Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: RoHbNC9lYbdbAS0sOjymNEe0VWMPEa4GKNU90qeUr+M=
Subject key identifier: 3B:79:91:03:65:5F:1F:49:A9:69:F9:56:07:92:82:B5:71:E8:BA:A9
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019FA0727DFAA8B0EE9BB6BF118C6B9BDA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 22:01:25 +0000
Manifest this update: Sun 26 Jul 2026 22:01:25 +0000
Manifest next update: Mon 27 Jul 2026 22:01:25 +0000
Files and hashes: 1: A-kESQFgScEyFER7yotzjt_cbmI.roa (hash: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=)
2: jpSNAjoIWW5o1dEpckRnfaNZUDo.roa (hash: kdIhMxsuZJUQm1IC9DaIIdMEPEig2DJxhqMNYmLbqDc=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: 09b3N0WqAu+ucONv/O5taVAI+ENA6TfQuZ2yeDq1aq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:7d:fa:a8:b0:ee:9b:b6:bf:11:8c:6b:9b:da:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Jul 26 22:01:25 2026 GMT
Not After : Jul 27 22:01:25 2026 GMT
Subject: CN=3b799103655f1f49a969f956079282b571e8baa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:df:5f:4d:43:8a:ad:ac:c4:cd:ef:90:fc:
72:c4:55:7a:96:37:4e:d7:ae:4a:39:18:86:f0:b0:
8a:15:b9:c9:03:ae:b3:03:45:36:e0:45:d3:6e:b8:
12:a7:21:d4:05:69:f9:b5:5c:92:cc:e9:8b:76:12:
ac:62:ef:26:8f:3f:fb:88:82:34:20:97:2b:98:9a:
7a:37:55:13:4f:a9:19:e5:a1:2b:94:97:9d:ac:69:
61:6e:23:8a:fb:aa:31:18:c0:86:95:ea:a1:fe:24:
c0:96:ce:32:59:21:d1:86:ec:8c:61:02:e2:39:62:
d9:82:fd:f9:79:19:0c:d2:1a:a6:cf:5a:c8:d5:fc:
9f:4b:d3:3d:98:00:5c:12:b0:43:40:36:90:42:05:
d8:86:a0:d7:3b:b8:a2:b7:3b:8f:d1:3a:98:be:a2:
cf:ab:7d:89:b1:11:0e:e5:82:0b:da:34:df:60:70:
16:3e:f9:78:35:fb:fa:1a:89:dc:71:ba:bc:b9:11:
e4:9f:aa:9b:b6:16:54:fe:2d:e7:8c:80:63:a6:c6:
4b:31:5e:ec:26:58:55:65:71:15:12:d4:d2:f0:fd:
64:2c:cb:e5:88:8a:a3:5a:99:48:de:9d:4a:c1:18:
19:d0:1d:68:eb:3c:cb:9f:fd:0c:05:4f:b9:5a:47:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:79:91:03:65:5F:1F:49:A9:69:F9:56:07:92:82:B5:71:E8:BA:A9
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b4:56:77:6f:7a:ee:41:67:15:d9:8c:09:5a:3e:d3:b8:33:
a6:e5:ea:71:d7:de:35:98:ba:4d:f3:ca:cf:b2:f9:20:d2:cb:
ff:01:af:8c:f8:85:3f:3a:62:0a:3b:e8:ae:9d:1f:36:53:8c:
40:22:71:ae:cd:72:23:f5:b4:3c:7b:c3:34:cf:52:a1:22:81:
a3:1e:fd:c1:40:a0:d8:47:9b:e9:d0:85:db:3a:75:80:8a:31:
f1:14:97:8c:9b:f0:98:5f:2f:aa:88:a7:ef:96:d6:e5:5c:7c:
6e:ce:b6:6e:49:7f:b8:e2:db:68:36:fa:ae:23:23:73:bd:70:
55:a4:5a:17:c2:38:80:d6:73:d3:bc:86:42:2c:a5:05:6e:58:
d9:95:db:82:68:c1:81:6f:ea:b0:ac:dd:ff:8c:ba:03:05:f2:
c4:f0:f6:20:3c:f6:f9:19:b5:15:07:8f:95:44:2c:5f:52:74:
09:e4:86:19:51:2b:cf:1a:ab:c8:0e:07:37:ea:d9:20:11:68:
b8:11:fc:30:e1:3e:80:62:b8:76:b7:c3:7e:db:c8:02:f7:d3:
4d:66:5b:d9:20:20:9d:2e:2c:89:80:fd:fe:da:5b:b6:b3:30:
4d:7d:93:dc:a0:36:38:6c:ce:62:1f:d9:02:a7:e7:f2:8b:36:
b6:75:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:40 2026 by rpki-client