Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: XOQup/9aa4qlYblcljJ03yv1WFjKZ+g7DuqTpwOfDWU=
Subject key identifier: 72:39:A1:6C:43:DC:1B:84:93:4D:FB:E4:42:10:0E:B0:6B:1B:BF:42
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019D37897AD158D3FFACC7EC3DE07C673138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0AA9
Signing time: Sun 29 Mar 2026 03:00:49 +0000
Manifest this update: Sun 29 Mar 2026 03:00:49 +0000
Manifest next update: Mon 30 Mar 2026 03:00:49 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: jPdP6PUHYhjEtvwojBboG5XJjGvEUQ9ZHdVunoFeUYQ=)
2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7a:d1:58:d3:ff:ac:c7:ec:3d:e0:7c:67:31:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Mar 29 03:00:49 2026 GMT
Not After : Mar 30 03:00:49 2026 GMT
Subject: CN=7239a16c43dc1b84934dfbe442100eb06b1bbf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:29:21:55:99:7d:81:3f:c3:d6:03:b4:b2:
45:b1:11:10:8c:79:19:36:42:eb:5e:bf:45:f7:d1:
26:5f:a8:09:08:1f:5c:8d:ef:de:95:21:ea:47:d0:
59:2a:6a:a8:14:5f:1f:a5:94:c2:8b:27:f2:76:ce:
55:ae:70:b7:cd:fc:fc:ad:77:38:0c:b2:e6:83:9c:
90:7e:6f:29:cd:0d:ef:39:c8:f8:e2:c0:a1:ab:47:
26:2d:4e:a3:1b:41:d8:63:9c:94:08:e6:88:1f:b5:
aa:46:58:3e:4f:98:31:c3:d6:42:cc:a8:af:9c:f6:
48:08:d1:6c:d6:4d:6c:cd:f0:a9:c3:45:83:37:d6:
87:bb:9f:7e:37:a7:0e:d2:d8:8e:81:5c:69:cb:f0:
8e:11:ee:0b:73:a7:39:ca:35:2c:79:86:ae:43:cf:
94:b9:e8:b6:00:d5:59:5e:3a:ad:72:e7:c0:01:0d:
6b:7b:3d:02:d3:b0:e6:78:ab:10:7e:af:ed:9d:cc:
04:77:a6:16:dc:bf:4d:98:de:60:09:d0:ba:03:c1:
84:d2:b8:af:18:9e:6a:3d:28:03:82:0a:0b:98:d1:
05:d9:15:95:a9:6a:5f:d2:db:3b:04:42:de:3f:18:
2c:31:21:d6:5c:75:db:c2:8a:cd:6c:96:60:d0:a4:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:A1:6C:43:DC:1B:84:93:4D:FB:E4:42:10:0E:B0:6B:1B:BF:42
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7f:6b:5f:36:b4:95:9a:6c:dc:f7:7c:2f:21:61:6b:c7:c1:
39:ed:85:39:f4:7e:5a:92:eb:4f:f5:cb:d1:10:55:87:20:c3:
1d:5c:5a:63:a4:82:a9:8f:8b:b4:7a:d7:43:10:5a:3a:88:b8:
a5:5b:31:86:fe:e3:a3:3d:da:e2:a7:b1:a3:e0:01:45:bd:e3:
c8:eb:55:11:a3:00:0d:18:9f:3a:f2:de:12:02:bc:cf:17:f3:
36:44:1d:bb:49:d0:51:42:8e:70:36:6f:b1:a5:29:e1:5f:aa:
8c:66:54:0e:2e:65:fd:9b:bd:0c:a1:51:eb:f8:fa:e9:2d:f6:
cf:60:9c:82:86:05:aa:0b:08:08:43:79:70:86:22:38:c5:27:
10:55:91:02:a7:6c:ea:85:e8:de:2d:65:4e:00:83:bd:4a:c2:
d2:71:4a:6f:ab:3f:4c:1c:11:9f:c5:7c:dd:04:60:ca:8c:28:
a7:86:d9:e8:a8:87:76:50:b3:bb:2f:37:dc:f5:0e:26:18:b9:
69:8e:00:d1:a3:04:db:fe:af:43:78:bf:4f:77:c0:72:c1:1b:
43:83:7d:e7:62:98:59:75:75:20:7a:e9:56:c5:3b:10:35:2a:
c1:53:9f:a5:27:1e:4a:2a:f8:58:5b:9f:99:4c:f2:92:b8:25:
30:5b:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:00 2026 by rpki-client