Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: LpDMR0Oohxmb5+rsq9IVBOGD8AixdfjGh7kLIltHPmo=
Subject key identifier: 1B:AD:0D:12:16:F5:CD:90:4A:0C:32:30:2A:61:69:2A:AA:C5:6F:BD
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 01A0D64C18FEF10481FF647B7EABE5996862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 0CEC
Signing time: Fri 25 Sep 2026 02:01:46 +0000
Manifest this update: Fri 25 Sep 2026 02:01:46 +0000
Manifest next update: Sat 26 Sep 2026 02:01:46 +0000
Files and hashes: 1: T8H29xdvMM615tBBaetAKqxS1Lg.roa (hash: f1JOsohKbsQAHJoFy6fUS25sjpjOzZztTxeJ515Q3+k=)
2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: 4+c+bsRMUU0VxsXbYKK1pEq18c8N3ajvqO9VqbL3aTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:18:fe:f1:04:81:ff:64:7b:7e:ab:e5:99:68:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Sep 25 02:01:46 2026 GMT
Not After : Sep 26 02:01:46 2026 GMT
Subject: CN=1bad0d1216f5cd904a0c32302a61692aaac56fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:e2:ee:0f:e8:05:0c:c4:56:1d:67:3b:43:
60:2a:1a:dd:8f:02:a3:4b:f5:f8:76:5a:f6:8f:1c:
21:fc:a5:5a:06:37:15:60:b0:91:ba:ea:74:24:fb:
88:90:1d:5e:29:14:74:1b:20:5b:56:7d:f8:f4:74:
e7:05:f6:ae:93:3e:06:8a:e1:fa:ba:f7:1f:a7:eb:
12:40:02:18:df:35:4f:ef:b1:ec:b5:fa:39:4d:98:
d3:f8:d2:61:18:2d:8e:3c:e6:c8:4e:47:e3:4a:89:
a0:24:01:db:e8:a9:80:05:8a:db:f1:1f:46:c2:83:
66:33:d1:50:97:8b:72:a5:2c:e3:c1:51:4c:12:0e:
af:e7:30:a0:51:45:de:51:8f:67:e0:e4:fb:80:a6:
4e:e5:9b:4e:c5:88:f8:3d:2b:32:f8:98:85:e4:9d:
db:aa:16:63:f7:db:47:d0:96:f5:d7:2c:2c:03:68:
94:99:c5:13:2d:e0:7a:d8:d7:f2:eb:95:2a:f6:58:
5c:c7:17:d3:e7:91:58:fb:2e:43:33:ab:c6:94:94:
f2:b7:13:62:1c:15:bd:d3:ac:e3:69:0d:bd:ad:5f:
c6:87:bd:d6:84:f6:c8:5d:2b:fc:f0:e8:e6:3c:be:
97:b4:6f:4c:8c:79:7c:77:8c:37:7c:09:8b:83:1a:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:0D:12:16:F5:CD:90:4A:0C:32:30:2A:61:69:2A:AA:C5:6F:BD
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:86:e4:3b:d2:ce:f4:07:da:8b:d4:e0:97:9a:d0:31:42:1c:
50:c5:13:67:54:d6:03:25:ce:ab:e7:6b:cc:56:f5:7f:b6:b4:
5b:05:d9:40:88:34:e7:c9:3e:bb:3b:20:c2:f4:83:30:90:f1:
25:fa:a7:95:ae:59:ee:8f:df:24:44:4f:ee:cc:81:96:e6:91:
67:a0:30:24:f7:ff:8b:5a:2f:fa:4b:d9:1f:33:fa:4d:48:b3:
e8:fa:89:df:f8:92:ab:32:34:24:7b:9b:25:68:f9:84:17:66:
09:61:1b:8d:68:07:ed:6e:3a:fe:24:0a:dc:08:de:9e:53:ab:
7c:77:88:96:1f:8b:1a:2c:d3:e6:70:c6:b0:a8:c9:bc:af:97:
94:35:c1:ed:b7:06:ec:ab:33:bb:7d:fd:cb:c4:d7:4f:96:2f:
23:52:ce:2a:83:06:1e:3e:b3:4d:1c:fd:a3:2b:c6:52:cb:b3:
33:25:bd:aa:15:dd:0a:8b:78:c5:fb:bd:9e:6f:bf:40:ad:e8:
93:19:0d:be:64:b8:09:18:1d:0d:d5:d5:fe:2d:76:47:f5:63:
da:65:e2:c8:ae:ab:05:1c:ce:e2:58:94:e6:db:31:d3:3f:8d:
97:7b:63:bf:01:db:29:bc:40:5d:f2:cc:19:72:9e:6c:5a:a1:
56:03:3f:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWTBj+8QSB/2R7fqvlmWhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTE3ZDg4NWI2NzU2NzJmYzhlZmI4OWQ2ZTE0ZTIzNjc1
MDUyZDkwHhcNMjYwOTI1MDIwMTQ2WhcNMjYwOTI2MDIwMTQ2WjAzMTEwLwYDVQQD
EygxYmFkMGQxMjE2ZjVjZDkwNGEwYzMyMzAyYTYxNjkyYWFhYzU2ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq33i7g/oBQzEVh1nO0NgKhrdjwKj
S/X4dlr2jxwh/KVaBjcVYLCRuup0JPuIkB1eKRR0GyBbVn349HTnBfaukz4GiuH6
uvcfp+sSQAIY3zVP77Hstfo5TZjT+NJhGC2OPObITkfjSomgJAHb6KmABYrb8R9G
woNmM9FQl4typSzjwVFMEg6v5zCgUUXeUY9n4OT7gKZO5ZtOxYj4PSsy+JiF5J3b
qhZj99tH0Jb11ywsA2iUmcUTLeB62Nfy65Uq9lhcxxfT55FY+y5DM6vGlJTytxNi
HBW906zjaQ29rV/Gh73WhPbIXSv88OjmPL6XtG9MjHl8d4w3fAmLgxqFwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFButDRIW9c2QSgwyMCphaSqqxW+9MB8GA1UdIwQY
MBaAFKSRfYhbZ1Zy/I77idbhTiNnUFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYt
MTM0NGQwMmNmZGE4LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8xM2JjMjktNGVmMy00MjFiLWEzMGYtMTM0NGQwMmNmZGE4
LzEvcEpGOWlGdG5Wbkw4anZ1SjF1Rk9JMmRRVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4bkO9LO
9Afai9Tgl5rQMUIcUMUTZ1TWAyXOq+drzFb1f7a0WwXZQIg058k+uzsgwvSDMJDx
Jfqnla5Z7o/fJERP7syBluaRZ6AwJPf/i1ov+kvZHzP6TUiz6PqJ3/iSqzI0JHub
JWj5hBdmCWEbjWgH7W46/iQK3AjenlOrfHeIlh+LGizT5nDGsKjJvK+XlDXB7bcG
7Kszu339y8TXT5YvI1LOKoMGHj6zTRz9oyvGUsuzMyW9qhXdCot4xfu9nm+/QK3o
kxkNvmS4CRgdDdXV/i12R/Vj2mXiyK6rBRzO4liU5tsx0z+Nl3tjvwHbKbxAXfLM
GXKebFqhVgM/dw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:35:39 2026 by rpki-client