Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: 1IKLXhh/IJiHSkQqcG4UlZ3DBduE2qIan1lNrjNXvEU=
Subject key identifier: BD:84:16:6B:62:37:DE:91:48:16:F8:72:EB:3F:2F:92:9D:C3:16:FD
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 01A13F02E299DA2AD374E40A8313AFCBC8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 12D4
Signing time: Thu 15 Oct 2026 10:01:56 +0000
Manifest this update: Thu 15 Oct 2026 10:01:56 +0000
Manifest next update: Fri 16 Oct 2026 10:01:56 +0000
Files and hashes: 1: bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa (hash: ebBDlPRlXWyLq2KbuwNyF2wojOacfcKBKPPYOJJnz0M=)
2: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: UnKAKNqKlcByin5BjOeoRb9aSRo3j0NEFamO/VLTYq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:e2:99:da:2a:d3:74:e4:0a:83:13:af:cb:c8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Oct 15 10:01:56 2026 GMT
Not After : Oct 16 10:01:56 2026 GMT
Subject: CN=bd84166b6237de914816f872eb3f2f929dc316fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:fd:e7:61:f2:f0:52:9c:83:cb:45:d2:0c:
04:da:eb:f2:9a:6a:93:f7:10:50:9e:1c:7c:72:3e:
98:d4:f4:cc:ae:e0:74:83:ad:4d:5a:3a:89:59:40:
40:e3:58:91:d3:c5:81:a7:f1:99:a1:fb:34:27:11:
4e:bd:ec:e8:a4:58:0f:44:6b:d2:85:82:37:76:9c:
bf:de:5a:fa:a8:b5:1a:1d:89:44:28:bf:71:ef:6a:
2d:03:92:75:1e:2a:56:89:21:36:0c:6e:d9:ab:c2:
09:20:85:cc:87:b1:44:7e:6b:3a:0f:9f:fa:3b:2a:
ee:ca:46:d5:da:86:21:b1:4d:41:f6:bb:ca:ef:3e:
8c:74:8a:68:13:8f:1d:77:41:49:28:21:08:51:33:
5e:a9:a0:6c:98:95:f1:a3:35:b8:89:84:cc:0a:27:
d0:83:5d:3f:f4:08:19:4c:94:2a:ef:c5:49:32:1c:
0f:30:22:cb:2e:c3:b5:41:b2:0b:c1:f9:0e:83:05:
bf:b6:59:c0:6b:28:f3:94:a8:d6:9a:24:20:0f:da:
2b:8d:4a:16:af:bc:b1:66:51:c5:87:a5:33:d7:d6:
0b:f3:e4:50:90:f0:81:d4:f0:2c:66:86:fe:d8:2f:
dc:00:55:f0:9a:48:ee:16:35:65:1b:c8:a0:dd:85:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:16:6B:62:37:DE:91:48:16:F8:72:EB:3F:2F:92:9D:C3:16:FD
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d7:be:f1:1b:8e:24:6b:28:51:f9:27:c5:0a:f2:eb:5a:d9:
b9:2f:f0:ab:65:57:2f:4d:2b:bb:f1:0a:32:fb:10:ad:2c:83:
4f:f5:45:41:77:c4:55:37:28:d7:b6:d9:e1:61:66:53:1e:5b:
c0:ee:f7:1f:6a:fd:a1:d0:e7:3b:10:bc:7e:0e:0f:7d:d4:54:
dc:7d:f9:87:de:f6:e8:bc:d0:73:f4:65:e3:b6:60:db:e7:4d:
af:8b:ed:c3:25:91:7a:4e:3f:05:de:ef:3c:b7:36:ec:8c:c0:
95:ed:90:ac:1d:e0:73:ec:55:fe:ad:0e:74:7a:a4:71:9d:ba:
37:ed:26:37:85:99:e5:24:b8:01:b2:1e:64:77:e2:88:46:ac:
48:14:15:23:dc:1f:41:93:c5:b3:25:e0:cb:94:a4:f5:20:18:
c3:80:84:8e:76:2e:f4:6f:a6:56:0d:2c:c7:f1:ea:e1:b3:ed:
3c:99:9d:7c:8f:7b:b4:89:2c:3d:61:35:82:1b:f2:bf:a1:ac:
34:ce:00:26:a6:80:c6:91:99:cc:da:86:06:92:01:a7:84:82:
4b:4f:47:db:f5:0a:a0:05:10:51:83:b6:37:8d:18:5b:44:4e:
5c:4e:9e:19:15:66:59:6e:68:12:1f:b3:ab:03:cb:b4:ca:48:
93:e0:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:00:51 2026 by rpki-client