Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: bBNpmxFESPiTirgx6m0u1btABjjOHlcah7/13BN7P2U=
Subject key identifier: F5:67:B2:55:8A:E3:C0:E7:61:69:02:70:B4:3E:4F:85:A0:D4:B0:02
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019D386578FB1809FD13185638EF587FE967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: A-kESQFgScEyFER7yotzjt_cbmI.roa (hash: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=)
2: jpSNAjoIWW5o1dEpckRnfaNZUDo.roa (hash: kdIhMxsuZJUQm1IC9DaIIdMEPEig2DJxhqMNYmLbqDc=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: s6XmXIFrgQe0NgL6lGGYAwDMRNMIw9saHm6F0GUBCIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:78:fb:18:09:fd:13:18:56:38:ef:58:7f:e9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=f567b2558ae3c0e761690270b43e4f85a0d4b002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:7a:0c:c8:88:1b:34:fb:7f:b2:27:2c:1d:
c2:58:a6:9d:2d:9a:a1:4e:3f:03:de:3a:0a:15:1b:
ce:50:8b:15:13:7c:c2:2e:57:89:d8:42:a8:83:1f:
8a:d6:21:c7:3d:f1:51:b1:55:f0:cb:04:58:4a:9a:
c6:ca:7b:0d:5b:fd:17:31:e6:a5:e6:28:9b:fa:cd:
19:3e:f3:de:87:be:6c:62:b3:c9:8c:d0:03:24:0f:
e6:c7:b3:1e:42:ca:65:09:b2:cc:34:2a:c6:ca:11:
01:2d:77:06:2e:2c:58:c6:e7:1e:a2:fd:c7:05:b6:
5c:40:bd:c1:16:ec:79:9d:fa:21:7c:37:db:b5:8e:
2d:1a:8e:88:65:0f:b9:81:2e:26:19:e0:0c:3d:e5:
f2:92:80:4d:94:f0:77:2d:bf:58:fd:2f:7f:3f:2f:
b3:98:65:9c:31:13:2f:7a:34:62:28:ee:e4:2e:02:
6c:96:2d:c9:a5:82:14:b6:78:5b:87:b5:cb:15:88:
24:ad:4e:78:4a:af:be:37:f0:b1:ca:3d:ee:3f:52:
a2:c3:e0:2b:d9:cd:47:73:91:5f:0a:cc:2a:29:75:
93:72:1d:d4:64:1f:cd:6b:7e:1f:bb:5d:02:dd:97:
ed:88:46:c3:96:55:ee:32:01:43:f5:a2:24:1a:29:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:B2:55:8A:E3:C0:E7:61:69:02:70:B4:3E:4F:85:A0:D4:B0:02
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f1:ba:4f:93:9d:f7:19:4b:83:e7:45:30:68:87:f2:97:a2:
4a:c6:cd:9f:3a:d5:c1:8e:6f:cd:04:9c:46:e7:2e:32:46:37:
a0:91:e4:f0:d4:fb:eb:da:66:3b:e8:d0:68:0f:2c:df:02:9a:
c3:23:39:f1:5b:34:ce:53:8a:e6:f9:a7:3c:17:8a:b0:8e:09:
c1:c9:40:20:94:6f:5b:89:b3:f6:0f:7f:94:70:38:93:0f:a7:
c0:6b:3b:06:f6:03:58:8d:11:ae:31:81:9a:4b:b3:ba:64:bc:
5a:6a:02:7f:b9:80:44:8a:d4:54:fe:29:40:1d:76:c5:2f:b5:
e3:33:4b:a5:69:96:58:64:f0:45:21:e0:a4:6b:9a:00:3e:48:
d9:a2:6f:da:b4:2c:0f:90:6e:44:3d:b3:e1:ed:2c:78:df:09:
9f:24:e2:af:9b:e0:75:69:d5:b9:60:c1:bd:b7:58:15:7c:1b:
9d:bd:3e:d6:72:5e:13:80:ab:63:fc:88:3b:ef:76:c2:d2:3a:
29:38:c7:9e:b4:31:69:59:f4:b6:d6:f8:eb:fc:6c:45:b8:31:
89:21:09:fe:38:b6:d1:14:df:16:6d:09:4c:f7:24:5c:57:1f:
6b:6e:3b:2e:b8:5a:33:47:71:e5:ee:f8:07:22:68:0a:ba:32:
c0:0e:d7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:29 2026 by rpki-client