Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: HkS/IuasBScqBGttkaaVMCDt4R+ttN/3GU64TYOX0FY=
Subject key identifier: 76:84:DD:07:CB:54:46:8E:9C:02:B6:EA:BC:AB:BA:72:77:26:1B:B4
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019CAAC68642D4CEBA4C93C89DC5528B87ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 185E
Signing time: Sun 01 Mar 2026 19:01:03 +0000
Manifest this update: Sun 01 Mar 2026 19:01:03 +0000
Manifest next update: Mon 02 Mar 2026 19:01:03 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: WprsOnQnM3j/+cdEg5qHQE2jIypciAPIl75xQY8dn4I=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:86:42:d4:ce:ba:4c:93:c8:9d:c5:52:8b:87:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Mar 1 19:01:03 2026 GMT
Not After : Mar 2 19:01:03 2026 GMT
Subject: CN=7684dd07cb54468e9c02b6eabcabba7277261bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:10:ce:b1:78:92:8e:a0:ac:1c:d4:ad:f3:
4e:29:3d:6b:86:7a:6f:6d:21:47:4e:4a:ef:de:86:
f3:c0:d4:c5:95:c9:43:c6:39:53:54:43:44:12:f0:
8a:be:06:5d:51:1f:d0:fe:e4:55:f1:0f:0b:d9:9c:
79:c3:eb:62:de:ee:99:7e:94:0f:92:9e:18:9a:47:
7e:98:84:bb:16:0d:bd:ec:32:73:f4:15:c9:b1:fa:
cd:3a:14:c8:e8:4d:cc:ca:ff:31:87:70:0a:cc:6f:
56:01:94:e0:db:e6:a9:20:8c:ef:82:7f:1a:9c:c5:
8b:fc:3f:24:48:a9:dc:29:0f:d9:f9:cb:f3:b7:09:
a6:ac:4e:28:97:59:48:23:63:fa:58:ff:9d:09:59:
23:4d:c0:7d:17:6f:01:9c:3f:ca:b2:24:4b:2b:59:
06:79:9b:dd:fe:ba:89:12:b4:0d:f8:98:19:bf:70:
3d:22:26:a7:7b:b7:b9:0e:fe:b0:e5:b4:12:49:6a:
22:62:9d:d4:12:f0:19:ee:80:e9:f9:ac:c7:db:4b:
ce:2c:f0:34:98:26:63:62:3b:00:ec:3e:5f:9d:50:
e2:fc:d2:09:60:11:84:82:dd:cf:e0:8b:3e:c0:d8:
52:18:b6:35:ea:3b:6a:ed:d0:78:f2:51:24:76:a5:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:DD:07:CB:54:46:8E:9C:02:B6:EA:BC:AB:BA:72:77:26:1B:B4
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:18:13:28:f7:d7:22:db:cc:6a:ba:ec:c5:cb:54:42:62:
ee:cf:fc:85:d7:c1:b7:40:79:71:5f:38:ae:c3:b0:6f:a6:ce:
9c:cd:ac:20:1b:0f:20:ff:12:a9:db:b2:70:60:f2:6a:5a:aa:
56:8e:50:7b:e4:8d:5d:51:4d:a8:dd:5e:fb:f2:4e:7c:df:60:
fc:84:27:8f:93:13:55:40:7f:32:36:b5:9f:be:54:72:fc:c1:
e0:70:68:17:fa:53:af:d6:da:bb:cb:6e:09:b0:ea:7d:4a:33:
71:79:7c:34:54:eb:67:e1:dd:28:02:57:2e:b8:eb:c9:a1:d5:
04:a6:cc:39:3b:d7:c3:25:0f:73:4e:ce:f6:50:aa:b8:68:01:
33:1f:b3:c2:35:dd:28:31:0c:86:d1:8c:27:81:f0:cf:9b:a5:
b4:43:ff:6a:8a:a0:b4:0d:72:87:52:50:2f:b1:bc:1c:15:0c:
a4:76:46:97:7c:e1:13:13:01:bb:7b:6e:fc:33:45:81:00:b4:
98:70:15:ca:56:da:83:1f:22:f9:86:54:e0:8e:21:84:5b:ac:
76:a4:e4:df:ed:f2:55:9d:4a:08:57:24:78:ba:48:30:ae:35:
9f:95:27:bb:64:95:fc:fb:af:6a:e3:8d:89:8b:75:47:e0:64:
a2:98:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:25 2026 by rpki-client