Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: moj9qBxNv5YEJ4bOgGkhWUCqzdoN3EZXS5gAHaG7m6M=
Subject key identifier: 02:C2:91:CF:F6:A1:F7:9A:FC:34:C6:BE:9D:DC:30:8D:91:85:69:7A
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019EC148844C7C44B9C1E7B8B67F97C88453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 1189
Signing time: Sat 13 Jun 2026 14:00:15 +0000
Manifest this update: Sat 13 Jun 2026 14:00:15 +0000
Manifest next update: Sun 14 Jun 2026 14:00:15 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: uoLjLESRDHj223X7psSXerxPrwYR0fnWXNyce9M0Iqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:84:4c:7c:44:b9:c1:e7:b8:b6:7f:97:c8:84:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jun 13 14:00:15 2026 GMT
Not After : Jun 14 14:00:15 2026 GMT
Subject: CN=02c291cff6a1f79afc34c6be9ddc308d9185697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:79:47:cd:20:37:c1:12:8e:91:ba:c6:6a:
61:31:b6:da:e1:f2:93:69:04:b8:80:2a:4f:0b:f3:
88:99:22:4a:c5:67:d0:13:52:be:c2:50:c5:36:e9:
70:b9:09:54:19:f7:dd:f4:05:c2:c8:fd:67:56:09:
e7:5f:5f:44:bb:4f:bb:81:31:58:35:8e:eb:46:64:
4d:c5:1f:7d:6d:b0:bf:7e:82:be:ba:7a:4a:e5:76:
3a:90:ef:0f:76:84:af:e2:ac:89:a7:77:58:7c:f6:
3d:49:ca:8a:5b:1f:f1:12:69:35:df:13:5d:14:e8:
23:1c:a7:07:d5:1b:6a:b6:59:33:b2:52:d9:2c:a6:
a9:9f:43:c9:a2:21:41:d3:1d:fc:54:ec:04:06:5c:
4c:62:5b:ae:34:ba:19:11:10:73:af:4a:59:7f:bf:
6b:fb:1e:40:e2:2d:76:5f:52:c1:ab:c3:dc:27:61:
dd:20:96:fb:a6:a4:00:55:c5:bf:db:07:21:a5:98:
4e:80:32:e5:00:c6:07:3b:af:a3:59:e1:6f:4c:92:
62:5e:fc:4d:9d:60:ff:12:71:29:17:43:7c:91:45:
20:ce:38:5b:29:ad:e7:e3:31:ca:16:08:b3:8d:c2:
ca:1f:31:29:ca:8b:67:1a:0d:5d:37:a8:28:61:3f:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:91:CF:F6:A1:F7:9A:FC:34:C6:BE:9D:DC:30:8D:91:85:69:7A
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:29:78:4e:4f:df:79:48:98:de:1d:53:7b:c6:ca:a1:ca:e5:
65:2e:ea:3a:48:36:04:13:80:24:3d:75:1f:06:13:9a:73:6c:
5c:4a:5f:12:5f:7c:3c:df:18:87:0e:50:56:f5:00:60:dc:63:
13:d8:df:00:1d:fc:72:36:94:f4:a3:02:3a:bd:92:5e:b0:e1:
12:8e:0e:9d:c5:86:5b:7b:84:bb:97:46:b8:4a:ea:73:a5:1e:
2d:b7:41:dd:45:ee:7e:91:3d:c5:64:7d:1f:bd:fa:b1:6a:c8:
e9:f8:07:4a:4c:b8:ef:a5:e5:04:63:28:07:8a:6c:3d:92:12:
83:f2:7b:05:16:76:fe:22:27:3e:f4:98:70:df:ca:87:91:e0:
3b:63:53:99:b0:05:a7:27:63:cc:be:e6:26:69:14:31:95:22:
4a:dd:95:e1:83:9d:e4:57:58:29:73:25:a1:5a:f3:cf:81:e3:
d8:30:04:fc:b2:23:e3:8a:b8:98:70:4f:66:d5:a8:57:41:6a:
0c:da:17:14:e5:84:83:6d:3f:03:72:ca:63:f4:7c:29:bc:b9:
e1:c6:15:53:26:68:a2:2e:8d:8c:38:17:b2:3c:df:e1:45:3c:
5b:34:f7:06:a9:94:0f:72:fb:c3:d3:67:49:a0:ae:21:01:7a:
6f:79:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:19:27 2026 by rpki-client