Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: AIcN/pK2jVPJYzqKIoh4dnABMJ0gF8sOpHCC9qoZnC8=
Subject key identifier: 1E:80:78:C3:5E:5D:41:60:70:91:4F:A4:3A:3A:DC:25:81:C4:23:B9
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 019F9248C57F8E5FA61F33A11F5D106E43E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 0D09
Signing time: Fri 24 Jul 2026 04:01:10 +0000
Manifest this update: Fri 24 Jul 2026 04:01:10 +0000
Manifest next update: Sat 25 Jul 2026 04:01:10 +0000
Files and hashes: 1: XGtDH1L6DSDTcXSFlNGN7DJNIuA.roa (hash: UmPHiymGAj7+/eK4hBqQMAkOwYiEZ6uebNHLD6+HTOE=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: i7U3DFsBGyi+Am8mXphR27aWj/ceQxgu3ufYBPEGIMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:c5:7f:8e:5f:a6:1f:33:a1:1f:5d:10:6e:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Jul 24 04:01:10 2026 GMT
Not After : Jul 25 04:01:10 2026 GMT
Subject: CN=1e8078c35e5d416070914fa43a3adc2581c423b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:7d:44:c9:09:13:85:20:00:ca:e5:71:a0:
eb:17:a7:92:76:b2:26:2c:9b:5a:30:c5:00:7c:86:
82:84:74:4d:7e:83:97:75:2a:da:bd:c8:e3:b8:c9:
e7:7b:4b:bc:77:49:e6:be:92:e8:72:79:26:b7:17:
43:4a:46:1f:a9:af:62:44:d7:bc:bd:95:2b:46:64:
35:2e:21:ef:fa:5a:a4:5e:03:ef:73:bc:5e:d2:0b:
22:eb:08:cb:b9:4a:90:10:53:38:bc:78:a5:d4:28:
62:41:e2:a8:d4:f9:e1:f2:cc:97:6b:7e:17:4f:3a:
47:29:df:73:4e:9e:1c:57:58:f9:2d:85:62:42:a7:
7f:3d:ad:76:35:1c:ca:bc:a1:25:9f:20:b0:44:7f:
b1:54:b5:9b:d1:b2:37:b2:37:fd:a1:8b:79:85:49:
88:81:e5:d6:15:c0:eb:72:d9:3c:02:e5:9a:f0:ca:
12:a2:be:22:62:c6:21:85:80:c9:e9:e4:7b:b3:7d:
ae:83:2b:d4:d7:c1:3b:a0:5e:ad:72:43:e9:9a:bb:
c2:61:af:9a:20:5b:f3:f4:66:c3:ba:00:45:c0:69:
a5:e6:ef:53:48:e0:44:99:03:5d:b1:05:22:8b:cf:
03:a5:d5:86:0b:cf:4e:1d:ea:28:84:fd:9d:2c:2a:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:78:C3:5E:5D:41:60:70:91:4F:A4:3A:3A:DC:25:81:C4:23:B9
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ee:ba:62:5c:02:ed:bd:9e:1d:7b:a7:7e:3d:e9:ae:76:ae:
f8:d4:cd:76:6b:8a:6d:5c:2f:5d:fe:e5:20:31:b2:7e:76:f8:
e2:6d:64:d4:6e:22:c9:81:9a:43:42:42:95:f5:b8:63:ca:19:
8f:c0:06:24:49:a9:06:b1:35:62:24:db:d4:cf:56:8f:e3:4e:
11:1e:fd:33:dc:a0:47:9c:29:5c:20:3a:3e:e1:77:9c:97:51:
99:36:dc:69:94:92:ce:43:9d:b4:d8:41:2e:79:2e:62:cf:6f:
de:79:7f:cf:47:55:7d:64:78:d6:b7:99:e3:03:d8:ce:a3:9b:
06:27:28:3e:fd:bb:59:41:bf:6a:d2:49:72:25:74:ae:90:0e:
7c:52:c3:39:6f:7a:f7:41:cb:af:dd:57:5e:a2:d9:a9:54:bc:
a0:42:46:97:49:55:20:00:1b:47:6c:f6:a2:14:b8:02:e1:75:
e0:70:2e:20:8e:bd:34:5c:27:63:3b:11:2c:a4:60:8e:6a:37:
78:de:04:3d:fe:43:8b:62:34:69:21:04:ed:a7:3b:a8:19:1e:
d7:bf:b9:a2:4d:76:04:b7:fc:50:d1:ef:72:0f:78:26:ed:35:
a5:9d:c8:56:3b:f5:ae:b2:66:2c:21:1e:85:d8:19:b2:d7:b9:
dd:7a:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:19 2026 by rpki-client