQdSiEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP62uNvlVzXSqH051FUeVRLRPkflMB8GA1UdIwQY
MBaAFD40sC7cfCh4+UxRBMr6iXivtnUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQt
MzVhMDI0MWE0MzAxLzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi80MjI1MmUtMDMyMS00ZGEyLTkyZjQtMzVhMDI0MWE0MzAx
LzEvUGpTd0x0eDhLSGo1VEZFRXl2cUplSy0yZFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu2+Q3Uq
bMomvBSZxvQFSTE7xibKzfdK063FAdXWzePDepzuoIA/fRc1Ti+sf/Yz1O01mOLQ
4zlGDahkGhzmrv7C0E3aqbtSNW31scoBzixRhueFZPY9DdVbCfk5TL1cJismANRP
for+3cUFhZVvbz1twS8Rstui/mRylGfsafyV7IaYIH8hmG/pu4BTR6l1gTDXKmNm
sSe92iMA4+1hPkke1Qguq0v8GGWJOAM3TEiWvopjeuhkydP+u9ZVK6un2w4FFBPQ
Ve4WP0oagp36l36DMjEfGepTzPxgU9bbMZVFPf0MTtIcbrvhIOphuMIdvXlg817+
AZy3GDbXuZJBFA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:35 2026 by rpki-client