Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: 4i4EK1ancdxVqNkrtDM0HsNOYV98CB5w8aSsYtNtI8U=
Subject key identifier: 13:CC:61:AC:BA:41:6D:CC:3C:B5:81:40:12:8C:85:24:F8:1A:42:61
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019D25F17FDF4B9B389195D0BFC48D95AFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 10B4
Signing time: Wed 25 Mar 2026 17:01:17 +0000
Manifest this update: Wed 25 Mar 2026 17:01:17 +0000
Manifest next update: Thu 26 Mar 2026 17:01:17 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: Ip96BJO5BQdBlj2B7swxPxvP8fLuC7xN/89+fMlA6oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7f:df:4b:9b:38:91:95:d0:bf:c4:8d:95:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Mar 25 17:01:17 2026 GMT
Not After : Mar 26 17:01:17 2026 GMT
Subject: CN=13cc61acba416dcc3cb58140128c8524f81a4261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:fd:2b:75:44:a1:8e:2e:07:11:1e:dc:dc:
2d:99:dc:e0:25:66:57:16:4a:c4:26:38:67:a8:05:
9f:1f:1d:00:d2:4d:48:51:06:c2:14:80:db:f4:31:
88:83:69:db:1d:5b:a9:cf:8d:30:99:94:d2:65:4e:
24:6c:bd:9c:6e:38:36:54:45:8e:5c:a4:d2:b6:13:
a7:30:26:94:cb:00:15:1f:4d:79:12:d4:3c:ee:1f:
05:75:67:df:eb:e4:b0:9e:9b:13:b5:9c:af:f6:8a:
79:2d:58:b1:e1:f4:4f:01:57:cd:6d:ef:72:02:7d:
5f:06:19:6f:62:a7:e3:b1:80:6e:b0:f8:22:b7:b1:
84:4c:d0:4c:9a:16:6b:cc:61:bd:ea:13:a0:2a:04:
a1:6c:a3:9c:35:91:6f:dd:2d:a7:50:cf:c2:1a:bd:
72:f2:88:fb:0e:3e:ad:87:ac:07:ee:d4:a9:99:08:
89:93:93:cc:72:54:2d:bf:7b:3b:b0:58:e1:bf:e8:
f6:da:22:0c:a1:94:74:d2:7c:b8:bd:76:11:84:1b:
81:40:56:39:24:04:3d:31:54:a0:72:4e:1f:12:b7:
18:fb:2f:c5:3f:31:d7:31:e9:73:62:38:db:7f:4e:
33:70:d2:62:1c:f1:d4:27:86:d2:ed:07:79:8e:3b:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:61:AC:BA:41:6D:CC:3C:B5:81:40:12:8C:85:24:F8:1A:42:61
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fb:63:34:40:c2:cc:b2:36:08:db:df:e9:94:04:1d:54:ad:
b4:c4:01:79:b1:80:46:d8:ec:18:6b:c8:57:0c:05:a6:d8:05:
bc:16:ac:c0:69:31:d5:57:20:0b:8b:cb:6c:f2:43:c1:9e:65:
ec:2d:b4:c9:2c:9b:15:d5:c0:9f:35:e4:2f:d4:d4:b6:8b:bf:
67:f7:67:b3:9f:b8:01:51:98:82:67:e0:01:ef:5c:99:95:1c:
8f:c9:31:1b:a4:14:3d:74:05:e9:51:37:12:35:fc:89:1f:37:
f2:98:35:d4:f1:19:8a:8b:96:b3:3f:3a:a4:da:16:19:c7:f4:
0f:9e:d1:db:0a:53:f7:c5:c0:85:f9:ef:a2:0b:8a:6e:8e:fc:
69:27:01:dc:c6:6b:0b:b6:6d:69:8a:51:6c:e0:8b:0e:23:77:
cd:6a:22:c2:4e:8d:04:63:5c:77:14:a5:53:da:39:59:11:39:
9f:3c:fa:4f:27:6f:95:12:ca:47:8b:60:72:5b:04:87:fe:7e:
a6:e6:55:46:16:3c:4a:4c:14:f6:05:c2:e4:21:e8:c2:4f:4d:
6a:75:bf:69:45:26:97:c8:c1:15:0c:20:4a:e7:8b:10:3d:2c:
03:e0:f1:b4:25:86:d2:dc:22:d9:e7:8d:da:ec:7b:cd:1d:a3:
73:cc:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:57 2026 by rpki-client