Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: A/pWAJ+Bu+W938muhFsqbWYrFiatZcytQmE7a1qDyRA=
Subject key identifier: 33:AD:E9:BF:FD:DF:5B:20:28:24:24:2B:2A:D5:80:0C:04:18:70:1E
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019F9F96664BA108CC26432955D506C866A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0BE8
Signing time: Sun 26 Jul 2026 18:01:01 +0000
Manifest this update: Sun 26 Jul 2026 18:01:01 +0000
Manifest next update: Mon 27 Jul 2026 18:01:01 +0000
Files and hashes: 1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: HGsSnm5lILBJzxGnLd1Z73wvuhiuChGJHyzba4moRE0=)
2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:96:66:4b:a1:08:cc:26:43:29:55:d5:06:c8:66:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jul 26 18:01:01 2026 GMT
Not After : Jul 27 18:01:01 2026 GMT
Subject: CN=33ade9bffddf5b202824242b2ad5800c0418701e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:00:da:81:9c:db:24:aa:05:a3:9a:96:53:
cd:84:ad:11:d3:48:0b:e9:02:91:8c:75:1a:a9:64:
a0:87:4f:e9:6b:1e:bf:88:36:ec:10:11:51:37:60:
82:e5:69:75:c8:1d:a3:59:30:15:1e:73:1a:d5:4a:
3a:bd:90:0f:24:5d:f8:4f:5b:20:fc:f8:87:6c:0d:
e9:f1:ad:99:b1:a3:a3:9b:0e:8a:4c:f9:74:e9:d7:
ee:1c:0d:7a:5c:d9:42:bd:bf:6e:eb:8a:85:51:e2:
b6:ab:0c:44:2d:a7:c3:3c:53:d6:1c:c9:f0:5e:ee:
85:14:23:bb:f7:e2:63:33:85:6f:24:65:56:b4:f0:
83:0b:bb:13:67:85:be:7a:d3:16:8e:82:72:e4:a0:
28:bd:c1:37:f1:2d:43:a5:9e:55:6b:31:1c:00:78:
00:4c:20:6b:23:86:66:e5:3a:37:05:6c:31:43:5b:
2f:53:e7:b6:29:5c:62:c1:60:d3:9c:02:53:87:25:
ec:8c:c1:99:60:5c:a4:08:e3:27:83:46:c9:94:7b:
e6:73:85:12:bc:2b:3b:43:8e:91:c2:24:5b:32:b7:
3b:6a:6a:6e:f9:91:01:12:f9:c6:4f:48:bd:ae:23:
5d:d4:89:54:ce:a7:eb:dc:82:fb:25:b2:86:44:04:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:E9:BF:FD:DF:5B:20:28:24:24:2B:2A:D5:80:0C:04:18:70:1E
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3d:fe:da:d4:0e:66:ae:92:3e:e4:c8:76:4c:3f:f8:63:61:
31:cb:49:0d:ae:a4:0c:5a:e8:19:27:1f:c4:52:50:3c:2b:92:
4a:3e:2a:05:e5:da:78:64:b9:d5:1a:83:4b:53:88:a7:d0:76:
0b:db:21:65:ef:91:b8:74:50:b0:02:c3:35:d5:0a:4d:03:85:
0a:fb:78:b0:b8:df:6f:10:d5:e3:ea:db:f3:19:88:9f:bc:57:
c3:e3:f6:f3:a7:66:30:dc:60:8a:ec:99:82:85:bf:9a:fa:7c:
9f:62:02:47:99:77:ab:fa:6d:4d:a9:8f:8e:a3:76:b5:fe:7f:
15:aa:7d:b0:f3:ef:48:a5:b1:92:8f:68:8e:11:b2:8c:ec:87:
a0:42:0e:f5:9e:23:1f:0c:30:19:29:d6:81:0c:48:48:1b:2c:
f0:b1:f8:a2:3f:d9:a7:d1:ed:e3:1b:83:9e:6b:43:fa:ca:fd:
ed:06:8e:34:95:83:7a:fe:aa:02:cc:9e:33:f8:cf:7f:35:f0:
9e:fd:a2:36:26:49:2c:4e:a3:91:5e:66:5e:e0:ba:3d:bf:9c:
5a:8c:ce:92:7e:35:bb:00:0a:ac:0e:66:f9:9f:86:c4:57:11:
e3:48:07:fb:36:1a:b1:a9:01:fa:15:cf:ff:e2:a0:93:0e:e5:
73:cb:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:43:38 2026 by rpki-client