Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: TADOWon832fVvMB7iIvGGupGOMFsvaiO/8UNiaR9xck=
Subject key identifier: 4A:42:76:9D:19:FA:3F:AD:77:A1:67:0B:CD:A6:00:E9:B9:43:67:92
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 019DE8908B481062370229E87AB29523C7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 040B
Signing time: Sat 02 May 2026 12:01:20 +0000
Manifest this update: Sat 02 May 2026 12:01:20 +0000
Manifest next update: Sun 03 May 2026 12:01:20 +0000
Files and hashes: 1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: ltVYGV6YpRyl/CCVoJHZrGNoVuZb0VmnM/pUTThJojU=)
2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 08:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e8:90:8b:48:10:62:37:02:29:e8:7a:b2:95:23:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: May 2 12:01:20 2026 GMT
Not After : May 3 12:01:20 2026 GMT
Subject: CN=4a42769d19fa3fad77a1670bcda600e9b9436792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:04:b2:a1:5a:67:5b:c4:33:a1:7e:b3:94:
5b:4e:c3:74:8c:be:a2:86:a8:00:fe:94:9f:af:16:
8d:09:4b:0c:be:f9:b5:3c:7c:97:b1:85:0d:e8:ae:
99:50:df:e1:fb:dc:2b:bf:9d:3c:0d:1e:65:7b:10:
59:0e:d2:68:bb:0a:75:3c:8b:d6:8a:4b:c7:23:a8:
ce:26:d0:de:d9:bb:9b:05:24:bb:38:3a:78:cd:b2:
01:9b:61:56:52:48:03:52:c3:44:18:a5:0d:28:1a:
34:ec:c8:28:43:f2:6b:b7:34:82:41:00:5b:5d:f6:
d3:e6:5a:62:49:ec:d2:30:8f:be:9a:72:60:41:b0:
6c:17:a3:db:69:6b:fc:07:4d:ed:af:e5:7c:ca:48:
04:fa:07:70:ba:dd:0d:6c:22:da:9e:b0:c1:de:c0:
64:ca:7d:e6:a5:61:48:18:23:4f:2a:f7:cd:69:90:
48:66:11:7a:e4:d2:37:b1:ca:71:9e:db:88:c9:ea:
7d:40:bc:ee:9a:08:fe:43:1d:c1:9e:aa:40:5d:2d:
ff:9a:3d:67:b4:c3:10:87:5a:1c:2e:b3:ba:d7:7a:
29:f4:2d:f5:a7:9d:50:4a:64:b7:e7:42:e1:6c:4e:
3f:38:c2:03:9f:f8:eb:bc:8a:ac:2a:ad:66:55:6c:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:76:9D:19:FA:3F:AD:77:A1:67:0B:CD:A6:00:E9:B9:43:67:92
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a6:76:6c:3a:d8:84:0d:0e:e1:22:e8:6b:5f:24:a9:db:df:
c4:35:10:b0:81:39:c0:4a:f9:47:7b:c9:fa:bc:69:10:d4:40:
13:6f:9b:60:29:fc:32:af:fb:78:d6:cf:fd:47:6e:bf:a8:ad:
ef:a7:18:15:f3:7c:bf:e9:b6:5c:74:bb:ac:fd:b9:e7:8c:a9:
78:09:ac:ca:96:9d:fe:37:50:86:cc:3e:65:9c:65:10:d8:44:
af:f7:be:99:c7:ba:53:83:2b:c4:1f:87:f3:70:98:ac:31:f6:
18:6f:3a:9a:c4:27:75:c3:cf:6b:0a:5b:2b:d9:19:08:1f:14:
e9:ea:80:71:ef:7f:20:e1:5e:7e:5c:27:77:23:b5:5c:d5:c3:
bd:39:45:e2:97:e1:61:38:1f:70:7b:61:5f:d9:ff:56:bf:c5:
91:f4:0b:dc:3f:f1:d7:c6:81:30:b3:11:19:fc:da:08:b0:31:
4d:14:49:b0:15:cb:ce:62:cf:a1:88:54:06:77:e3:31:5e:78:
5b:04:57:fc:20:3f:22:e8:b0:5b:0c:03:76:93:39:cd:0f:81:
d8:83:c5:d9:3e:4c:8e:96:2c:b8:06:f3:fb:86:66:c7:9d:e6:
fa:b7:3a:03:46:fa:40:b1:fa:a8:84:8c:e7:fc:02:4e:80:ac:
73:27:68:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3okItIEGI3AinoerKVI8fTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDI0ZTA4YzU3NjA3Y2FlYmNjMTljODU1MmVhZTJlOTM1
ZTgyZTUwHhcNMjYwNTAyMTIwMTIwWhcNMjYwNTAzMTIwMTIwWjAzMTEwLwYDVQQD
Eyg0YTQyNzY5ZDE5ZmEzZmFkNzdhMTY3MGJjZGE2MDBlOWI5NDM2NzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsicEsqFaZ1vEM6F+s5RbTsN0jL6i
hqgA/pSfrxaNCUsMvvm1PHyXsYUN6K6ZUN/h+9wrv508DR5lexBZDtJouwp1PIvW
ikvHI6jOJtDe2bubBSS7ODp4zbIBm2FWUkgDUsNEGKUNKBo07MgoQ/JrtzSCQQBb
XfbT5lpiSezSMI++mnJgQbBsF6PbaWv8B03tr+V8ykgE+gdwut0NbCLanrDB3sBk
yn3mpWFIGCNPKvfNaZBIZhF65NI3scpxntuIyep9QLzumgj+Qx3BnqpAXS3/mj1n
tMMQh1ocLrO613op9C31p51QSmS350LhbE4/OMIDn/jrvIqsKq1mVWxQcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpCdp0Z+j+td6FnC82mAOm5Q2eSMB8GA1UdIwQY
MBaAFDzSTgjFdgfK68wZyFUuri6TXoLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgt
MzZmZDcyM2EzODBhLzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgtMzZmZDcyM2EzODBh
LzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaZ2bDrY
hA0O4SLoa18kqdvfxDUQsIE5wEr5R3vJ+rxpENRAE2+bYCn8Mq/7eNbP/Uduv6it
76cYFfN8v+m2XHS7rP2554ypeAmsypad/jdQhsw+ZZxlENhEr/e+mce6U4MrxB+H
83CYrDH2GG86msQndcPPawpbK9kZCB8U6eqAce9/IOFeflwndyO1XNXDvTlF4pfh
YTgfcHthX9n/Vr/FkfQL3D/x18aBMLMRGfzaCLAxTRRJsBXLzmLPoYhUBnfjMV54
WwRX/CA/IuiwWwwDdpM5zQ+B2IPF2T5MjpYsuAbz+4Zmx53m+rc6A0b6QLH6qISM
5/wCToCscydoPQ==
-----END CERTIFICATE-----
Generated at Sat May 2 17:21:43 2026 by rpki-client