Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: jKbPMdaLoKMBI90TYgKDNEPWz40JP04oDpPuNBQxTHo=
Subject key identifier: A3:83:3E:01:92:2E:CD:4A:0F:D4:DD:8F:03:CF:38:25:29:04:36:51
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019CAC467F3AB6782353D9AA7D5628AEBB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 1075
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: ao068c18YUuk6uu0bMaT6SdSJ9w2dsrG+vAqGCujB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:7f:3a:b6:78:23:53:d9:aa:7d:56:28:ae:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=a3833e01922ecd4a0fd4dd8f03cf382529043651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:cf:f3:2c:21:e9:f4:66:2b:5d:fa:68:d9:
b7:90:84:08:5b:7c:d2:de:af:65:af:ce:9a:2b:0b:
22:07:7d:ef:fb:9a:43:fd:3f:b6:3b:a9:d4:d1:ce:
94:7c:91:10:78:1a:2a:49:72:ac:42:5b:59:7d:8e:
b9:0a:8f:9d:86:1a:29:40:0b:c2:03:ab:00:9c:d7:
9f:17:c0:57:81:f1:00:da:ce:67:49:a7:3d:8a:c9:
1b:ac:da:c1:e4:1e:7b:43:fc:3e:64:a9:4d:b1:35:
65:b9:19:ff:78:06:f1:c5:5d:08:0f:d7:69:0f:92:
e0:dd:8d:57:a0:7b:88:8e:98:b1:5e:36:64:e7:46:
0f:8f:cf:46:16:a9:43:41:a0:38:59:4d:1b:96:c5:
c1:e4:71:42:cf:f9:e1:e3:f3:36:f1:79:5c:ba:21:
43:ce:23:a8:73:87:da:66:6a:f0:4b:4d:37:16:c2:
9a:ca:69:e9:7e:61:90:73:2f:ff:d4:01:84:44:30:
f7:d3:68:df:8b:39:e8:99:b6:e7:f4:03:e4:9e:9e:
3d:ef:80:77:24:31:3d:e8:7d:63:a1:2b:3d:cd:70:
bd:d4:54:9a:9a:04:74:3d:75:64:09:bf:a8:71:30:
a5:9c:34:bf:10:bd:b6:41:b0:ef:8c:a6:5e:d1:6c:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:83:3E:01:92:2E:CD:4A:0F:D4:DD:8F:03:CF:38:25:29:04:36:51
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:34:3a:55:8e:b9:9a:3d:a8:98:af:07:4e:59:d7:b1:f0:03:
65:32:88:45:68:d9:8d:34:a8:42:04:68:60:a3:41:3f:55:7d:
c0:f0:7b:d6:20:2c:15:1c:03:81:80:8d:0f:54:39:67:36:8a:
5b:d0:59:99:16:f1:68:fd:10:84:3f:9a:ab:6b:4e:89:4e:63:
d6:3b:5d:b1:6d:53:95:c4:3f:9c:80:eb:b1:3e:dc:44:45:c1:
95:52:85:10:17:81:0b:56:7e:38:23:45:7c:b2:c8:9f:b5:df:
a0:02:94:0c:f3:06:8b:12:af:c0:3d:47:52:fe:d5:51:1c:cd:
2c:31:fb:39:38:ae:da:f7:1b:62:7b:5e:a5:f0:53:1a:57:29:
57:5c:49:17:de:b2:53:f6:ee:8b:6d:c7:46:7a:a8:87:76:21:
c9:6e:10:f2:b0:ee:00:2b:f8:55:37:45:fa:62:65:c3:53:f4:
b8:47:5a:95:87:a5:d6:de:ae:70:c5:a3:b9:ad:f0:25:3b:49:
9b:b5:1e:26:6b:b1:90:eb:2d:8a:14:02:cb:92:67:5c:30:12:
c4:84:dc:51:f6:b5:e9:5e:b1:72:84:fd:54:8a:7c:79:b4:0b:
d2:65:55:4b:61:ad:a4:e7:0e:35:12:f4:b9:ae:ab:19:15:67:
49:ac:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:37 2026 by rpki-client