Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: aJH1rKfAeIwDPfG0MoEFQTOho+Gh+6qeBnbu+WzTe/c=
Subject key identifier: 4E:3C:95:29:EC:F0:EF:98:6F:89:0E:30:34:B6:09:64:DF:75:07:86
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 01A0E0985EA7CF305DF9CF6F306A74BFF21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 02:01:17 +0000
Manifest this update: Sun 27 Sep 2026 02:01:17 +0000
Manifest next update: Mon 28 Sep 2026 02:01:17 +0000
Files and hashes: 1: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: M/eSd361OzXT2Nc8YeeziLxFScsrap1PjRno+pP/OKw=)
2: sFhaHiuTZkyPvfZGeitPsQ50uDY.roa (hash: A+Ir0fHumCJtAvIDD0Uq1l9aMQ2n7on4GhmvbKyT6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:5e:a7:cf:30:5d:f9:cf:6f:30:6a:74:bf:f2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Sep 27 02:01:17 2026 GMT
Not After : Sep 28 02:01:17 2026 GMT
Subject: CN=4e3c9529ecf0ef986f890e3034b60964df750786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:81:46:ee:52:61:78:6a:bf:98:45:24:6e:
2c:1f:27:21:cf:59:10:66:db:6e:d3:52:5b:e7:f7:
f6:a9:0b:dc:6a:88:6d:3f:70:1b:83:c0:53:df:8a:
c9:69:98:4e:d0:bc:17:ac:58:5c:51:64:6b:af:2d:
1d:15:36:76:66:5d:34:90:a5:83:58:ae:35:cf:9a:
c1:35:28:3f:f2:68:9a:c7:8a:cf:1b:9c:2d:74:b0:
de:7d:08:c0:94:0d:3f:c3:2b:03:36:99:d0:de:2a:
9b:5a:d5:d0:68:93:ca:dc:d2:fe:55:f5:0a:d2:39:
dd:63:09:0b:d0:fd:10:4a:e6:1f:4b:7a:1d:45:ae:
62:a5:af:21:78:e3:4a:dc:13:17:5c:49:e9:9e:30:
e9:ad:e2:79:fe:26:cd:6c:83:0d:48:8d:a6:48:ae:
27:c0:90:c0:ca:cb:87:c3:f0:ff:ef:d0:fd:47:b6:
96:30:18:08:3f:d3:68:6e:04:29:c8:8f:0f:e1:44:
89:e7:0a:74:da:7d:40:51:bb:79:29:79:58:88:e8:
c0:3c:bc:a9:45:29:6b:50:29:5d:24:c9:46:70:67:
1a:c2:35:f9:ce:50:87:2e:77:5a:ac:9a:31:5b:f0:
af:53:a0:c4:3e:ae:ae:29:ce:5f:40:1d:8d:ea:d7:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:95:29:EC:F0:EF:98:6F:89:0E:30:34:B6:09:64:DF:75:07:86
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cd:9a:6a:e7:a4:a6:5e:8e:39:07:e1:98:a1:18:a4:35:83:
6f:1b:3a:4d:e2:81:48:c1:bd:21:f8:fa:1b:91:dc:d1:19:64:
2f:af:f3:74:0c:bf:f8:7f:ff:ea:e9:b4:ad:2a:00:2a:cc:fc:
77:81:76:32:83:43:8e:bb:20:4e:83:56:eb:50:13:97:ac:fd:
fd:e7:2c:83:f5:28:bf:7f:2a:ce:de:eb:c9:78:0b:e4:b2:71:
c8:d2:5a:36:b7:3f:e8:05:d0:6e:eb:63:67:a8:48:3e:f7:4b:
3d:bb:97:e0:90:04:34:d3:7b:cc:1b:8f:d8:ec:b9:17:8d:c8:
12:e3:29:33:e1:68:8c:ec:62:37:c3:d4:32:14:e3:80:ea:4a:
0c:67:fd:22:29:6b:96:c5:29:68:e8:7d:8b:53:93:55:c6:78:
9d:57:59:01:41:b9:99:96:85:dd:7e:a1:85:c5:cf:4c:53:3a:
32:ae:47:ef:5a:6e:c9:d0:bf:11:ea:34:52:28:72:2b:fb:cf:
43:59:a2:7d:89:14:f2:a4:b0:7d:10:b9:ab:52:4e:30:7f:ba:
66:4d:e0:5f:34:cd:fd:c0:33:98:62:c6:14:8d:58:88:a3:2e:
f5:1f:79:3b:a0:e8:0e:12:49:fe:f9:6a:9a:02:24:52:ef:76:
64:3e:23:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:26:06 2026 by rpki-client