Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: IXkBUDMBmFKohlMxgnphru0KLPtTNQ90ED0ctFtwQv8=
Subject key identifier: 45:A5:AC:A8:9C:65:29:AD:E5:89:03:6F:EC:13:B7:88:1E:C8:B5:CE
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019DE5218F044E60D32BE3F4E468F5EF6414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 1117
Signing time: Fri 01 May 2026 20:01:14 +0000
Manifest this update: Fri 01 May 2026 20:01:14 +0000
Manifest next update: Sat 02 May 2026 20:01:14 +0000
Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: I3u5yF+hlroeMzKCP+pADg3jFb4Mi6YRgJlm6t+M9VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e5:21:8f:04:4e:60:d3:2b:e3:f4:e4:68:f5:ef:64:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: May 1 20:01:14 2026 GMT
Not After : May 2 20:01:14 2026 GMT
Subject: CN=45a5aca89c6529ade589036fec13b7881ec8b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:d2:72:37:22:f9:20:af:d7:2a:0d:7e:93:
60:40:89:31:c5:0a:b2:ca:e6:8f:32:69:93:cd:c4:
5f:2e:46:df:1c:e2:70:07:fe:59:bb:65:05:51:c0:
9d:db:35:12:c0:94:25:77:84:b9:c3:f8:ca:1d:5d:
26:22:df:21:b5:41:fd:01:97:02:9e:72:63:01:e4:
a5:3f:ec:13:3d:78:2b:6c:c0:0e:c6:eb:65:d2:7b:
55:09:62:6d:29:49:09:3d:db:37:bf:0b:72:ae:6d:
3f:87:50:ff:bb:f1:f8:31:ae:07:d0:42:0f:43:cd:
57:35:6a:c5:93:cb:fb:fd:a9:ba:3f:56:a5:43:55:
65:ab:87:11:fb:38:e9:24:d9:76:96:18:1f:8c:cb:
0b:54:3d:bb:6a:16:19:72:5e:fa:69:28:38:e1:b5:
78:3e:71:83:dc:c3:68:68:67:03:e8:38:86:d2:26:
eb:cb:bc:b8:be:34:83:74:3c:58:34:c9:d2:93:a7:
24:da:ed:fa:ed:68:48:23:2f:93:e0:47:ad:d7:c7:
c2:55:19:ef:41:a1:34:7c:31:e4:b9:c1:43:a9:7c:
d2:a2:17:e7:a1:14:37:33:b6:97:ed:8a:0c:a1:d8:
ff:f3:72:49:2a:bc:05:78:9f:7e:cc:8b:d6:b6:f3:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A5:AC:A8:9C:65:29:AD:E5:89:03:6F:EC:13:B7:88:1E:C8:B5:CE
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:89:53:63:4a:db:0c:d2:49:6e:ec:43:b9:87:ac:7e:34:72:
6a:e8:3f:82:dc:37:d1:6f:28:da:9d:76:3f:81:0d:71:7c:49:
73:7f:8f:ad:55:f0:e3:99:49:e1:98:61:69:5d:de:94:c9:7f:
0c:7f:47:33:b4:5e:33:df:08:bb:4d:8b:ee:79:20:3f:0c:9a:
f5:0b:36:fc:0e:85:ca:61:21:64:7d:50:6f:5d:33:a9:b9:45:
10:a3:d3:3d:e0:4d:b7:39:61:78:e6:d3:3f:39:f0:ab:40:37:
98:2a:98:9f:44:3a:76:56:1a:eb:0a:5e:d5:d3:2a:3c:4b:11:
f5:79:c2:ca:91:7d:f5:2b:0b:1e:63:d5:82:5d:40:3e:09:c0:
96:29:29:1e:fa:60:b2:73:ce:b7:e7:9e:9d:92:5b:91:58:44:
66:4b:92:dc:ab:53:d5:ac:2c:c3:a2:13:be:0f:5a:20:09:79:
9e:78:eb:ed:59:e3:b2:a0:95:b0:a2:6a:00:ec:24:78:b1:50:
2c:55:ef:f5:d5:18:d6:eb:53:bd:db:d8:22:e1:3d:e8:7e:43:
58:19:c2:af:97:df:a4:2d:1d:44:26:d9:f2:de:da:14:4f:b9:
b4:a6:b8:1d:f3:79:5d:ef:f1:28:1e:ba:01:76:09:b3:fa:d3:
f5:01:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 01:29:50 2026 by rpki-client