Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: aVEXBw02HhCA2J77mOALGBjGLHjs6nIW0+/aAuJNLtk=
Subject key identifier: C3:B3:76:65:2F:44:50:27:4E:2A:16:19:2E:BE:10:96:1D:89:E5:28
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 01A0D6B9C5FE6568DAFA253D41A10DF5A2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 1A87
Signing time: Fri 25 Sep 2026 04:01:34 +0000
Manifest this update: Fri 25 Sep 2026 04:01:34 +0000
Manifest next update: Sat 26 Sep 2026 04:01:34 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: PYT4ERGlJCYEXe+M7FjElwwCFAdf9hjWE/+okmRMisg=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:c5:fe:65:68:da:fa:25:3d:41:a1:0d:f5:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Sep 25 04:01:34 2026 GMT
Not After : Sep 26 04:01:34 2026 GMT
Subject: CN=c3b376652f4450274e2a16192ebe10961d89e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:14:2c:f7:9d:13:88:0c:f4:df:7f:b2:a9:
cf:2f:8d:ff:b9:6f:68:fb:86:cb:9e:97:8c:81:ec:
a4:ab:70:bc:f8:48:c4:28:58:4b:29:e0:b0:bb:4a:
8b:0b:aa:bb:58:d8:d7:75:b4:a8:ac:57:25:f7:58:
f5:5f:c6:ff:28:42:0f:a4:aa:80:0e:31:88:a3:58:
5c:07:03:45:5d:e7:6e:08:9b:29:39:0c:11:fb:9b:
ea:a5:e9:4f:d9:a0:61:a1:4f:13:71:c4:43:9e:28:
07:56:77:d3:1d:bd:9c:fb:d7:6d:f8:e5:4b:6c:13:
38:a0:f7:c1:53:f8:44:68:eb:90:c2:e1:51:0d:76:
c2:4c:d6:81:7a:ee:73:91:e4:4c:cd:bb:09:25:63:
23:83:da:75:b1:5d:a4:11:aa:e6:08:35:97:f3:14:
03:66:1b:b1:ca:e5:65:39:8f:96:76:a6:01:3f:45:
49:62:31:a9:4d:57:3c:43:ca:99:f8:8c:d4:fe:48:
8e:43:12:85:09:6d:30:29:1a:84:f6:59:6c:94:eb:
49:77:bd:2a:e5:c7:23:37:5e:99:74:8f:2c:13:a1:
a7:8a:dd:4a:c1:15:68:00:33:ab:c6:6f:77:02:1a:
85:73:cb:e6:b4:cf:8e:48:c0:3d:4c:e5:7d:99:ff:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:76:65:2F:44:50:27:4E:2A:16:19:2E:BE:10:96:1D:89:E5:28
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:14:10:fe:8a:46:78:1e:5b:63:b4:00:5e:8e:a6:4e:5b:5b:
42:89:33:cd:e9:ef:42:13:35:0a:f0:d2:54:e4:e7:2b:3e:0d:
d9:9a:33:5f:99:3d:ad:5f:4d:03:07:c3:7d:89:a6:0d:eb:27:
d8:ad:74:fd:c0:c1:d7:7b:1a:e9:c9:a3:83:12:af:62:fb:82:
27:f3:d5:2d:c5:1c:46:8a:4a:5e:08:d3:c6:df:3d:35:3c:fc:
45:c9:c7:71:ef:d7:0c:95:41:fe:cb:da:b2:78:d0:44:bc:d4:
e7:c0:a8:fd:eb:ff:06:48:58:bd:81:4e:15:77:e3:49:c3:71:
c2:e8:07:95:87:64:db:cf:04:7e:2a:56:08:fb:ba:ec:3f:ec:
1a:e8:67:18:c1:e6:fb:a6:45:89:97:36:74:89:8e:e7:9e:24:
4e:08:f7:02:8e:f8:fe:de:16:77:b8:cf:4e:8d:f6:09:da:42:
37:22:30:5d:87:e2:de:9c:01:9b:11:41:79:9b:ef:79:b6:3a:
c2:9c:a5:2e:ea:93:47:0f:0d:72:1f:f9:d7:ab:7b:55:6d:5a:
15:17:62:fa:59:b8:1a:93:11:9a:8b:d2:37:c6:7a:df:e9:52:
8e:d5:b2:27:26:aa:4f:f8:02:82:38:bf:28:4d:d3:68:5d:b3:
38:67:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:54:10 2026 by rpki-client