Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: v0mdFB0cDnXwwlak2fgNQWqFagad46dk9disdu4XLeQ=
Subject key identifier: 77:53:4D:D8:03:A8:2B:24:5B:0E:05:66:8F:FF:8E:9C:56:2B:27:CE
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 01A0CE91BE2B74E6ABA46EE7E4EE07208ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 0CE8
Signing time: Wed 23 Sep 2026 14:00:52 +0000
Manifest this update: Wed 23 Sep 2026 14:00:52 +0000
Manifest next update: Thu 24 Sep 2026 14:00:52 +0000
Files and hashes: 1: T8H29xdvMM615tBBaetAKqxS1Lg.roa (hash: f1JOsohKbsQAHJoFy6fUS25sjpjOzZztTxeJ515Q3+k=)
2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: ZyTb5U8VlviI7brvegX+eFcqAj/ykIdDUCYiu7lsg3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:be:2b:74:e6:ab:a4:6e:e7:e4:ee:07:20:8a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Sep 23 14:00:52 2026 GMT
Not After : Sep 24 14:00:52 2026 GMT
Subject: CN=77534dd803a82b245b0e05668fff8e9c562b27ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:9e:a8:85:70:49:05:03:b0:d0:05:98:8b:
02:b9:b2:70:a6:67:8a:35:7e:8e:7d:fa:fa:0d:c7:
06:be:0c:40:e9:ce:1e:22:9b:b6:ef:b0:b7:59:35:
1e:20:09:a7:43:78:a0:93:01:3b:a4:d6:77:8f:5b:
a1:90:32:11:de:2f:fc:18:28:58:c7:cd:b8:16:49:
c0:18:dd:ef:c2:83:47:20:80:22:96:f3:64:5f:a6:
4e:8a:74:7c:61:8c:44:ed:e1:43:3b:e9:b5:8d:45:
f1:56:a2:80:15:c7:16:dc:4b:e9:2a:c6:2c:91:f9:
e4:5e:b6:1d:da:4a:8a:d8:3b:50:35:a3:98:f9:a9:
f7:26:68:ce:9c:9c:49:8f:ec:0e:0f:3e:95:2e:d2:
d4:f1:fc:a8:b3:61:6a:93:fb:15:91:bf:25:04:58:
d8:db:74:9f:f7:95:ea:a8:99:ed:95:6c:0e:3d:95:
0f:6d:84:79:a3:ee:6f:47:a6:8e:03:c7:bd:7b:74:
70:3b:3a:fe:8b:dc:86:bd:8e:55:6d:79:dc:f2:de:
12:c6:22:bc:39:22:13:8b:bf:16:ca:0b:93:88:8a:
9f:4f:54:13:3a:e0:4a:39:30:da:5e:48:6f:e4:c1:
48:15:ad:8e:f6:dc:04:1b:a6:80:73:ca:a6:d2:07:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:53:4D:D8:03:A8:2B:24:5B:0E:05:66:8F:FF:8E:9C:56:2B:27:CE
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:7a:8f:ca:c7:ab:61:40:43:81:9c:1a:92:d1:b4:be:6f:
31:83:a2:8e:4a:28:c8:19:b8:3a:1e:16:b1:9d:cf:8b:60:9a:
ca:f0:76:5d:a5:8d:e9:7c:e2:b7:80:e0:29:47:36:dd:a8:72:
5b:41:3a:e7:e2:12:f1:23:12:b4:e0:88:72:01:85:ab:f1:81:
26:b4:e6:9b:ca:72:4c:58:fa:2c:35:47:6d:b4:b4:df:e8:80:
69:a6:67:50:23:bc:40:ff:92:ff:93:19:6c:6a:42:b5:b6:ef:
b4:32:0e:4d:1d:77:7c:e7:28:af:04:1d:36:55:03:80:a8:86:
3b:70:02:65:0b:e0:13:e8:ec:7d:66:f6:6d:06:05:4d:65:70:
ed:2c:fa:b8:e6:39:d4:df:6f:7b:1f:ce:40:59:05:fe:40:24:
c2:b4:1a:af:9c:43:2e:f2:81:3b:e0:f2:d9:f3:88:78:6b:6e:
e7:67:92:ba:6c:a8:a1:d3:f7:84:99:57:d6:01:46:2f:82:f7:
19:67:ed:e7:38:2e:09:fa:22:80:e8:5e:12:1f:e8:67:27:10:
55:1d:a1:4e:09:fb:3d:4d:3d:7b:11:74:d7:a5:3c:c1:77:35:
b7:9a:e3:bd:b9:ed:bc:b0:3e:9f:77:ea:cd:21:34:cf:db:d6:
c6:20:85:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:25:32 2026 by rpki-client