Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier: gZm/WIs9/auoyPXdrVa8hiY0mZnUHBSYKFADe+IdyCI=
Subject key identifier: 95:03:7C:CB:CD:83:46:75:8C:55:92:6B:66:11:02:E4:10:FE:87:90
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 01A0DCF2FB71C027E9C287AA52E895743B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 09:01:46 +0000
Manifest this update: Sat 26 Sep 2026 09:01:46 +0000
Manifest next update: Sun 27 Sep 2026 09:01:46 +0000
Files and hashes: 1: _xbk6TstsNtf1uEDvwohYt6Gqmg.roa (hash: POljjhEax4aAurVZjBSXk9yYPwBhrXFZZutRKo1D0lI=)
2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: UhjUJfwh5f4/tF+sLGIqVZvb9p2XYT3qRKvb1QVnAkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:fb:71:c0:27:e9:c2:87:aa:52:e8:95:74:3b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Sep 26 09:01:46 2026 GMT
Not After : Sep 27 09:01:46 2026 GMT
Subject: CN=95037ccbcd8346758c55926b661102e410fe8790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:7f:e5:54:b7:53:1e:ca:49:fc:d9:21:29:
e3:dc:01:7c:a0:07:74:38:e4:98:e1:f3:47:cb:98:
38:41:b5:8c:90:5a:6a:dd:d1:aa:2c:4c:ed:20:f9:
dd:02:cc:8c:bc:3f:69:17:69:d8:e3:fe:bb:b5:46:
46:f8:34:88:b5:cd:e5:5a:4e:34:37:1d:18:92:c5:
52:d3:1f:6a:cd:8c:1b:1c:c1:45:22:8e:13:2e:ab:
80:76:82:93:76:02:01:ef:68:56:76:a4:b1:09:79:
a1:76:ed:26:9c:d6:34:b7:57:07:cd:5d:f9:5c:58:
87:3e:e5:9e:ca:eb:a9:d0:ae:1f:79:22:c1:7b:82:
2d:4d:0f:1c:83:93:57:50:9e:92:2a:df:aa:14:f7:
0c:91:26:6e:9b:46:68:da:3c:c2:d1:41:f3:83:fe:
bd:69:46:b9:1d:fb:4b:ff:32:e6:70:52:8c:20:66:
14:2e:e5:97:f3:3a:37:2a:1f:e4:de:3a:68:e4:14:
0c:15:2b:c4:c3:e8:43:75:18:70:a8:45:ad:ed:06:
be:73:46:f8:5d:ab:02:dc:5b:4e:e6:fb:7d:1d:3c:
28:37:68:8e:85:ce:8d:e8:ee:4d:6f:9c:32:7c:41:
a4:61:58:33:55:f7:50:f1:ce:13:57:24:ec:f1:f8:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:03:7C:CB:CD:83:46:75:8C:55:92:6B:66:11:02:E4:10:FE:87:90
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:50:bd:7a:09:9f:bd:09:37:81:48:cd:f7:04:cf:12:c8:ed:
25:20:11:49:34:7e:96:90:16:8c:7c:dc:e0:a2:79:a1:98:65:
93:a4:c6:0c:cb:72:81:92:57:ae:e7:2e:b3:3c:4f:c7:48:5c:
51:66:9b:3c:3e:46:58:91:b8:fd:5e:64:39:06:86:78:6f:73:
e1:54:35:29:48:1a:21:17:10:cb:23:82:00:a6:af:9d:c9:6a:
c1:cf:b0:17:6d:ef:f4:25:a5:c8:8a:ae:f1:11:de:ee:1f:fe:
88:82:96:be:b1:11:95:bf:09:28:57:2c:30:59:68:72:b6:3f:
e2:83:6e:21:a3:01:00:a8:c1:b7:5c:81:b5:3f:82:5d:6e:e3:
a1:ab:e6:8c:9e:98:c4:26:96:80:bf:de:45:ef:4b:7e:a4:34:
aa:0b:a8:7b:d9:49:d1:01:66:fe:c9:07:ea:1f:3b:bf:5b:b4:
50:6e:b5:db:fe:5f:71:56:8e:ff:57:9f:5a:a6:9f:01:e3:ca:
46:21:ae:87:82:67:1b:e1:34:53:77:60:88:ae:aa:21:e6:8d:
c1:ea:78:ac:bd:bd:64:e1:3a:9d:77:86:06:b2:16:58:29:cc:
25:c3:b1:c4:7b:73:54:dd:a0:c6:dd:b1:b1:cf:4c:f2:46:db:
d3:c0:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:33 2026 by rpki-client