Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier: uy4iT5As9gWqLH84wmN3LJNRz5V0yfMaXWrZX2xmrng=
Subject key identifier: BA:7D:5A:F6:48:A5:12:99:5B:5D:97:91:86:67:C7:CC:E6:AE:22:8C
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial: 019D389BAD7E7ABCA7277B4552E299382102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: Cj8ujoa5KmTTSWCTdwnTGnYwzAk.roa (hash: M+8fZqB3T6uLKV8atcb+P0CXiywaKxIVWcjCJ6STrHE=)
2: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: sP/ibX6jAgiPnVFsDoBMHuaeB7kGXzUZl51q1VLx6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ad:7e:7a:bc:a7:27:7b:45:52:e2:99:38:21:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=ba7d5af648a512995b5d97918667c7cce6ae228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:c1:4d:31:cd:5f:01:5d:88:32:11:64:dd:
16:e8:09:13:d1:4a:59:63:6b:bc:19:6c:64:cc:e5:
ba:2d:9f:5b:5e:b9:d1:34:90:07:86:9a:4f:66:f7:
40:c5:0d:a8:54:df:35:d4:c9:8b:71:2d:e5:4d:23:
23:58:42:6d:8c:77:b7:f2:78:48:d8:dc:d4:a1:ee:
63:a1:c9:81:14:e5:d9:57:8e:a3:32:e0:a3:08:87:
54:db:1f:d5:75:40:e9:5e:cd:d0:c5:ae:5b:65:39:
ae:cf:53:0a:59:84:72:36:4a:e1:dd:f4:8c:56:34:
e8:7a:e3:69:4f:34:ae:f7:58:96:b1:e4:ff:15:55:
ea:59:6d:1d:cd:b1:65:f1:3d:30:6e:47:6c:27:fb:
61:95:71:0c:89:84:4b:4b:1e:9a:8a:0c:01:5a:ad:
dd:c8:d6:51:68:9e:ea:03:ef:e9:d4:2e:b1:18:e6:
cd:3e:8f:38:6e:ad:29:d3:44:06:d9:be:4e:48:7d:
1b:0f:cb:f0:d1:2f:75:4f:2b:39:f8:11:83:d6:e9:
0c:bf:6a:8d:a8:19:92:6e:97:42:04:75:2b:0e:07:
0c:0c:19:ab:f5:e3:59:e6:b4:e2:78:db:e1:fe:d8:
b4:08:58:5c:da:bc:b8:b6:1f:78:51:28:98:c8:7e:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:5A:F6:48:A5:12:99:5B:5D:97:91:86:67:C7:CC:E6:AE:22:8C
X509v3 Authority Key Identifier:
keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d7:03:da:64:e9:c7:77:19:d9:a7:52:47:15:4c:71:e5:3c:
d0:41:95:c9:d2:9f:ec:7b:35:44:c2:0f:a6:7f:80:e6:7e:cc:
95:11:cd:28:b6:5a:e8:b2:18:30:80:31:bb:ec:1d:49:99:d3:
e4:98:4c:b2:a0:5f:7f:a2:44:cb:68:04:fe:7a:18:4d:34:09:
3d:67:54:6d:58:34:21:4a:d6:32:c5:4d:49:ca:f3:7e:a0:9b:
ec:7b:46:e7:95:57:90:44:12:d6:00:eb:f0:29:3c:13:b3:38:
9e:41:9b:59:62:2c:83:1a:d5:73:a4:2a:16:5f:9b:cd:87:5c:
08:d8:8e:9a:81:57:74:d8:45:f6:f0:6c:7d:38:7d:7f:dc:50:
19:1b:64:c3:06:34:24:c8:d0:18:9f:fd:eb:e4:18:ba:f2:76:
12:80:e4:29:62:13:20:1c:ca:d5:a2:94:e7:01:86:2c:1b:62:
33:7f:71:5e:76:b0:eb:3c:47:13:fb:93:a5:b7:7a:49:30:b6:
82:54:0f:ac:61:60:c7:4e:90:e2:6e:f3:d0:5d:09:5d:0e:d1:
70:c2:d2:4d:05:54:f3:33:f7:86:62:62:2d:6f:07:64:31:ec:
46:ee:c6:25:d7:cf:46:20:f7:d7:d9:71:3c:64:6e:43:01:56:
07:92:bf:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m61+erynJ3tFUuKZOCECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDI0ZTI0NWE2NDMyNGE2ODczMWRkMjZmMzBjNjg1YmFh
OGE2NzgwHhcNMjYwMzI5MDgwMDE5WhcNMjYwMzMwMDgwMDE5WjAzMTEwLwYDVQQD
EyhiYTdkNWFmNjQ4YTUxMjk5NWI1ZDk3OTE4NjY3YzdjY2U2YWUyMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysHBTTHNXwFdiDIRZN0W6AkT0UpZ
Y2u8GWxkzOW6LZ9bXrnRNJAHhppPZvdAxQ2oVN811MmLcS3lTSMjWEJtjHe38nhI
2NzUoe5jocmBFOXZV46jMuCjCIdU2x/VdUDpXs3Qxa5bZTmuz1MKWYRyNkrh3fSM
VjToeuNpTzSu91iWseT/FVXqWW0dzbFl8T0wbkdsJ/thlXEMiYRLSx6aigwBWq3d
yNZRaJ7qA+/p1C6xGObNPo84bq0p00QG2b5OSH0bD8vw0S91Tys5+BGD1ukMv2qN
qBmSbpdCBHUrDgcMDBmr9eNZ5rTieNvh/ti0CFhc2ry4th94USiYyH6Q6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp9WvZIpRKZW12XkYZnx8zmriKMMB8GA1UdIwQY
MBaAFD5CTiRaZDJKaHMd0m8wxoW6qKZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQt
NTRkYTA0NjhmZGFkLzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDAyYzEtMDBiYy00MzA4LWI1NWQtNTRkYTA0NjhmZGFk
LzEvUGtKT0pGcGtNa3BvY3gzU2J6REdoYnFvcG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9cD2mTp
x3cZ2adSRxVMceU80EGVydKf7Hs1RMIPpn+A5n7MlRHNKLZa6LIYMIAxu+wdSZnT
5JhMsqBff6JEy2gE/noYTTQJPWdUbVg0IUrWMsVNScrzfqCb7HtG55VXkEQS1gDr
8Ck8E7M4nkGbWWIsgxrVc6QqFl+bzYdcCNiOmoFXdNhF9vBsfTh9f9xQGRtkwwY0
JMjQGJ/96+QYuvJ2EoDkKWITIBzK1aKU5wGGLBtiM39xXnaw6zxHE/uTpbd6STC2
glQPrGFgx06Q4m7z0F0JXQ7RcMLSTQVU8zP3hmJiLW8HZDHsRu7GJdfPRiD319lx
PGRuQwFWB5K/hw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:46 2026 by rpki-client