Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: 3Ey1WxnF4zxKRQQvZza0HWf/3Evq/Na8jTVmYX+vkOs=
Subject key identifier: 10:7C:73:3F:7B:17:B1:9C:90:4C:3A:B3:E6:10:50:4E:09:F9:06:5D
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 01A14E74EE8F998E2AEAFA56D12AE2802180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 12DC
Signing time: Sun 18 Oct 2026 10:00:48 +0000
Manifest this update: Sun 18 Oct 2026 10:00:48 +0000
Manifest next update: Mon 19 Oct 2026 10:00:48 +0000
Files and hashes: 1: bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa (hash: ebBDlPRlXWyLq2KbuwNyF2wojOacfcKBKPPYOJJnz0M=)
2: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: PA3Vl/tE8oqRmNJ8AwNCyxVQaX4n/g1V1xKUIgUq0JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:74:ee:8f:99:8e:2a:ea:fa:56:d1:2a:e2:80:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Oct 18 10:00:48 2026 GMT
Not After : Oct 19 10:00:48 2026 GMT
Subject: CN=107c733f7b17b19c904c3ab3e610504e09f9065d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:ef:5f:2a:5f:be:0c:71:c3:04:17:0a:ed:
4f:80:ab:9f:37:26:17:f6:df:0f:93:10:26:23:9b:
5e:34:24:9a:75:4b:b9:2c:63:f5:9b:60:2d:c0:56:
8c:b5:9b:1c:63:f5:d2:5e:d9:7d:ad:ef:9f:76:b1:
23:63:f6:67:fb:65:4b:6d:ca:cc:a6:cf:da:ee:15:
26:61:df:33:88:f6:df:ef:f9:93:7b:ea:6c:7c:ee:
b7:a5:15:d7:6b:f5:60:56:f4:6b:3f:86:ed:71:8a:
e1:6a:55:b3:2e:29:ab:8f:e4:a8:33:88:5d:63:63:
9f:dc:f0:90:dc:55:38:ab:ad:48:06:0e:f3:57:e1:
99:10:b4:66:4d:0a:a7:7d:37:9a:02:0c:67:9c:0a:
bf:0a:e5:98:9e:70:e8:b4:96:94:b7:1a:4c:8f:c0:
99:98:4e:68:1f:9f:c0:9f:8a:ef:df:84:48:cf:46:
c2:4f:aa:9a:9d:8e:38:a8:62:17:5c:04:8e:4a:68:
21:57:5f:22:b5:d4:cb:40:07:e1:29:d0:6c:e7:4c:
9d:46:43:7d:75:65:41:7a:36:af:97:67:c7:ab:28:
fd:2a:63:8d:32:03:ad:8b:25:ed:c2:50:54:34:d3:
99:65:ab:ee:f3:ab:34:9b:3e:22:a5:7f:92:b4:17:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7C:73:3F:7B:17:B1:9C:90:4C:3A:B3:E6:10:50:4E:09:F9:06:5D
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:20:96:6d:c6:84:dd:18:5d:81:96:0c:6c:06:c3:b7:58:
41:7e:32:4f:9e:9b:e0:54:3d:e3:88:37:f2:dd:e3:aa:e4:de:
f5:13:c7:1e:9a:ba:ee:bd:ac:b0:13:1a:d4:d4:8c:e5:0a:e3:
be:47:d8:33:9b:a1:4e:65:18:50:ab:d2:0c:94:f5:21:02:19:
bc:13:85:51:7a:a3:12:9e:fd:e1:dc:71:6e:a7:ec:03:df:b0:
b5:2c:1a:a4:aa:55:5e:b7:6b:3c:6f:70:5f:0a:df:ca:9e:9e:
9c:d2:94:ff:a1:4a:69:21:b4:39:01:16:30:53:87:d8:8b:fc:
ca:28:62:95:58:76:8e:48:55:ad:dc:20:b1:d8:b6:0c:7e:fa:
54:38:b4:7c:12:81:3a:15:fb:15:97:bc:49:91:a6:15:07:e6:
52:7c:08:0d:e8:5f:96:bb:2d:30:76:65:c0:f9:9b:f8:35:b8:
14:07:24:8b:da:9a:da:da:2d:dc:85:08:ce:a7:1a:f9:12:71:
9c:e4:4f:84:05:8e:66:dc:80:42:95:53:38:e1:9a:13:b4:8e:
6d:6d:78:34:d5:d1:1a:cb:7a:3a:ec:e7:29:16:ee:25:ca:55:
df:60:90:eb:ce:c2:b7:f4:66:72:a1:d2:29:43:41:4c:96:d9:
e5:1e:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:30:10 2026 by rpki-client