Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: qmn0qcEt93KbUAoSGH+C+BdFnIbJk2rT5AvdR0GjgUo=
Subject key identifier: 99:09:44:CB:D2:D6:BE:92:B5:F9:7A:62:D7:34:A3:66:EA:29:7B:44
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019CFB74F0DEB5C2C4ED20D74C8E4CB7DDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 109E
Signing time: Tue 17 Mar 2026 11:01:10 +0000
Manifest this update: Tue 17 Mar 2026 11:01:10 +0000
Manifest next update: Wed 18 Mar 2026 11:01:10 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: qH/aQqPc5iKHpToPdm04eCDPMXoY+RB/SjteJmrjfNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:74:f0:de:b5:c2:c4:ed:20:d7:4c:8e:4c:b7:dd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Mar 17 11:01:10 2026 GMT
Not After : Mar 18 11:01:10 2026 GMT
Subject: CN=990944cbd2d6be92b5f97a62d734a366ea297b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:8e:ed:8a:3c:34:5f:01:f3:d5:3d:48:1f:
f1:92:a8:36:1a:69:de:2e:53:5d:bc:43:3e:49:ad:
ce:17:96:13:64:cc:37:13:7e:ea:a1:31:36:f8:e2:
5c:31:b0:b9:39:1d:e9:c2:97:6f:c3:cf:39:01:39:
86:1d:f0:d2:11:86:41:74:59:8e:29:3e:47:9e:d1:
dc:cb:11:e6:fa:e7:03:ae:ad:e6:3d:7f:02:f8:2b:
e2:60:8b:f4:6c:55:d7:60:59:65:f8:80:49:63:20:
8d:04:6d:42:a6:2e:b0:f4:ed:35:1d:ca:34:3e:6f:
fd:22:c9:ac:18:89:76:97:c0:7e:5b:20:87:3e:c2:
1e:59:03:f1:83:31:0c:7b:36:bf:c3:de:7f:94:c7:
df:dc:09:a3:81:ab:ca:ff:e9:02:07:4b:12:a8:16:
65:d3:58:93:e8:85:53:48:e7:f4:45:dd:e9:59:d3:
a6:0b:25:69:3b:9d:bc:2e:dc:b9:f9:a3:a3:cf:d3:
23:7a:7e:75:bb:ca:ae:ef:ea:eb:d0:f9:ef:c7:95:
68:58:d6:bb:3d:bd:88:e0:ad:5b:80:45:ee:f6:5f:
2b:c0:13:74:70:97:cb:5f:7d:25:3e:92:47:06:91:
1b:f1:e9:90:23:bd:8c:e7:a8:95:44:e0:81:15:6d:
ea:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:09:44:CB:D2:D6:BE:92:B5:F9:7A:62:D7:34:A3:66:EA:29:7B:44
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5a:e6:3c:49:db:97:a9:0d:e3:be:9e:2b:52:36:c7:01:ad:
f3:ab:1d:ab:af:46:03:49:c5:c2:ec:8c:37:59:d9:f4:21:59:
2e:3c:06:d2:df:84:25:8f:3f:22:be:d5:aa:1a:55:cf:02:91:
16:ee:31:e2:39:9b:a6:0c:99:42:e4:0c:78:ac:88:b7:f9:3b:
ed:40:f9:0e:a9:c6:5e:0c:21:d5:50:97:f3:97:29:07:fd:33:
6d:9b:cb:a2:8b:81:c5:f5:a3:8f:28:31:e7:2f:7c:7e:66:a1:
6a:5b:35:c2:e4:eb:44:8b:de:7b:40:da:68:cf:be:0b:a3:ba:
03:f0:c2:d5:c4:8d:0e:f8:75:8a:be:9a:17:36:11:ec:51:5a:
de:e9:49:22:d5:d5:fa:c7:2f:2b:40:ce:ac:08:a2:9b:5c:1a:
a9:d9:e1:4a:c5:c2:ea:06:9a:ce:b2:ef:ca:1b:22:cb:5b:08:
e5:93:4a:c9:05:ac:9a:80:db:86:c9:3f:f4:40:bd:a0:52:97:
8c:ae:9c:d2:7c:61:27:12:b9:10:28:dc:e2:19:da:fe:8c:b3:
30:eb:a6:72:1f:5a:8b:41:e2:9f:67:95:a4:e7:6c:fd:89:bd:
c0:b8:2b:d0:0b:55:a6:32:e3:7e:85:8f:25:80:56:0c:4d:ed:
10:45:82:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz7dPDetcLE7SDXTI5Mt93+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi
YmIzN2IwHhcNMjYwMzE3MTEwMTEwWhcNMjYwMzE4MTEwMTEwWjAzMTEwLwYDVQQD
Eyg5OTA5NDRjYmQyZDZiZTkyYjVmOTdhNjJkNzM0YTM2NmVhMjk3YjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCGO7Yo8NF8B89U9SB/xkqg2Gmne
LlNdvEM+Sa3OF5YTZMw3E37qoTE2+OJcMbC5OR3pwpdvw885ATmGHfDSEYZBdFmO
KT5HntHcyxHm+ucDrq3mPX8C+CviYIv0bFXXYFll+IBJYyCNBG1Cpi6w9O01Hco0
Pm/9IsmsGIl2l8B+WyCHPsIeWQPxgzEMeza/w95/lMff3AmjgavK/+kCB0sSqBZl
01iT6IVTSOf0Rd3pWdOmCyVpO528Lty5+aOjz9Mjen51u8qu7+rr0Pnvx5VoWNa7
Pb2I4K1bgEXu9l8rwBN0cJfLX30lPpJHBpEb8emQI72M56iVROCBFW3q5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkJRMvS1r6Stfl6Ytc0o2bqKXtEMB8GA1UdIwQY
MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt
OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0
LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1rmPEnb
l6kN476eK1I2xwGt86sdq69GA0nFwuyMN1nZ9CFZLjwG0t+EJY8/Ir7VqhpVzwKR
Fu4x4jmbpgyZQuQMeKyIt/k77UD5DqnGXgwh1VCX85cpB/0zbZvLoouBxfWjjygx
5y98fmahals1wuTrRIvee0DaaM++C6O6A/DC1cSNDvh1ir6aFzYR7FFa3ulJItXV
+scvK0DOrAiim1waqdnhSsXC6gaazrLvyhsiy1sI5ZNKyQWsmoDbhsk/9EC9oFKX
jK6c0nxhJxK5ECjc4hna/oyzMOumch9ai0Hin2eVpOds/Ym9wLgr0AtVpjLjfoWP
JYBWDE3tEEWCbg==
-----END CERTIFICATE-----
Generated at Tue Mar 17 15:32:27 2026 by rpki-client