Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: xdZawNeF1lCTHDJ/ynwIsR+K4YXYZHUSGdCoj+kTdfo=
Subject key identifier: 60:9C:E9:45:32:CB:67:E1:61:C9:0A:04:AE:75:86:68:5F:93:D0:3F
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 01A0BE7950BC67F48EF678DC6FB69EEEB701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 1A6A
Signing time: Sun 20 Sep 2026 11:00:16 +0000
Manifest this update: Sun 20 Sep 2026 11:00:16 +0000
Manifest next update: Mon 21 Sep 2026 11:00:16 +0000
Files and hashes: 1: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
2: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
3: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
5: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: u71nlqA6MHrtRFDZynl46y8GMOr9CfvbfwpJwOsfSw0=)
7: qE8RROX_Abt_X7_dq6_I4v_syO0.roa (hash: j+dQK6D8sHBmyU5YdzKLTUPT+QDZeyjIoFCaIOac7LY=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:50:bc:67:f4:8e:f6:78:dc:6f:b6:9e:ee:b7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Sep 20 11:00:16 2026 GMT
Not After : Sep 21 11:00:16 2026 GMT
Subject: CN=609ce94532cb67e161c90a04ae7586685f93d03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:c3:7f:0a:a9:7c:7d:3f:4b:4f:78:8a:84:
f4:35:7c:89:3f:35:a6:22:82:82:c0:ca:0f:52:44:
f1:a9:1c:d4:3a:36:82:7f:74:2d:ff:72:b1:73:31:
32:14:4e:f4:f7:96:a5:ae:7a:3d:ad:ce:a7:fc:4c:
a1:0b:ac:cd:ac:98:6a:31:00:79:26:1c:ff:31:1e:
ef:90:f8:f5:f2:30:bb:1f:0f:fa:03:a5:53:83:01:
0a:7c:8a:4b:80:3f:82:e6:74:42:2f:3f:ad:39:30:
f9:7b:bf:d2:2c:a6:59:ee:78:8a:f5:9a:8a:7d:71:
cf:dd:01:34:86:7d:70:15:56:c3:ad:79:c7:cf:bb:
31:33:a7:98:14:97:1f:cc:18:d2:de:a3:e4:eb:0a:
9b:8e:41:9f:4c:65:60:cd:d5:5d:84:8b:6b:71:ca:
2f:5b:2f:a7:a9:e1:d2:2d:43:3e:71:0a:32:40:97:
52:60:17:41:a7:d6:36:08:5b:df:de:e0:7f:c8:33:
17:c2:c0:3d:52:c9:53:5c:4a:21:c9:76:9d:56:43:
89:6d:8e:c3:9a:6e:b1:89:11:6e:e3:a9:fc:96:a2:
dc:bb:bf:9f:87:82:74:9b:d0:60:d5:1d:da:10:7b:
71:86:23:5e:ea:0b:8b:f0:b6:7c:e9:81:31:9f:e7:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:E9:45:32:CB:67:E1:61:C9:0A:04:AE:75:86:68:5F:93:D0:3F
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:69:c6:ab:56:46:23:f2:82:c0:d2:09:be:fb:97:80:2b:26:
18:68:0b:09:06:f5:e8:c9:07:31:f7:50:d9:aa:e0:2f:71:db:
cb:48:02:35:5f:cd:ff:8c:5c:20:42:56:40:7b:44:c4:1b:0f:
10:69:4e:76:60:a9:f9:78:13:10:a0:64:d8:99:ff:48:87:b2:
8b:b5:5c:c6:be:5c:a6:0a:67:ad:76:8a:89:7c:90:12:c0:1d:
e8:ae:00:ce:6a:1f:24:4d:c4:33:c1:cf:7d:ae:b6:d1:35:69:
a5:f3:88:df:ec:e7:65:fa:2b:89:7d:39:b9:02:de:2e:53:f3:
52:2e:b4:29:09:9e:77:ec:80:1c:97:d9:99:85:aa:7b:49:ff:
26:26:83:13:8b:51:5c:13:7b:f6:b0:c9:c4:01:5a:14:cd:7e:
3a:f0:36:ed:8a:6b:b6:37:3d:4f:d0:04:50:c2:09:34:79:31:
7f:6c:95:bd:88:68:a0:6d:66:3c:36:9f:7b:09:98:d8:d2:36:
2c:05:2f:3e:d3:db:ad:d5:da:6f:c2:1c:99:a8:36:11:7a:c9:
45:81:16:e5:09:77:92:d4:b5:11:37:ab:a3:57:e2:7a:c0:b3:
85:c0:49:90:c1:9e:7d:65:66:59:66:8f:e4:46:54:42:f2:c7:
17:03:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:47:37 2026 by rpki-client