Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: QiDXjvXNbz6LFcdnWw6s0QDt+Aki8GveTzhl8nX0paA=
Subject key identifier: 1F:E4:04:43:53:84:58:53:DE:69:48:7C:B4:E8:74:B7:48:E5:AF:1F
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 01A101361026FA1977781815751AA4100E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 1A9D
Signing time: Sat 03 Oct 2026 10:01:22 +0000
Manifest this update: Sat 03 Oct 2026 10:01:22 +0000
Manifest next update: Sun 04 Oct 2026 10:01:22 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: /oX7/JBwhOLLMdCGS5eBdaF3cANPVwNkvdAy4nUiqcY=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:10:26:fa:19:77:78:18:15:75:1a:a4:10:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Oct 3 10:01:22 2026 GMT
Not After : Oct 4 10:01:22 2026 GMT
Subject: CN=1fe4044353845853de69487cb4e874b748e5af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:ef:43:45:10:48:3f:f3:b0:81:b2:cb:d8:
9c:b3:ed:3a:18:4e:1a:03:a9:4a:95:2c:53:1d:e7:
0c:9f:2a:20:8e:c1:1a:a6:49:e1:4b:3f:d6:48:40:
b4:18:0f:8e:8d:f7:da:d3:25:9d:65:dd:bd:ad:8b:
88:01:a2:b0:13:a6:6c:54:28:e8:c4:6f:0b:df:df:
c5:91:1d:e4:9a:82:49:6c:37:e7:94:71:5d:8b:73:
aa:1d:ff:76:82:67:be:06:5b:b3:7d:c3:d7:16:ec:
59:2c:ec:a5:2f:93:5b:68:5a:3e:d7:cd:5b:69:dd:
0c:d4:9a:49:bb:96:bf:ee:56:57:02:47:38:cb:55:
96:5c:2b:06:e5:f6:42:1a:e3:b7:24:8a:6d:24:01:
2c:df:be:c3:e6:6e:11:8b:f9:42:fe:69:0a:28:5e:
03:a2:24:80:db:54:c3:cc:8e:36:63:52:d7:d5:6b:
62:a7:92:fb:9c:59:10:be:7a:ed:a4:d0:b9:f6:41:
5a:53:66:4d:1c:9a:77:80:11:4f:a4:08:87:32:55:
d4:58:24:46:d8:6c:79:11:a8:5b:e1:c2:02:92:62:
e5:89:76:02:94:34:3b:36:33:33:01:ec:bf:47:31:
8d:c4:b7:a1:f5:93:bd:79:ed:6c:b0:9e:06:09:b0:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:04:43:53:84:58:53:DE:69:48:7C:B4:E8:74:B7:48:E5:AF:1F
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:f9:e0:a5:ef:19:5f:31:fb:8f:a2:1c:51:81:34:e7:bb:
f5:96:a8:82:fc:d3:7e:f9:51:22:1f:b5:82:85:e9:64:59:55:
21:56:e5:82:d2:11:fb:4b:e7:9b:7c:00:03:e9:33:07:1b:b0:
45:30:d3:f3:0e:f7:4e:4a:e6:00:a0:05:ec:7c:05:04:46:ee:
29:40:59:18:2e:88:ab:16:7c:93:d2:ce:3e:ad:41:bc:e5:a8:
26:da:52:46:ca:57:fc:23:93:73:5b:42:5b:2c:68:90:a3:18:
5e:f5:56:bb:8d:ed:d5:68:77:ba:69:b9:14:19:e4:2d:aa:02:
24:76:c5:70:06:a0:4b:c0:60:70:72:bc:9c:0f:f1:03:93:95:
39:f1:aa:05:1e:46:fd:b7:c1:b3:68:53:f3:4d:7c:3f:18:ce:
36:ce:47:bd:09:c0:20:52:53:ce:6e:f9:d5:b2:90:f2:c6:34:
bf:80:a5:c7:bd:77:42:12:48:43:bb:e3:34:70:31:89:4d:21:
a3:7e:42:f1:43:48:08:16:eb:fc:14:02:21:39:5a:2d:eb:99:
e4:3a:be:b7:6a:75:2e:18:0c:79:bf:9d:d8:25:a8:9f:d4:f1:
47:d0:1a:89:6c:97:35:08:6b:a4:66:7c:dc:43:bb:8d:38:5f:
ab:45:eb:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNhAm+hl3eBgVdRqkEA6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjYxMDAzMTAwMTIyWhcNMjYxMDA0MTAwMTIyWjAzMTEwLwYDVQQD
EygxZmU0MDQ0MzUzODQ1ODUzZGU2OTQ4N2NiNGU4NzRiNzQ4ZTVhZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVLvQ0UQSD/zsIGyy9ics+06GE4a
A6lKlSxTHecMnyogjsEapknhSz/WSEC0GA+Ojffa0yWdZd29rYuIAaKwE6ZsVCjo
xG8L39/FkR3kmoJJbDfnlHFdi3OqHf92gme+BluzfcPXFuxZLOylL5NbaFo+181b
ad0M1JpJu5a/7lZXAkc4y1WWXCsG5fZCGuO3JIptJAEs377D5m4Ri/lC/mkKKF4D
oiSA21TDzI42Y1LX1Wtip5L7nFkQvnrtpNC59kFaU2ZNHJp3gBFPpAiHMlXUWCRG
2Gx5Eahb4cICkmLliXYClDQ7NjMzAey/RzGNxLeh9ZO9ee1ssJ4GCbDUSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/kBENThFhT3mlIfLTodLdI5a8fMB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2L54KXv
GV8x+4+iHFGBNOe79ZaogvzTfvlRIh+1goXpZFlVIVblgtIR+0vnm3wAA+kzBxuw
RTDT8w73TkrmAKAF7HwFBEbuKUBZGC6IqxZ8k9LOPq1BvOWoJtpSRspX/COTc1tC
WyxokKMYXvVWu43t1Wh3umm5FBnkLaoCJHbFcAagS8BgcHK8nA/xA5OVOfGqBR5G
/bfBs2hT8018PxjONs5HvQnAIFJTzm751bKQ8sY0v4Clx713QhJIQ7vjNHAxiU0h
o35C8UNICBbr/BQCITlaLeuZ5Dq+t2p1LhgMeb+d2CWon9TxR9AaiWyXNQhrpGZ8
3EO7jThfq0XrTw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:09:44 2026 by rpki-client