Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: OjSXkiaHMsSkA0heVRtCcwMZ6o/8PeVuZu1Y59+v5Pk=
Subject key identifier: A2:69:DA:03:6C:CA:B0:25:C0:CB:CF:F4:AD:D9:2B:B8:A0:D2:C1:2F
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019F946DB943EA814B3D9B2D67F3653B7E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 11F7
Signing time: Fri 24 Jul 2026 14:00:46 +0000
Manifest this update: Fri 24 Jul 2026 14:00:46 +0000
Manifest next update: Sat 25 Jul 2026 14:00:46 +0000
Files and hashes: 1: bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa (hash: ebBDlPRlXWyLq2KbuwNyF2wojOacfcKBKPPYOJJnz0M=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: 0RCOgG8ZT8tn8gXfTb51BFa3HeIPd/ETh2b2Bcs67O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:b9:43:ea:81:4b:3d:9b:2d:67:f3:65:3b:7e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jul 24 14:00:46 2026 GMT
Not After : Jul 25 14:00:46 2026 GMT
Subject: CN=a269da036ccab025c0cbcff4add92bb8a0d2c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:5d:85:26:8b:bf:5d:7f:b0:aa:06:d3:9e:
5c:6e:77:2b:03:2c:7d:30:90:2f:39:74:f4:c2:2e:
40:0c:ac:72:15:66:3d:01:40:a3:15:da:53:27:2b:
6e:20:ad:0e:e6:d9:34:39:04:81:5f:4c:fd:8d:a8:
7e:e5:90:6c:0e:46:01:30:03:9a:30:ec:ea:69:34:
8c:30:b6:ca:9a:66:82:18:2c:c0:71:5a:c6:fe:ee:
e9:ab:af:c3:3b:83:64:bf:06:20:97:71:7a:9b:a8:
f6:4e:4e:3e:e6:60:99:68:0f:53:27:a2:d2:54:07:
ba:ee:5b:7e:32:9e:e7:f2:0a:62:1b:76:67:eb:80:
2b:b4:21:fe:60:5b:56:c8:e6:41:1f:6b:ed:44:da:
f9:d6:54:4c:76:ad:a4:54:4e:64:74:e8:f1:fb:17:
4c:51:8c:42:aa:15:22:9d:fd:21:67:7b:b4:e0:84:
73:a2:9c:a4:e1:01:f0:98:06:06:49:66:a1:30:2a:
f9:b8:be:7e:4c:e2:0c:c7:be:de:d1:02:79:a0:a9:
b8:42:97:81:5b:88:5d:37:f5:25:f5:a4:73:4f:83:
f2:08:38:0a:cc:b6:e7:31:cd:e4:07:75:1d:0a:5a:
76:5d:d5:54:0a:09:aa:d7:40:f2:2d:e9:cd:a9:6d:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:DA:03:6C:CA:B0:25:C0:CB:CF:F4:AD:D9:2B:B8:A0:D2:C1:2F
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f4:6d:64:32:09:aa:6c:5f:03:15:9f:a8:27:62:68:aa:06:
68:bb:96:8b:08:a8:af:0f:20:9c:bb:1f:e4:78:8f:7d:39:c7:
57:58:a0:5c:a7:64:68:35:25:48:31:09:af:72:db:eb:a9:b4:
4b:f2:93:18:4c:91:70:fd:55:d9:c0:73:ba:77:44:69:2d:57:
65:8a:3d:91:78:a4:6e:0a:da:ac:79:f6:35:a8:6a:01:57:7d:
90:21:6b:10:3e:2c:b6:36:63:8d:8a:7e:45:d5:ce:ef:25:5e:
a5:7b:e7:b5:7a:3e:e9:c2:97:ac:fc:b7:6c:d8:9b:57:1d:67:
30:f1:98:92:64:01:f6:0a:fb:95:1a:d1:a0:5f:41:57:41:19:
f7:c1:26:d1:16:59:4a:a5:ce:ca:c4:df:b6:ff:df:01:bc:49:
95:e9:66:9b:ef:68:c9:aa:88:98:19:09:72:0a:57:be:3f:c5:
1d:85:bb:64:e7:cf:8d:07:22:78:e0:4f:87:7f:69:65:a3:00:
18:3b:47:78:54:cb:93:89:76:30:8a:1e:ed:e5:e0:ad:bf:93:
be:e8:30:b9:52:29:67:f4:85:10:01:b5:96:b9:d0:4c:bf:ff:
d6:4f:70:38:f7:2e:be:95:44:2a:10:a3:08:5d:6a:3d:6e:cc:
78:9b:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:45 2026 by rpki-client