Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: LtVG9GxRnLvht7lNrEeKwnYGriTgzfro0YHtjFo/p9o=
Subject key identifier: FE:14:B3:8A:79:FC:56:1E:47:D2:26:D2:F4:B9:08:55:5A:39:25:98
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 01A05554F0DFA77B75065E68F336FE7110B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 125B
Signing time: Mon 31 Aug 2026 01:00:25 +0000
Manifest this update: Mon 31 Aug 2026 01:00:25 +0000
Manifest next update: Tue 01 Sep 2026 01:00:25 +0000
Files and hashes: 1: bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa (hash: ebBDlPRlXWyLq2KbuwNyF2wojOacfcKBKPPYOJJnz0M=)
2: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: nlOQFECcMlQuPcqt0MN490cwGwHkg+3KF38zL5rsBzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:54:f0:df:a7:7b:75:06:5e:68:f3:36:fe:71:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Aug 31 01:00:25 2026 GMT
Not After : Sep 1 01:00:25 2026 GMT
Subject: CN=fe14b38a79fc561e47d226d2f4b908555a392598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:46:0e:e7:13:11:72:9d:28:3a:af:a2:d2:
5e:ac:0f:ea:c1:f9:f7:69:7c:a0:a1:21:09:19:1b:
fa:7d:5b:ca:4a:16:94:ce:d7:5c:2f:de:b2:c5:af:
45:d4:95:9a:3d:44:7e:f9:ac:b8:06:aa:cd:ec:13:
e1:1e:36:de:34:6d:ef:34:cc:ee:4d:ba:52:ab:f4:
61:05:52:ab:12:66:b9:06:40:97:ee:bc:ad:7c:01:
84:c5:91:83:53:2d:37:12:74:02:a1:7d:5b:fe:4d:
49:3e:1f:71:3e:f0:12:57:b5:f4:d0:da:a1:fa:95:
8d:5f:a3:ec:ab:3e:87:4a:a9:8e:bd:b5:f3:e4:ff:
17:38:8a:02:69:21:47:ab:6c:da:97:95:99:40:f2:
80:ff:b9:4f:16:15:c4:00:f9:1d:c3:c3:07:d4:ca:
9c:69:91:f6:9e:2f:e3:b8:90:97:bf:97:e0:32:ab:
32:b4:3b:a4:8c:97:40:94:37:ef:52:d2:7d:61:e4:
0e:f0:76:c5:e3:50:e9:90:b6:f0:db:bc:3f:f5:b0:
c2:48:7e:08:e9:ee:93:25:17:39:f2:ae:fc:32:4b:
e4:9e:ab:40:93:96:ea:4c:43:bf:e6:d9:26:ee:b7:
8e:98:a3:02:a1:8d:47:95:ef:8e:34:7e:fe:08:92:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:B3:8A:79:FC:56:1E:47:D2:26:D2:F4:B9:08:55:5A:39:25:98
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f8:17:7d:53:de:62:1b:22:d0:5b:ad:9f:b5:06:22:c8:1c:
6e:24:7c:d5:40:7d:bf:55:a8:8b:7d:03:78:ac:ca:55:ba:f1:
42:a0:b7:3b:17:9a:c2:85:e8:fa:66:be:78:cc:a0:fc:cc:ac:
3d:ba:8e:fd:13:5a:65:6d:ac:dc:37:42:8f:74:22:0c:c9:5f:
42:80:3c:f9:6d:99:95:08:eb:22:92:bb:d9:e7:2a:38:81:6d:
61:2c:e4:88:53:71:eb:0c:7c:fd:5a:e8:c4:4c:54:02:c3:e6:
4f:42:15:bf:1e:83:94:fc:ee:08:9c:a7:07:2f:47:c0:7d:f0:
fa:68:a2:de:ad:b2:1a:70:a0:1c:d9:14:42:4f:87:30:3b:57:
2c:04:2e:5a:99:c2:50:68:60:27:8b:6b:fd:ba:2a:50:6a:16:
22:a7:77:1c:26:cc:3b:29:28:7c:9e:17:bc:9a:ec:f2:a3:51:
72:93:6b:96:76:1b:37:81:eb:71:d4:07:8b:22:80:ef:c2:6a:
09:92:39:02:31:82:36:c7:be:9b:73:98:99:84:7f:8c:2d:58:
86:7b:1d:62:64:d8:c3:4b:e3:b4:da:e3:3a:74:5c:3c:99:5b:
7b:2a:10:e6:31:fb:d3:de:b6:35:3b:10:34:9a:17:16:9e:d9:
87:f7:92:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBVVPDfp3t1Bl5o8zb+cRC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi
YmIzN2IwHhcNMjYwODMxMDEwMDI1WhcNMjYwOTAxMDEwMDI1WjAzMTEwLwYDVQQD
EyhmZTE0YjM4YTc5ZmM1NjFlNDdkMjI2ZDJmNGI5MDg1NTVhMzkyNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+1GDucTEXKdKDqvotJerA/qwfn3
aXygoSEJGRv6fVvKShaUztdcL96yxa9F1JWaPUR++ay4BqrN7BPhHjbeNG3vNMzu
TbpSq/RhBVKrEma5BkCX7rytfAGExZGDUy03EnQCoX1b/k1JPh9xPvASV7X00Nqh
+pWNX6Psqz6HSqmOvbXz5P8XOIoCaSFHq2zal5WZQPKA/7lPFhXEAPkdw8MH1Mqc
aZH2ni/juJCXv5fgMqsytDukjJdAlDfvUtJ9YeQO8HbF41DpkLbw27w/9bDCSH4I
6e6TJRc58q78MkvknqtAk5bqTEO/5tkm7reOmKMCoY1Hle+ONH7+CJIwmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4Us4p5/FYeR9Im0vS5CFVaOSWYMB8GA1UdIwQY
MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt
OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0
LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/gXfVPe
Yhsi0Futn7UGIsgcbiR81UB9v1Woi30DeKzKVbrxQqC3OxeawoXo+ma+eMyg/Mys
PbqO/RNaZW2s3DdCj3QiDMlfQoA8+W2ZlQjrIpK72ecqOIFtYSzkiFNx6wx8/Vro
xExUAsPmT0IVvx6DlPzuCJynBy9HwH3w+mii3q2yGnCgHNkUQk+HMDtXLAQuWpnC
UGhgJ4tr/boqUGoWIqd3HCbMOykofJ4XvJrs8qNRcpNrlnYbN4HrcdQHiyKA78Jq
CZI5AjGCNse+m3OYmYR/jC1YhnsdYmTYw0vjtNrjOnRcPJlbeyoQ5jH70962NTsQ
NJoXFp7Zh/eS9g==
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:49:22 2026 by rpki-client