Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: fN5qk8PC1H0A56B5qTwB3/2Uag1CLCUSfJ4WcsqS9gA=
Subject key identifier: 6A:AA:0D:A5:47:E8:2B:DE:FC:F4:99:10:3E:AE:86:09:9C:2A:B7:78
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019D9DAD3E7620302D83CF4455EB5D5485FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 10F2
Signing time: Fri 17 Apr 2026 23:01:09 +0000
Manifest this update: Fri 17 Apr 2026 23:01:09 +0000
Manifest next update: Sat 18 Apr 2026 23:01:09 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: 1H8v8rfC4ZWS31Ui2Z6TRTU71kY6HtmDtFlaZTWomXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:3e:76:20:30:2d:83:cf:44:55:eb:5d:54:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Apr 17 23:01:09 2026 GMT
Not After : Apr 18 23:01:09 2026 GMT
Subject: CN=6aaa0da547e82bdefcf499103eae86099c2ab778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:4a:40:22:ba:22:37:a6:89:83:2d:61:6c:
c6:ba:9b:96:3e:90:71:76:d8:44:43:1d:2a:e7:dd:
1d:f6:57:fb:ad:bf:d0:af:b0:83:a2:aa:60:c4:43:
2a:5c:8d:5e:7b:0d:30:c3:33:4c:cc:7a:49:64:ea:
14:91:73:30:51:08:2f:d6:8f:37:a1:4d:10:54:93:
09:79:3b:ad:02:55:21:a7:bf:5c:11:c0:e6:dd:cd:
65:cd:68:86:67:cf:98:18:76:1f:69:50:56:bf:7e:
23:a7:98:2c:4a:97:33:6d:fd:4e:3a:4d:70:c2:bb:
7f:69:fd:f4:b5:96:1f:23:33:61:d7:ec:15:57:29:
b5:fd:dc:d8:61:63:bb:68:8a:bb:82:4a:1f:af:37:
f4:10:51:84:8d:65:21:66:19:17:1f:c9:6b:74:a3:
eb:f0:18:3c:55:4c:42:ac:6f:ba:25:ec:5f:65:39:
75:98:11:25:7c:fa:94:6e:14:15:db:e7:b9:3f:90:
1f:d3:be:1f:5f:de:f5:81:12:0c:3a:aa:a8:e6:65:
2c:f1:bf:f9:e5:60:9e:cd:56:f1:22:b2:a6:17:fe:
b6:c1:e3:de:f2:2a:97:38:46:b1:51:68:eb:5a:cf:
eb:7a:2e:36:15:74:70:b8:2d:f9:e0:61:b0:15:f6:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:0D:A5:47:E8:2B:DE:FC:F4:99:10:3E:AE:86:09:9C:2A:B7:78
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:58:57:2e:a5:24:41:ed:d7:a1:a7:cd:fe:bb:a6:a2:fc:
ff:8d:08:77:08:04:4b:bb:5f:a2:de:d5:fa:6a:82:ec:dc:ba:
3d:11:89:87:ee:f2:ea:51:be:46:25:c1:78:ed:b3:b3:0c:1b:
d9:ea:cb:7a:60:75:74:2e:1f:e4:31:c3:f1:74:04:92:1e:73:
6f:1e:ba:40:44:4d:d6:eb:d4:73:d4:f9:8f:01:11:68:ad:3e:
6d:bf:71:b5:88:c3:8b:e2:cf:3c:b4:25:c4:2c:37:88:1e:5a:
c1:3e:92:6e:83:16:89:7e:6b:7e:8f:e7:c9:9b:3a:b7:14:bb:
e0:53:2c:7f:3e:db:54:25:0d:c7:d8:3f:6b:c5:9d:d7:d0:6d:
63:88:6c:c2:77:79:50:00:cf:c3:c7:47:e8:37:a7:17:9b:a1:
97:0c:d0:bc:84:52:15:1d:52:69:3d:0b:c5:7d:37:e1:65:bd:
42:66:73:b6:80:01:0d:3c:bd:8f:18:8e:5a:f5:0a:8e:40:2a:
79:d2:6e:e9:58:6a:fa:62:68:9a:50:f4:46:40:fb:e3:ea:8c:
4a:f7:e0:0e:88:7c:17:36:f2:78:6d:66:f9:57:11:db:52:a9:
6e:d2:06:4d:ec:d7:80:1c:a8:21:d2:7b:60:b0:c4:c2:3e:51:
6d:eb:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:39 2026 by rpki-client