Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: 638NYJ97Q0Y5RnwFqnO29Bztdypp2L8QNm6+zawZCIo=
Subject key identifier: 81:8C:58:CC:F2:98:E3:7F:60:2D:CC:DE:A9:54:8E:E8:F5:C3:27:3E
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019CAE35F4AC973FD9B4B13DAD969E8D31C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 1076
Signing time: Mon 02 Mar 2026 11:01:37 +0000
Manifest this update: Mon 02 Mar 2026 11:01:37 +0000
Manifest next update: Tue 03 Mar 2026 11:01:37 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: vKqdo/n57k2EpMdsUo525/tj1EK8vJ2SRXgSrgn98+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f4:ac:97:3f:d9:b4:b1:3d:ad:96:9e:8d:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Mar 2 11:01:37 2026 GMT
Not After : Mar 3 11:01:37 2026 GMT
Subject: CN=818c58ccf298e37f602dccdea9548ee8f5c3273e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:65:2b:03:42:75:4c:f0:da:74:79:34:1c:
dc:96:bd:a6:92:c1:c5:f1:a5:a7:0c:c1:ad:ab:34:
f0:18:bc:c6:3f:04:a3:21:e3:9f:67:1d:a3:98:5b:
4b:34:db:6e:65:d1:c3:d0:6e:21:36:56:36:95:2a:
37:ce:a5:23:b8:b5:34:31:35:87:b3:ef:61:2a:c6:
36:3b:e8:21:97:8c:aa:12:89:ce:c0:c6:22:08:0f:
b8:2c:21:45:8e:c5:1f:ee:ec:58:8b:79:18:4c:cd:
ba:87:c1:70:2f:69:7d:df:78:d7:a4:a7:f0:cd:d8:
e1:6e:02:b0:a7:c5:f6:ba:d3:f9:b1:3a:ab:52:e5:
07:8b:bb:e9:a2:1d:9a:3d:fd:43:86:80:20:aa:45:
9f:eb:82:28:8e:72:71:52:6e:a9:27:d5:8d:e5:37:
b8:91:6d:ba:b5:db:b7:81:76:20:70:40:13:87:2a:
37:d7:75:05:41:75:24:d4:98:60:af:7f:88:ad:78:
6e:00:ac:57:16:fc:75:40:63:44:87:f9:c3:1f:ab:
64:1a:73:02:85:5c:6b:46:61:bf:01:dd:45:80:dc:
f5:7f:5f:6f:d3:60:50:8e:e4:30:01:11:13:52:80:
01:67:d5:ce:81:51:b2:f3:a3:2a:d0:92:00:96:53:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:58:CC:F2:98:E3:7F:60:2D:CC:DE:A9:54:8E:E8:F5:C3:27:3E
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0b:bb:5a:e5:2f:7d:98:b7:32:42:2c:b2:b2:ec:f3:cc:23:
35:19:16:84:8b:5c:10:c6:bf:ac:3e:06:8c:33:4a:c6:91:4c:
c5:2e:68:c1:69:f4:e3:06:6c:55:a5:ae:b6:a9:ca:cf:11:b1:
d7:a5:90:88:5a:d6:a9:7d:76:55:7a:60:e8:91:80:10:78:58:
cc:e2:4e:ec:81:da:b8:3a:10:3e:81:0d:af:dc:66:68:7b:e7:
4c:a5:45:00:9e:f2:3d:f6:d7:59:97:9d:ac:ba:ca:ca:81:e1:
40:ff:57:d0:34:96:fa:95:2c:14:ad:b4:eb:62:08:8e:62:59:
fc:2a:69:9b:df:50:d2:8a:3f:c4:27:2f:fe:48:f4:96:7c:5b:
4e:1a:2e:0b:37:0b:32:ac:a9:f7:9b:8e:b5:9b:51:2d:d7:e5:
e3:b9:7b:6c:24:b6:df:0e:a5:c3:4e:f9:8e:51:3d:70:51:e8:
64:26:9e:85:37:92:00:14:66:6a:4b:2f:8c:76:62:7f:b1:ec:
7b:89:c9:e9:1d:41:63:fa:2e:a3:14:02:4e:4a:e6:2f:8e:5c:
77:30:eb:89:6f:06:05:1a:cb:a5:68:67:67:4a:3a:d2:02:fa:
d1:7f:13:f7:bf:a7:ff:90:ed:f3:4f:ac:f6:54:d1:3d:cf:2b:
e9:9d:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:42 2026 by rpki-client