Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: I8RFaijQYIgvAAfvbFi449PQneazNX+0Ony6lU2vIm0=
Subject key identifier: A0:D0:33:B1:5C:C0:DA:69:4B:8C:93:EA:28:8E:4E:90:C8:6F:ED:1B
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019F965C17AD4F91D3A4AC9BA3D0A3C56AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 11F8
Signing time: Fri 24 Jul 2026 23:00:45 +0000
Manifest this update: Fri 24 Jul 2026 23:00:45 +0000
Manifest next update: Sat 25 Jul 2026 23:00:45 +0000
Files and hashes: 1: bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa (hash: ebBDlPRlXWyLq2KbuwNyF2wojOacfcKBKPPYOJJnz0M=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: O11qKJernCNBF6/NtFhtvhBBcZBTEICADQsEYHPMeFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:17:ad:4f:91:d3:a4:ac:9b:a3:d0:a3:c5:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jul 24 23:00:45 2026 GMT
Not After : Jul 25 23:00:45 2026 GMT
Subject: CN=a0d033b15cc0da694b8c93ea288e4e90c86fed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:ec:ae:91:24:c7:75:20:ab:ce:47:e6:9e:
61:2c:69:0e:ab:ea:68:ef:70:d8:b7:ea:d5:81:1a:
3e:15:c8:e8:b3:ba:92:41:96:31:9a:ff:12:18:04:
62:cd:b1:59:0b:55:91:f7:c3:3e:d1:3f:2e:67:87:
e6:4e:95:b0:91:36:af:ad:06:91:89:89:60:95:ca:
9d:39:2e:c9:96:d1:37:b0:01:61:51:a0:13:84:e3:
e8:f0:8c:26:f7:05:56:90:6c:b3:b8:62:7d:0e:44:
39:bd:8f:bf:77:93:61:fc:1f:68:49:95:0a:80:db:
72:d0:a5:f7:37:a7:aa:d7:80:ec:0b:ba:4a:f3:05:
d7:ac:19:27:11:47:84:0c:d3:c2:bc:b0:de:51:f4:
81:02:31:1d:37:29:2c:80:72:e2:30:5c:62:2a:0f:
46:bf:87:48:c8:6d:ad:d2:5a:62:5e:83:98:53:2b:
bd:1a:24:bd:b9:35:a0:ab:e3:25:7d:cf:df:67:c3:
e0:ea:e2:44:c9:20:32:2e:31:ef:fa:35:62:5a:a2:
10:d2:fb:37:81:f1:3a:75:7e:e4:12:1b:54:30:f6:
50:ff:47:c7:d2:35:c5:31:8e:b9:ee:65:67:f2:b8:
ce:22:77:cc:fe:9f:5d:5e:b2:68:b6:f4:6d:18:1d:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:33:B1:5C:C0:DA:69:4B:8C:93:EA:28:8E:4E:90:C8:6F:ED:1B
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:82:bb:60:2a:fe:04:74:96:a2:78:bc:66:41:7e:6a:64:f0:
f8:32:b1:36:74:16:4b:d5:c6:1b:be:3d:26:5d:95:b7:23:6c:
92:ed:23:6d:5d:b2:0a:ce:c4:38:68:d2:78:c5:e6:9e:27:3b:
5b:ba:92:32:29:87:c9:22:64:a8:a4:7b:f8:f8:f4:de:14:40:
7a:4b:0b:b5:50:ef:17:7f:c8:57:5d:58:c7:05:39:8d:49:55:
85:6a:71:67:18:62:65:80:40:b6:87:d1:12:de:3c:12:e3:65:
e9:a4:9e:17:83:14:1d:b4:7d:b5:98:0f:e4:14:03:12:4a:f7:
d4:e7:d8:ad:c5:33:3e:ac:11:28:e1:12:da:8e:13:94:63:6b:
c9:c0:3b:60:fa:30:5f:19:3b:b4:00:77:32:f7:b9:23:a6:b5:
d3:09:b3:ce:f4:f6:8c:b4:8c:bf:51:ad:59:22:e4:7d:d8:69:
83:bd:8a:63:b6:d5:25:a8:47:8c:19:1f:93:d9:c4:90:60:2a:
4f:3a:e4:1c:53:f5:e7:87:ea:09:41:09:4a:1a:c7:5c:e2:fc:
64:a4:49:36:6b:d5:33:63:94:2e:a8:d2:f9:58:b3:0f:d7:2e:
f9:4f:57:c3:cc:07:a5:92:70:e1:28:b7:11:eb:5c:6b:cc:b2:
fd:91:c2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:07 2026 by rpki-client