Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File: pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier: 8F621or2V+d/nYWWVytYploeEYeSmjVLCqu3HLJK4rQ=
Subject key identifier: D8:E1:97:0A:37:31:76:06:97:B3:8C:F2:E0:AC:6A:51:10:86:43:D6
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 019D26CD051788B7203224EEE6F8641132AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number: 0949
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: 0lvXa172UplN6y7av1cXq_FBnIY.roa (hash: wYYltyOrSFKK2j0JVE4ExTzSFfm4Tu29VSNIrOnj0/w=)
2: J0u4PbYIevSkqXDSEnsyGZVMqtc.roa (hash: aBXYYl48jca9wveAZI/GuYbbGGyv9mDo91i3PZYst5k=)
3: W7a_s-Jl-VcdTVf7k5VBlu09lYo.roa (hash: NXJVtq1VsU3W1ziELfQ1JwgkYM4PzBdJsNwmTSOSzqs=)
4: oFb4jBbqBQ0GaSAPZ2CPzXwpuXU.roa (hash: ReFO9yx5996yanj90nD2kh+KTbHdkiMkBpj9BJ+Y/vs=)
5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: 6L7LSAKlMuFW2pANIAPCNiik7EmigXVZVRmxfbxmBo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:05:17:88:b7:20:32:24:ee:e6:f8:64:11:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=d8e1970a3731760697b38cf2e0ac6a51108643d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:5c:2a:cc:5a:85:41:e5:cf:f6:39:1d:5a:
c4:b5:25:f0:8d:ac:63:68:05:e1:4d:56:a9:56:4f:
fb:45:2d:46:ab:6e:01:a1:b3:77:38:f8:08:e3:e4:
50:bd:5e:68:43:1a:99:88:ae:b5:34:24:bf:eb:49:
a4:1c:d6:30:34:4c:30:98:45:c8:27:7a:0e:0d:de:
26:30:4b:d5:c6:1a:bb:50:d2:35:68:50:a2:7d:20:
a7:c9:8f:14:3a:fd:82:06:6f:35:d9:3f:e0:51:d6:
4f:8a:3b:61:a7:32:e5:9f:9f:10:91:1b:70:d0:f4:
ca:1a:3d:4c:bd:3e:66:98:5c:45:c6:33:72:24:35:
9e:1c:f7:ab:45:59:e5:cb:4e:35:3b:3f:26:59:b6:
13:51:9f:6b:a1:90:f4:60:47:88:0b:c6:5c:01:c2:
0e:b9:48:29:b3:91:53:8c:ab:ca:da:78:12:2a:79:
47:2a:3b:aa:2a:45:24:fd:a2:14:8b:9c:d8:20:36:
df:7a:7d:ef:20:03:32:c0:43:07:69:88:43:d7:eb:
4e:8e:d4:1f:69:96:72:c1:1b:63:52:23:e1:52:db:
97:c6:1c:9f:09:ca:1b:a8:ec:c5:8c:6a:b4:ef:dc:
9f:dc:be:85:3a:e1:ea:fc:e1:32:88:e8:75:21:82:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:97:0A:37:31:76:06:97:B3:8C:F2:E0:AC:6A:51:10:86:43:D6
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:8b:a7:92:52:63:9c:fb:54:9c:fc:b5:4a:75:04:88:c1:8d:
4c:68:49:33:46:75:83:66:2d:03:13:d7:df:95:48:ff:36:30:
18:28:92:63:96:ec:d8:50:d7:9e:1e:fc:56:ee:3b:3b:52:b4:
4b:fd:21:fb:ff:5e:1e:d6:d7:6d:4d:8a:ce:4e:9b:2b:13:31:
87:93:4a:8e:59:c6:5b:06:9f:ec:94:d1:43:b2:24:8e:08:fc:
74:ac:c7:4f:29:b2:2d:5e:3c:a6:47:2d:d5:e6:e7:6d:6a:3a:
74:74:7a:0e:29:45:5e:c5:6e:0b:6a:f5:7f:63:1a:dc:f6:6c:
a5:9c:8c:51:ce:b6:7d:58:34:e2:05:e1:a0:d5:e3:aa:49:d5:
69:22:40:97:d6:15:f1:af:27:2f:7b:b4:ae:fd:f9:83:d2:fe:
e6:54:8c:13:86:68:00:5a:d4:41:c1:0f:02:06:28:44:56:df:
94:28:8b:b3:74:44:3f:25:57:66:57:58:70:73:f1:61:d1:d2:
5c:7d:87:9c:06:38:d0:fe:51:74:fb:ca:ea:45:25:3c:d9:3f:
a7:e7:e0:80:18:66:da:a9:a3:fa:ae:25:44:30:d5:6d:6c:73:
ec:fa:c3:b9:8e:d3:60:85:40:df:b1:2c:c2:a7:e9:a9:0a:b3:
5a:01:14:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzQUXiLcgMiTu5vhkETKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjYwMzI1MjEwMTAzWhcNMjYwMzI2MjEwMTAzWjAzMTEwLwYDVQQD
EyhkOGUxOTcwYTM3MzE3NjA2OTdiMzhjZjJlMGFjNmE1MTEwODY0M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LZcKsxahUHlz/Y5HVrEtSXwjaxj
aAXhTVapVk/7RS1Gq24BobN3OPgI4+RQvV5oQxqZiK61NCS/60mkHNYwNEwwmEXI
J3oODd4mMEvVxhq7UNI1aFCifSCnyY8UOv2CBm812T/gUdZPijthpzLln58QkRtw
0PTKGj1MvT5mmFxFxjNyJDWeHPerRVnly041Oz8mWbYTUZ9roZD0YEeIC8ZcAcIO
uUgps5FTjKvK2ngSKnlHKjuqKkUk/aIUi5zYIDbfen3vIAMywEMHaYhD1+tOjtQf
aZZywRtjUiPhUtuXxhyfCcobqOzFjGq079yf3L6FOuHq/OEyiOh1IYIhAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjhlwo3MXYGl7OM8uCsalEQhkPWMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzounklJj
nPtUnPy1SnUEiMGNTGhJM0Z1g2YtAxPX35VI/zYwGCiSY5bs2FDXnh78Vu47O1K0
S/0h+/9eHtbXbU2Kzk6bKxMxh5NKjlnGWwaf7JTRQ7Ikjgj8dKzHTymyLV48pkct
1ebnbWo6dHR6DilFXsVuC2r1f2Ma3PZspZyMUc62fVg04gXhoNXjqknVaSJAl9YV
8a8nL3u0rv35g9L+5lSME4ZoAFrUQcEPAgYoRFbflCiLs3REPyVXZldYcHPxYdHS
XH2HnAY40P5RdPvK6kUlPNk/p+fggBhm2qmj+q4lRDDVbWxz7PrDuY7TYIVA37Es
wqfpqQqzWgEU+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:04 2026 by rpki-client