
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: h8xGHdDZQJB+NYCt5EcDic/HEktdYsrifMXBqwoo+R8=
Subject key identifier: E5:5A:C7:9A:DB:E5:35:3F:A2:DC:5E:22:6C:3E:A2:C7:8C:5D:B9:31
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 01A14FF58A7684DBE0013BEA54ADDE4D7543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 0BC5
Signing time: Sun 18 Oct 2026 17:00:54 +0000
Manifest this update: Sun 18 Oct 2026 17:00:54 +0000
Manifest next update: Mon 19 Oct 2026 17:00:54 +0000
Files and hashes: 1: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (hash: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4=)
2: C-zWCgwAxUcB5PR-BZP8SY0imsc.roa (hash: tH6y5VegxHL/FivasKZlqGMSC8JeobbFVY2ZXp/Rp9w=)
3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: /UlShEj75hHxxRMPL39I5PVih86RqSLa0dAeCaipQAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:f5:8a:76:84:db:e0:01:3b:ea:54:ad:de:4d:75:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: Oct 18 17:00:54 2026 GMT
Not After : Oct 19 17:00:54 2026 GMT
Subject: CN=e55ac79adbe5353fa2dc5e226c3ea2c78c5db931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:fd:72:13:e1:ca:a4:26:e6:49:eb:bb:6e:
15:c3:1c:dd:21:70:2e:cd:2e:c4:f4:5d:ec:42:56:
1b:cc:4d:1d:4c:73:69:cd:9a:8a:51:5b:49:ad:94:
fa:04:50:f4:6d:c4:fe:f3:4d:2f:da:57:cf:e7:d9:
ca:74:48:fb:51:8c:a3:6d:72:e0:9d:a2:74:48:78:
1e:b1:73:fa:f2:a5:81:4e:06:3f:b7:8c:2d:d6:7c:
dd:6f:6a:0f:07:66:bd:fc:84:49:db:57:03:a3:ea:
1f:03:13:4f:f6:1a:7b:f1:5e:a8:81:6d:61:39:b3:
bf:00:88:b9:62:83:be:8d:37:81:db:1b:2d:75:e2:
af:79:7d:17:49:7a:e1:04:28:45:1d:16:a6:04:41:
01:45:ee:6b:92:06:2f:b5:7e:73:3f:2d:c4:9a:e6:
fa:2f:05:9b:96:68:5b:11:04:83:16:19:63:11:b4:
11:df:08:fc:8f:0c:d4:3a:82:64:fa:cd:36:16:a1:
c2:d3:d2:56:b4:e9:ba:df:df:a9:5c:2b:55:ac:9e:
4a:c8:65:b0:f7:c0:cc:ca:33:4a:57:37:2a:82:61:
8a:23:6b:9b:b5:31:b2:48:42:08:aa:40:c7:8b:0e:
43:39:6e:2f:70:b0:07:cd:04:98:03:49:91:1c:7b:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:C7:9A:DB:E5:35:3F:A2:DC:5E:22:6C:3E:A2:C7:8C:5D:B9:31
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:3f:13:ea:10:c7:66:5a:5f:ef:5b:aa:3b:78:0c:d3:73:
0c:4e:34:b4:40:04:78:1a:ab:5b:89:cc:73:01:4e:5d:15:60:
93:50:4b:ab:a8:2c:25:84:87:13:b7:2c:37:05:c5:80:00:30:
b9:3e:c0:e2:fc:4a:cf:0e:6a:98:06:27:7f:41:21:ae:78:56:
99:19:f0:01:3b:c6:e1:61:82:d2:f4:4c:de:b2:e6:89:d8:9b:
aa:84:e1:36:ca:4e:f4:03:d5:d7:bb:2a:3a:c2:a6:54:a5:73:
e4:87:36:2d:b4:75:8b:94:d3:7b:10:1b:8e:47:30:21:79:ba:
04:8b:92:9b:7f:20:b0:1b:0a:28:a6:f5:4f:d7:4e:6f:6a:e4:
08:e4:f6:37:38:89:fe:39:57:4b:00:b9:5f:c5:3d:7c:5d:d9:
97:33:65:df:3c:f6:49:bd:d5:d8:5e:8f:77:19:1c:53:97:8c:
15:60:b7:0f:e8:74:d2:db:a4:44:40:b3:d5:ea:44:78:c7:ca:
1b:7e:90:00:ee:f5:29:3f:8e:9c:55:d9:4f:50:9f:0b:53:d1:
9c:cc:33:c5:e5:5e:be:7a:de:10:dc:fc:25:54:2c:a0:5a:08:
03:ad:d0:30:bc:9a:24:82:4c:97:8d:96:98:6e:f7:26:75:e2:
8c:eb:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:38 2026 by rpki-client