Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: l3qPsmknUHvghq0IpsXSkW3uX2UFOU8XAWkMOFHW/+g=
Subject key identifier: 9C:72:FB:42:98:0E:F0:1A:99:B7:82:ED:5F:3D:DC:EB:83:77:8E:F3
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 019DA37843481A582CD16B11C0C0BFF59EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 0B44
Signing time: Sun 19 Apr 2026 02:01:00 +0000
Manifest this update: Sun 19 Apr 2026 02:01:00 +0000
Manifest next update: Mon 20 Apr 2026 02:01:00 +0000
Files and hashes: 1: T8H29xdvMM615tBBaetAKqxS1Lg.roa (hash: f1JOsohKbsQAHJoFy6fUS25sjpjOzZztTxeJ515Q3+k=)
2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: mZ5jHpFYWHqAZ8ykeVKAoB6s1tE17ROdqMehisJIVmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:43:48:1a:58:2c:d1:6b:11:c0:c0:bf:f5:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Apr 19 02:01:00 2026 GMT
Not After : Apr 20 02:01:00 2026 GMT
Subject: CN=9c72fb42980ef01a99b782ed5f3ddceb83778ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:cb:32:18:14:bc:25:12:cd:f1:59:e8:87:
f2:8e:cd:e5:a9:5c:5f:9f:79:7b:9a:95:c6:ec:08:
c4:ac:66:d1:29:85:3b:87:b2:c6:7f:4c:17:4a:92:
3f:8b:6a:41:7d:49:d1:5e:a1:92:75:82:ab:08:4f:
10:62:70:8a:ce:88:7a:5f:29:21:61:67:47:c1:fc:
78:75:e0:d7:b2:1c:95:dc:a0:1c:84:fa:2a:24:52:
c1:de:73:75:24:ea:dc:62:9c:53:86:c2:4a:11:d9:
01:0e:2f:b4:08:bf:ce:ef:1c:74:85:9b:d8:fe:87:
f4:9f:f6:1b:73:47:57:f1:77:bd:6a:2b:bd:59:ad:
48:70:75:b1:56:f5:73:ae:c5:74:22:fe:bb:39:cc:
a1:bd:52:3a:01:43:3f:67:0b:e4:2a:41:8d:41:0e:
10:07:82:cc:a5:d4:d4:73:ac:e7:e0:e5:39:a2:46:
34:35:96:ae:23:cb:c6:18:ed:87:03:5b:02:60:52:
67:ea:45:28:a9:a5:e0:13:20:53:e1:ab:52:b8:79:
fb:ae:a3:63:62:60:39:a1:f5:02:d4:27:31:d3:eb:
56:33:a1:77:65:b1:f6:f7:ff:3f:67:82:de:67:a5:
dd:40:e9:85:94:54:fc:75:7c:23:1e:78:ae:3e:40:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:72:FB:42:98:0E:F0:1A:99:B7:82:ED:5F:3D:DC:EB:83:77:8E:F3
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2c:e1:3f:2b:4d:49:ea:64:e4:54:bf:a1:bf:60:c7:b4:e9:
72:e0:5c:28:97:e2:da:a1:a5:6d:67:48:5c:db:82:76:26:24:
a4:74:c6:2b:49:b5:6f:b1:ef:f0:d7:1f:62:03:98:6b:7c:51:
66:9e:5f:a8:30:ac:75:fb:2b:94:68:f3:ce:27:7e:e0:14:17:
da:70:bd:d0:bf:06:f7:a4:c0:41:78:af:1d:62:90:3b:d3:a4:
e3:58:e5:d5:da:27:fa:06:50:f8:48:d9:3f:6c:aa:27:cf:38:
b9:3d:90:4a:57:64:4c:9c:98:a1:68:37:b7:82:1a:a5:e6:d1:
a7:e3:34:ce:78:18:da:ae:76:89:a8:43:aa:02:bd:31:13:2a:
3a:e8:01:84:63:9a:29:a4:e2:44:93:26:4a:3b:3b:c7:ec:1f:
ef:e2:7c:a3:44:2a:b6:1e:8d:1e:a7:a0:16:08:e3:d3:25:a2:
ca:6f:46:09:f1:29:67:79:cc:bb:37:6d:f8:2a:4e:79:47:1d:
52:2e:75:c6:cc:c8:65:d5:10:cb:34:49:f2:bd:ee:0f:c2:0d:
6d:98:38:ad:b8:ad:8d:c8:1c:1c:b1:84:56:30:9c:90:83:e6:
23:0e:cf:90:ae:73:5e:14:ea:68:4e:77:db:19:34:9a:d0:5a:
1e:60:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:35 2026 by rpki-client