Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: o00ZB4eiCUYIM8gqgjhZ1pShkc3Drc0UxNOdskTWA9o=
Subject key identifier: 34:40:DC:66:40:B7:AD:CD:1B:5B:AC:C5:29:31:55:8C:05:41:EA:5A
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019E1F10953D9F57FC503D503ACE51CD659E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 1135
Signing time: Wed 13 May 2026 02:00:40 +0000
Manifest this update: Wed 13 May 2026 02:00:40 +0000
Manifest next update: Thu 14 May 2026 02:00:40 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: WYNN6Ludo711fSVE8UNb5FAz0Lu/cnjNXILCDyKSRew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:95:3d:9f:57:fc:50:3d:50:3a:ce:51:cd:65:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: May 13 02:00:40 2026 GMT
Not After : May 14 02:00:40 2026 GMT
Subject: CN=3440dc6640b7adcd1b5bacc52931558c0541ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:03:19:7e:f6:b6:4f:5a:af:22:55:bf:f5:
df:53:e8:61:3d:30:32:52:ec:66:9d:78:78:61:a3:
6d:56:07:1e:82:4f:58:70:ea:be:b6:d0:dc:b0:d7:
ce:dc:71:0f:65:a2:98:07:95:19:8f:02:e5:9f:45:
4a:13:30:52:64:5f:1d:1b:5d:4b:93:73:20:9e:77:
bf:a2:0a:06:51:5b:35:17:a6:56:f5:0e:33:14:c3:
53:d1:e5:2d:85:29:e4:f7:37:d7:bc:4b:b7:fe:7a:
52:cf:b8:0b:df:02:28:3f:a9:b4:a8:4f:13:93:8c:
82:ca:c9:c2:4c:bd:d0:69:81:37:38:9c:06:92:52:
5d:cc:8d:af:e0:31:4f:b3:a3:87:93:75:ea:fd:c1:
b6:0c:57:97:e9:a2:51:34:92:ef:18:d0:09:15:a7:
51:53:68:2b:69:a4:cc:6a:65:2b:ca:71:6d:b3:ab:
90:67:ff:0f:d9:95:c1:f3:e3:62:33:d0:6b:9b:19:
de:02:19:71:86:e6:ce:e4:c3:7e:fb:99:e5:73:b2:
58:56:58:df:df:ec:61:57:ba:53:61:ab:79:34:5a:
f5:f8:04:60:4d:a6:83:0c:c7:98:52:f0:c2:cb:64:
8b:8b:bf:db:ee:b3:68:f3:9b:88:e3:1e:54:66:52:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:DC:66:40:B7:AD:CD:1B:5B:AC:C5:29:31:55:8C:05:41:EA:5A
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ae:1e:fd:e6:6b:00:fc:aa:02:cc:62:ce:ea:5a:1d:31:56:
3b:42:bb:ce:c2:a3:95:9c:8f:e2:29:22:20:95:1a:d3:bc:40:
5b:08:51:5c:60:06:63:99:21:7b:7d:2f:83:99:35:a6:42:f0:
8e:b9:88:25:d4:23:91:51:d2:a3:ff:0f:2d:37:43:12:58:36:
6b:ed:b5:fe:17:9d:5b:65:3f:9c:24:7e:c7:94:34:57:03:f4:
a3:d3:46:5b:ce:f4:1b:1d:3a:80:bf:da:94:43:47:c4:90:d7:
e5:50:51:68:6a:5f:12:a1:7a:1c:1c:ee:24:1a:7e:6c:de:12:
a3:f7:7b:7b:c6:2a:ac:3f:a7:e1:d0:db:27:3f:0c:30:96:47:
fc:ab:b6:7b:a6:e9:74:b6:eb:9c:c9:39:19:53:92:ba:96:ea:
a5:05:1c:a5:fd:f1:03:42:da:96:f0:9f:bc:4f:4e:75:b4:ac:
7d:5f:0a:2b:f5:91:be:cb:d3:f4:db:9d:80:27:4f:6e:65:ac:
c1:07:76:cc:5a:ea:3c:87:be:b6:02:f8:c3:31:d9:41:d8:b5:
5a:d0:6f:b8:01:bc:f2:93:12:27:dc:93:36:b8:24:60:3c:20:
ca:b8:c8:70:5e:bb:c5:39:1f:ca:49:1a:72:c9:e3:fa:5f:b9:
b7:f2:97:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEJU9n1f8UD1QOs5RzWWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi
YmIzN2IwHhcNMjYwNTEzMDIwMDQwWhcNMjYwNTE0MDIwMDQwWjAzMTEwLwYDVQQD
EygzNDQwZGM2NjQwYjdhZGNkMWI1YmFjYzUyOTMxNTU4YzA1NDFlYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5kDGX72tk9aryJVv/XfU+hhPTAy
UuxmnXh4YaNtVgcegk9YcOq+ttDcsNfO3HEPZaKYB5UZjwLln0VKEzBSZF8dG11L
k3Mgnne/ogoGUVs1F6ZW9Q4zFMNT0eUthSnk9zfXvEu3/npSz7gL3wIoP6m0qE8T
k4yCysnCTL3QaYE3OJwGklJdzI2v4DFPs6OHk3Xq/cG2DFeX6aJRNJLvGNAJFadR
U2graaTMamUrynFts6uQZ/8P2ZXB8+NiM9BrmxneAhlxhubO5MN++5nlc7JYVljf
3+xhV7pTYat5NFr1+ARgTaaDDMeYUvDCy2SLi7/b7rNo85uI4x5UZlID3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRA3GZAt63NG1usxSkxVYwFQepaMB8GA1UdIwQY
MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt
OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0
LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARq4e/eZr
APyqAsxizupaHTFWO0K7zsKjlZyP4ikiIJUa07xAWwhRXGAGY5khe30vg5k1pkLw
jrmIJdQjkVHSo/8PLTdDElg2a+21/hedW2U/nCR+x5Q0VwP0o9NGW870Gx06gL/a
lENHxJDX5VBRaGpfEqF6HBzuJBp+bN4So/d7e8YqrD+n4dDbJz8MMJZH/Ku2e6bp
dLbrnMk5GVOSupbqpQUcpf3xA0LalvCfvE9OdbSsfV8KK/WRvsvT9NudgCdPbmWs
wQd2zFrqPIe+tgL4wzHZQdi1WtBvuAG88pMSJ9yTNrgkYDwgyrjIcF67xTkfykka
csnj+l+5t/KXQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:57:28 2026 by rpki-client