Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: 7YFqfst+El+YhTl+P/dpBmV8dtuknj/8eeS9Vej32qU=
Subject key identifier: 3A:51:EF:7F:CA:9D:A7:48:67:53:61:B5:CF:CB:E4:26:26:27:8F:07
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 01A0C9D8A33F9E8B7001EFF4907B3559B404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 16:00:13 +0000
Manifest this update: Tue 22 Sep 2026 16:00:13 +0000
Manifest next update: Wed 23 Sep 2026 16:00:13 +0000
Files and hashes: 1: A-kESQFgScEyFER7yotzjt_cbmI.roa (hash: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=)
2: jpSNAjoIWW5o1dEpckRnfaNZUDo.roa (hash: kdIhMxsuZJUQm1IC9DaIIdMEPEig2DJxhqMNYmLbqDc=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: iy/bZj3d4VCNc21mIQXxJiNtjEedw+Gz2kQbDG5IK3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:a3:3f:9e:8b:70:01:ef:f4:90:7b:35:59:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Sep 22 16:00:13 2026 GMT
Not After : Sep 23 16:00:13 2026 GMT
Subject: CN=3a51ef7fca9da748675361b5cfcbe42626278f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:c6:1f:42:3f:fa:2d:b9:6e:a5:87:de:f7:
0d:4b:af:34:a7:e6:c7:6b:d2:a7:bb:d6:cb:5f:9d:
a2:cb:d4:6c:3b:6b:2a:d4:fd:c5:f5:72:d6:c8:be:
ab:71:ee:e3:7c:eb:d1:fc:25:9b:e1:90:98:05:5f:
27:e2:0c:35:ee:d9:bc:b0:8b:bb:12:0b:39:fe:67:
9e:48:52:e9:32:d7:3f:1f:bb:86:0a:4d:e3:f4:53:
5b:17:52:92:d2:d2:5d:e3:38:16:cd:d2:d0:e5:e2:
13:f2:e2:cf:8e:46:8e:75:f6:7c:40:90:60:fb:54:
31:76:5a:5f:50:2b:39:98:94:fb:05:01:e6:4f:1c:
27:f9:c4:35:f6:56:6d:ed:de:a3:3f:a3:07:55:a5:
6a:26:46:12:37:6e:f7:c9:99:e4:8d:18:c1:c5:3d:
dd:02:18:10:70:6b:e5:95:6e:00:dd:8f:bb:1b:ce:
84:12:78:8d:af:bb:64:cb:e9:3e:5d:a3:96:69:6d:
92:c0:61:f2:38:93:c2:90:61:cf:49:ae:9d:15:51:
18:44:15:3e:e2:cb:c4:e6:7f:32:ea:01:34:6a:84:
b1:51:0d:71:8f:91:38:f9:81:e4:69:29:85:01:86:
c8:c0:32:ff:a4:43:ab:80:44:14:53:2f:81:72:e8:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:EF:7F:CA:9D:A7:48:67:53:61:B5:CF:CB:E4:26:26:27:8F:07
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3a:16:5b:b8:bd:33:8a:d0:0a:0f:d5:e6:03:34:fe:48:e7:
1b:56:02:2a:9c:6a:87:5d:17:e9:df:ba:bd:64:70:3d:89:e2:
94:2c:64:63:69:1f:80:6a:af:c3:7d:88:d1:5c:c0:a9:1f:38:
b2:61:07:ba:32:cb:78:7f:5b:ca:47:75:a5:44:ce:5d:ff:d8:
3d:d1:b1:2e:8c:c9:84:a0:90:28:4e:eb:cc:63:9f:76:d1:86:
13:fb:66:9e:af:0b:c2:93:c1:f8:cf:45:6a:b1:1f:f5:3c:aa:
c2:5b:06:af:fc:dc:8c:81:a6:c5:8c:b4:59:85:e3:60:31:ba:
3a:9d:8d:0b:b3:4f:ba:66:56:c3:30:19:32:97:e8:16:59:ad:
0c:b5:49:4e:59:e2:aa:aa:4a:77:b8:81:91:a3:e5:8c:96:b4:
66:3a:42:a1:c3:c5:25:5d:c2:b4:55:af:8c:80:10:ea:b2:a7:
6d:7f:e8:47:a4:50:31:17:65:22:f0:6c:b3:81:9e:51:e0:ca:
54:d7:2a:d2:6a:6b:9f:b4:00:a6:bb:cb:22:e5:ba:c4:52:6d:
54:7f:5f:3a:ef:4a:d5:b2:8a:48:9d:d5:26:15:d5:3c:7a:54:
cd:90:b4:16:ff:a6:81:6b:85:6a:27:46:da:1f:d5:70:3e:70:
01:ce:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:09:51 2026 by rpki-client