Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
File: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft (raw, json)
Hash identifier: k07FlEuPJMEJOxITuRDMPdeFgNUwovILAs6sHXqVEqA=
Subject key identifier: 28:F9:20:1D:A0:99:E5:10:EF:3D:D8:4C:CF:EE:15:7A:36:D6:41:D4
Authority key identifier: 3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
Certificate issuer: /CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Certificate serial: 019D38D2EFAEDE0BD53F01EF480ADAC7FF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
Manifest number: 15C7
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl (hash: ZTeE2xugmXZPNHzLmyahH+W0B//NsdTwIWox3wFEdUw=)
2: yzTR3xr8FfAmGlnLHCuEER5nDus.roa (hash: lCWnS4QZcDJFta+7yyGjqVSAbP1bGrYcZOR4x1RNMos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ef:ae:de:0b:d5:3f:01:ef:48:0a:da:c7:ff:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3d1c21a77a0b0f7f0ce6633e13e0c57bedb08b
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=28f9201da099e510ef3dd84ccfee157a36d641d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:44:12:ca:ee:8c:2b:ad:49:1b:da:39:f8:
13:76:35:30:65:88:73:47:0c:39:d1:9b:37:e9:12:
01:61:78:6a:aa:93:9f:a2:7b:7c:33:58:33:df:f3:
7e:d4:63:d7:4a:a0:80:06:8e:84:9c:27:ad:24:6f:
74:88:91:88:0f:80:c3:eb:59:47:60:f4:c6:59:01:
25:4e:c0:df:1c:16:39:c3:57:46:8f:53:cc:ef:f4:
8c:55:96:2c:00:55:fa:2f:dc:fd:b6:f7:63:b3:98:
5e:e1:b2:a1:46:f1:ab:c3:3d:38:75:4f:81:99:1f:
fa:10:73:d7:b8:7f:7e:50:79:87:3f:68:d8:4b:86:
0f:76:33:f1:b3:23:0b:11:8e:4f:9b:65:54:d4:2f:
b2:16:79:60:27:5b:e4:f6:a4:ad:8b:0f:44:b5:4d:
7b:25:ce:f2:8b:c9:ea:96:77:95:1d:87:ad:d8:18:
1f:69:e3:a4:1b:95:5e:fd:be:25:49:bd:14:6e:65:
4b:70:d2:7b:8b:29:d0:47:68:9f:ef:7d:dc:33:84:
bc:e9:c6:17:94:c8:77:39:6e:5f:d5:0d:fb:e7:cb:
86:22:6e:c3:40:79:71:53:0b:6a:6e:27:7b:b5:c2:
c2:8e:7f:ac:79:1f:2a:0c:4c:17:55:8e:12:8b:f9:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:20:1D:A0:99:E5:10:EF:3D:D8:4C:CF:EE:15:7A:36:D6:41:D4
X509v3 Authority Key Identifier:
keyid:3E:3D:1C:21:A7:7A:0B:0F:7F:0C:E6:63:3E:13:E0:C5:7B:ED:B0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0e9e00-46e6-4863-9320-098f2598e5e3/1/Pj0cIad6Cw9_DOZjPhPgxXvtsIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b4:11:9a:ec:bd:3e:a3:a1:90:e9:9a:80:db:ea:a0:82:95:
18:fd:12:77:a1:59:7a:9e:67:c7:d6:10:eb:9c:a1:b4:f4:19:
73:c6:6c:2a:c3:03:54:ac:65:1a:e1:b3:02:4c:30:56:fc:b5:
1b:5a:bd:a6:5a:7c:24:49:6f:29:3e:a9:c3:0b:cd:31:59:8b:
30:ea:8e:b6:eb:02:73:1f:9b:61:5d:90:83:a0:b5:a2:2b:43:
6d:e5:53:02:6d:33:36:0b:83:9e:6d:75:2e:c7:be:b4:b1:7d:
26:2b:f9:58:cc:49:ff:83:b7:91:60:48:d3:38:88:c2:f8:8b:
f2:ee:bc:2d:c0:71:ca:98:4d:3a:29:8e:bb:47:19:0a:db:9f:
5c:5a:f3:a6:f5:5a:9b:98:ee:3b:a4:00:72:4c:38:74:68:ca:
37:25:5a:a2:2a:5c:e7:e7:75:c1:e4:5c:a6:01:6f:0d:3b:c4:
1d:80:06:19:6f:25:08:70:29:01:e6:27:35:15:6b:51:c0:fd:
b4:41:4a:57:48:42:32:1b:d6:23:10:67:80:41:9c:49:e0:ea:
7d:6f:00:a8:6d:53:37:5d:ea:32:f5:99:c1:d9:99:2f:54:e6:
ee:aa:d6:29:8c:58:03:b5:b3:2a:25:62:b7:b6:13:f3:11:8e:
ed:c1:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:42 2026 by rpki-client