Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: QQeyQtSks4qHQtUSqsUUkn9gIi1XkNvvPNJT4boJHwE=
Subject key identifier: 7E:53:72:6B:57:D0:46:F2:24:D3:D0:3E:B3:F3:4B:80:90:9C:A6:E9
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 01A16B6D1812BF605D68EB248788CF2DAAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 1AD4
Signing time: Sat 24 Oct 2026 01:01:14 +0000
Manifest this update: Sat 24 Oct 2026 01:01:14 +0000
Manifest next update: Sun 25 Oct 2026 01:01:14 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: YC944o/shkBX7XrRFEj89toc7tluiGKuoXKOFeLHb+I=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6d:18:12:bf:60:5d:68:eb:24:87:88:cf:2d:aa:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Oct 24 01:01:14 2026 GMT
Not After : Oct 25 01:01:14 2026 GMT
Subject: CN=7e53726b57d046f224d3d03eb3f34b80909ca6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:c0:81:88:c4:08:4f:9a:60:d6:61:b5:a4:
67:0d:64:5e:1e:93:5d:13:c9:23:5c:fd:31:ab:c8:
4a:fb:fc:d6:26:53:7f:1f:f9:36:60:18:41:7d:80:
ea:d9:b7:4b:83:01:78:95:d7:17:90:56:5e:bd:fe:
fd:0e:e0:e5:ae:d2:58:c6:f6:e6:0c:e5:1a:a8:80:
30:cd:21:1b:36:24:7f:9e:02:40:21:b3:cf:8a:c9:
26:3b:e7:c4:86:f0:05:91:1e:b5:e2:92:20:16:1c:
95:16:8b:6e:26:be:81:42:af:54:17:db:c4:c9:d8:
da:05:76:b6:e3:14:30:5f:e1:1f:bc:f6:55:44:e5:
f1:44:db:2e:66:46:96:ac:2a:7e:4e:1c:02:18:81:
d8:7f:d7:5f:f9:ee:bb:cd:51:eb:2d:a0:07:3a:d5:
87:36:e6:1a:58:2a:98:39:a0:5e:4e:f4:d4:a2:09:
52:63:e5:4a:68:c7:19:a2:a8:bf:1d:c7:c8:15:b2:
68:4f:14:d2:5e:3b:07:8b:93:12:a9:f3:25:07:14:
17:da:db:40:0f:7f:02:83:c0:52:65:cc:f7:df:47:
47:0c:53:65:e7:7c:a4:54:6a:2c:2d:6e:d6:86:51:
22:ee:62:ca:5f:bc:2d:f9:d5:4c:65:46:ff:78:dc:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:72:6B:57:D0:46:F2:24:D3:D0:3E:B3:F3:4B:80:90:9C:A6:E9
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:14:69:3b:c6:c2:fd:e5:de:49:d6:cf:b5:2c:16:99:e5:c3:
c4:fd:9f:40:39:3f:e2:cf:30:1b:54:30:a3:9c:fd:5b:1a:5f:
f5:6f:d4:f2:46:2b:79:66:ff:c6:5b:48:a6:31:72:18:a7:de:
d9:26:a5:ee:c8:65:61:d8:fa:e7:58:ba:fa:ad:0d:b3:e1:ff:
41:ca:c1:67:45:bd:c1:92:6f:fe:d0:9d:65:fc:ae:a9:3c:04:
97:88:10:47:56:24:b7:b5:4a:58:35:0d:78:fb:a0:91:b5:21:
f2:1b:13:77:db:8c:c4:e9:ef:57:03:ff:7d:b7:89:e7:4a:19:
93:cb:d5:b3:eb:25:e7:81:c2:b9:69:ab:94:8c:d5:70:ba:cd:
6e:f3:d9:d8:e5:82:8f:10:51:0a:14:f6:e2:eb:e4:32:a7:07:
61:45:c9:0b:23:fa:9e:03:03:af:df:b6:e6:05:0b:93:da:bd:
37:d2:f4:c5:e7:39:23:a4:ad:f3:0e:aa:c8:de:18:67:bb:77:
54:39:12:69:d5:f2:05:2d:2d:d7:d1:4c:c1:9b:43:66:d8:13:
b2:bd:27:d1:bf:cc:b3:87:91:01:1a:94:ba:d9:35:b3:ae:71:
ab:dd:38:1a:c4:e2:8f:69:1d:45:48:25:6e:6c:92:09:6f:8d:
fb:08:02:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFrbRgSv2BdaOskh4jPLarSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjYxMDI0MDEwMTE0WhcNMjYxMDI1MDEwMTE0WjAzMTEwLwYDVQQD
Eyg3ZTUzNzI2YjU3ZDA0NmYyMjRkM2QwM2ViM2YzNGI4MDkwOWNhNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmDAgYjECE+aYNZhtaRnDWReHpNd
E8kjXP0xq8hK+/zWJlN/H/k2YBhBfYDq2bdLgwF4ldcXkFZevf79DuDlrtJYxvbm
DOUaqIAwzSEbNiR/ngJAIbPPiskmO+fEhvAFkR614pIgFhyVFotuJr6BQq9UF9vE
ydjaBXa24xQwX+EfvPZVROXxRNsuZkaWrCp+ThwCGIHYf9df+e67zVHrLaAHOtWH
NuYaWCqYOaBeTvTUoglSY+VKaMcZoqi/HcfIFbJoTxTSXjsHi5MSqfMlBxQX2ttA
D38Cg8BSZcz330dHDFNl53ykVGosLW7WhlEi7mLKX7wt+dVMZUb/eNxmVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5TcmtX0EbyJNPQPrPzS4CQnKbpMB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRRpO8bC
/eXeSdbPtSwWmeXDxP2fQDk/4s8wG1Qwo5z9Wxpf9W/U8kYreWb/xltIpjFyGKfe
2Sal7shlYdj651i6+q0Ns+H/QcrBZ0W9wZJv/tCdZfyuqTwEl4gQR1Ykt7VKWDUN
ePugkbUh8hsTd9uMxOnvVwP/fbeJ50oZk8vVs+sl54HCuWmrlIzVcLrNbvPZ2OWC
jxBRChT24uvkMqcHYUXJCyP6ngMDr9+25gULk9q9N9L0xec5I6St8w6qyN4YZ7t3
VDkSadXyBS0t19FMwZtDZtgTsr0n0b/Ms4eRARqUutk1s65xq904GsTij2kdRUgl
bmySCW+N+wgCnw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 09:55:11 2026 by rpki-client