Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: vHVbTdr1d15wZah/nZjSSVVdgR+csHnJ559JEa/APrU=
Subject key identifier: 1C:DD:B9:FD:1B:25:77:B8:53:3C:3E:C1:BE:ED:68:F0:9E:37:07:E9
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 019CEC01FA80610C972344E5E2BF09AF5B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 097F
Signing time: Sat 14 Mar 2026 11:01:18 +0000
Manifest this update: Sat 14 Mar 2026 11:01:18 +0000
Manifest next update: Sun 15 Mar 2026 11:01:18 +0000
Files and hashes: 1: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (hash: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4=)
2: C-zWCgwAxUcB5PR-BZP8SY0imsc.roa (hash: tH6y5VegxHL/FivasKZlqGMSC8JeobbFVY2ZXp/Rp9w=)
3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: RHK7+6xTdG36Lf8vpPqMU6SuMCBQTkfQOat+f+4w76s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:01:fa:80:61:0c:97:23:44:e5:e2:bf:09:af:5b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: Mar 14 11:01:18 2026 GMT
Not After : Mar 15 11:01:18 2026 GMT
Subject: CN=1cddb9fd1b2577b8533c3ec1beed68f09e3707e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:b2:91:ac:04:0b:49:3d:84:af:27:9d:8e:
5d:56:c3:88:15:f1:8d:ee:5c:00:51:06:ba:ea:12:
85:d7:83:82:7f:74:73:84:f3:d4:15:30:2f:0d:3f:
15:e6:08:e1:3d:63:ec:8b:57:a2:23:88:99:6b:b0:
32:cc:5b:ec:f5:d4:ca:bb:fd:60:a2:fd:ef:5a:0c:
e0:2e:9b:92:04:8c:0c:3e:07:d3:b4:0a:de:d4:c2:
24:a3:4e:9e:40:43:e8:8b:c9:85:8f:f3:27:86:8e:
6a:08:ea:a8:fd:50:1b:df:94:b9:93:a0:81:d8:2d:
6e:72:ef:43:f2:c7:fe:a9:17:a1:6b:23:f5:bf:d8:
5c:14:a4:82:c0:35:46:d0:23:aa:29:80:e1:e3:2f:
a9:03:5a:fb:00:78:39:86:b7:1c:1b:cb:31:96:c2:
75:16:91:d7:ce:4c:30:75:58:f6:78:1d:84:09:45:
4c:8f:77:5c:f5:4f:5e:b5:fe:65:6e:87:be:a9:5a:
be:f1:e0:c8:27:f7:37:31:c2:38:b9:86:fb:84:bc:
38:cd:b1:06:2a:8d:4b:72:01:20:ed:d3:4d:a5:37:
c9:03:9f:cc:42:7f:a7:73:46:7a:ba:b0:0d:db:58:
ff:ed:af:da:93:9e:fc:e5:87:28:d7:9e:74:a9:d8:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:B9:FD:1B:25:77:B8:53:3C:3E:C1:BE:ED:68:F0:9E:37:07:E9
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:8e:39:4d:0b:5d:d6:51:e2:a6:7d:25:90:07:f4:bf:18:
66:05:80:9b:4b:73:51:fe:ef:a6:36:53:cd:48:d6:1f:54:e3:
62:c0:b0:b3:8f:dd:61:8e:3e:5d:37:8b:b8:ff:ee:83:7d:ee:
6f:e9:68:e3:86:d5:33:c5:31:80:b9:ec:15:1e:32:4c:19:3a:
a0:91:07:45:58:ac:24:15:7f:ab:b3:9d:96:a7:9c:cc:04:b9:
dc:b9:ce:87:c0:74:c7:f6:40:4d:97:f2:92:52:1c:a9:45:90:
5f:c5:21:01:30:59:ca:fa:21:fd:ed:9b:41:e2:dc:d9:ec:00:
70:83:eb:f8:d8:32:b5:e2:2f:d3:82:3d:46:85:66:7c:4b:fd:
b9:34:9b:c4:6d:5c:69:2a:5a:50:4c:ca:d9:3c:dd:ea:4a:d7:
5a:f2:a3:21:64:83:e1:5d:f6:47:e3:5e:f4:e9:b8:d9:fa:e3:
8b:8d:cc:ea:b2:af:cf:88:a5:03:0e:7a:7e:d0:a5:55:b1:49:
a8:89:63:18:d7:6e:4c:83:ec:2c:41:aa:a8:33:a7:0f:fd:15:
d4:e4:4f:cf:f7:58:86:f5:5c:e8:24:b3:f9:50:94:fd:0e:c3:
c6:06:7c:e7:fa:b4:28:d5:53:47:a1:30:46:6a:62:b8:74:29:
a2:f7:b2:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzsAfqAYQyXI0Tl4r8Jr1t+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky
MmNkMmEwHhcNMjYwMzE0MTEwMTE4WhcNMjYwMzE1MTEwMTE4WjAzMTEwLwYDVQQD
EygxY2RkYjlmZDFiMjU3N2I4NTMzYzNlYzFiZWVkNjhmMDllMzcwN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E+ykawEC0k9hK8nnY5dVsOIFfGN
7lwAUQa66hKF14OCf3RzhPPUFTAvDT8V5gjhPWPsi1eiI4iZa7AyzFvs9dTKu/1g
ov3vWgzgLpuSBIwMPgfTtAre1MIko06eQEPoi8mFj/Mnho5qCOqo/VAb35S5k6CB
2C1ucu9D8sf+qRehayP1v9hcFKSCwDVG0COqKYDh4y+pA1r7AHg5hrccG8sxlsJ1
FpHXzkwwdVj2eB2ECUVMj3dc9U9etf5lboe+qVq+8eDIJ/c3McI4uYb7hLw4zbEG
Ko1LcgEg7dNNpTfJA5/MQn+nc0Z6urAN21j/7a/ak5785Yco1550qdhv3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzduf0bJXe4Uzw+wb7taPCeNwfpMB8GA1UdIwQY
MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt
ZDAyNGFkNGI3YmViLzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi
LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqCOOU0L
XdZR4qZ9JZAH9L8YZgWAm0tzUf7vpjZTzUjWH1TjYsCws4/dYY4+XTeLuP/ug33u
b+lo44bVM8UxgLnsFR4yTBk6oJEHRVisJBV/q7OdlqeczAS53LnOh8B0x/ZATZfy
klIcqUWQX8UhATBZyvoh/e2bQeLc2ewAcIPr+NgyteIv04I9RoVmfEv9uTSbxG1c
aSpaUEzK2Tzd6krXWvKjIWSD4V32R+Ne9Om42frji43M6rKvz4ilAw56ftClVbFJ
qIljGNduTIPsLEGqqDOnD/0V1ORPz/dYhvVc6CSz+VCU/Q7DxgZ85/q0KNVTR6Ew
RmpiuHQpoveyTg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:18:17 2026 by rpki-client