Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: +okr3tU5Zq8Ex+dSb/+pHFhyEn1fDP6blPTzC/xFHds=
Subject key identifier: F2:82:A8:61:08:25:9E:C3:37:01:75:B8:2D:9F:21:82:B7:73:4F:3C
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 01A08A5588E5C91BEA66F017B1CCFA75E59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 08:00:56 +0000
Manifest this update: Thu 10 Sep 2026 08:00:56 +0000
Manifest next update: Fri 11 Sep 2026 08:00:56 +0000
Files and hashes: 1: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
2: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
3: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
5: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: hk8EeVnsOVLdPoLIAoeX/HJycZNBFIQMMfdGghbvR6w=)
7: qE8RROX_Abt_X7_dq6_I4v_syO0.roa (hash: j+dQK6D8sHBmyU5YdzKLTUPT+QDZeyjIoFCaIOac7LY=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:88:e5:c9:1b:ea:66:f0:17:b1:cc:fa:75:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Sep 10 08:00:56 2026 GMT
Not After : Sep 11 08:00:56 2026 GMT
Subject: CN=f282a86108259ec3370175b82d9f2182b7734f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:d7:0c:44:f4:0c:35:80:48:79:a4:5a:12:
7f:6c:db:89:b7:06:88:c7:ca:95:e4:60:fc:fd:ae:
b2:a4:da:1d:d5:5b:6a:a6:a6:21:2c:1a:ab:9c:d7:
c0:fd:8f:4a:dc:2e:c2:61:1f:94:14:5a:c3:48:ab:
94:e1:f7:10:3f:27:2e:82:6a:14:4d:85:c4:38:55:
9a:51:12:c5:14:05:b5:99:5d:ee:71:71:50:9c:cb:
cb:f5:c8:3a:8f:a0:39:e2:a0:13:4d:ef:42:9d:7d:
ba:fe:0f:ef:42:6c:ca:af:68:b1:6f:93:07:89:fd:
af:fc:fe:ca:65:92:38:b4:a7:ef:74:c7:85:2d:0e:
b6:49:a5:11:dc:59:b7:96:77:96:95:47:3b:97:57:
d4:47:46:ac:95:80:b7:97:3b:ab:a5:6e:a4:dc:c6:
70:10:1c:3b:9e:18:a7:80:4b:0c:81:dc:0a:c5:ca:
40:8f:3f:c5:f8:a7:9e:5c:25:eb:a0:fd:26:95:bf:
31:9d:6c:c0:55:11:92:ce:ff:dd:bf:bc:c9:f4:24:
6e:b2:0c:f2:0b:de:b1:34:c3:56:75:e5:0f:3b:ae:
d3:cd:0f:63:6c:e6:af:80:d9:37:08:43:69:6b:3e:
cd:29:d3:db:0b:96:c9:a4:0b:3e:dd:ec:a8:81:6d:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:A8:61:08:25:9E:C3:37:01:75:B8:2D:9F:21:82:B7:73:4F:3C
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ce:cb:32:49:13:70:4b:cc:2b:7d:74:69:3b:bc:92:d7:49:
1d:43:38:db:46:18:84:b7:cc:9c:d0:3b:0b:d5:86:33:82:7c:
68:a6:51:60:80:cc:53:ca:c2:64:32:90:7c:4c:52:b0:ba:88:
b7:96:64:d5:ce:1b:31:4c:78:b6:93:73:85:bd:16:8c:29:78:
ee:99:c3:66:df:19:c0:92:86:ea:2f:86:89:10:a7:76:06:3a:
00:e2:f6:25:f2:4c:85:a0:8d:15:32:ef:21:78:1e:22:ba:95:
89:1d:52:60:d7:8e:8f:91:eb:b0:6d:82:67:86:d0:3b:f0:03:
71:8c:ec:19:52:09:07:af:f8:51:05:fd:5a:71:09:4d:4e:9c:
da:f5:a5:ac:92:79:e4:2a:87:57:f8:5b:b5:15:81:11:b2:4c:
d0:e7:da:4f:ed:97:47:fe:e0:4d:52:e0:69:ae:7a:72:20:06:
59:2a:26:a0:11:e8:a5:cb:7b:17:7e:06:79:51:95:d6:1c:cb:
a9:83:8a:45:24:e3:56:06:7d:a2:9e:11:eb:82:c7:08:16:36:
bf:7a:d8:63:42:b1:ec:51:b7:fe:79:63:32:3f:77:b0:bf:f0:
e2:39:6f:41:2b:8d:5a:88:ee:b3:d4:b6:a9:89:c9:18:50:6b:
a5:76:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:51:14 2026 by rpki-client