Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: e2HpaCDrQw1ku1QuJ1CbyRY20eQaFubfZnlnd2Hhchk=
Subject key identifier: 7B:66:64:BB:54:44:E2:6C:ED:F9:2C:6C:47:17:56:9A:D9:5E:FE:EC
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019DB16B2B8487943750CD2769FD2DFE71E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 18E6
Signing time: Tue 21 Apr 2026 19:01:23 +0000
Manifest this update: Tue 21 Apr 2026 19:01:23 +0000
Manifest next update: Wed 22 Apr 2026 19:01:23 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: OmGL9+fYDA2qaBMqMLnVbtwBoAmp36oInKZ4pTtZFdM=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:2b:84:87:94:37:50:cd:27:69:fd:2d:fe:71:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Apr 21 19:01:23 2026 GMT
Not After : Apr 22 19:01:23 2026 GMT
Subject: CN=7b6664bb5444e26cedf92c6c4717569ad95efeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:52:aa:d6:22:d3:74:c3:85:5f:b1:96:74:
70:58:8e:4f:19:dc:3f:42:6f:c4:0e:62:86:9a:73:
66:8a:4e:1c:93:c9:31:1a:a5:d3:25:a5:65:fc:68:
e2:91:4d:dc:87:46:dd:70:88:a0:e9:0b:6d:7a:91:
53:95:02:21:4d:a0:cc:28:b8:c1:03:f7:fb:92:45:
3f:57:16:85:6e:fb:07:21:3e:2b:35:a6:32:c3:5f:
ec:65:aa:e5:d8:9f:0e:f1:15:ec:9b:2f:a0:3b:e7:
bf:0f:c1:28:d0:99:a9:b4:b0:12:37:a9:81:94:1e:
46:dd:32:8e:31:6b:d0:7d:2e:54:26:54:4e:d6:d1:
43:bd:fe:6c:cd:c1:87:b1:b5:db:6b:f1:fe:af:d4:
24:45:74:10:27:31:65:9f:77:f6:c8:5d:ff:b3:cd:
75:d9:07:2f:5b:a0:5b:1e:68:68:ff:20:76:81:45:
34:69:0a:fb:2f:b0:9e:53:bf:78:19:22:94:85:60:
f1:f8:6d:27:a6:ad:7c:69:45:f2:2f:7f:f0:a2:b4:
6c:18:0d:4a:6f:7d:a3:6b:94:05:fd:de:80:44:f4:
14:c9:2c:e7:ef:07:f1:7a:05:87:ae:c9:e6:7f:4e:
6a:8f:4a:c1:e1:64:67:26:04:b1:57:40:6b:2d:3a:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:64:BB:54:44:E2:6C:ED:F9:2C:6C:47:17:56:9A:D9:5E:FE:EC
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:51:75:50:cf:f1:9c:9a:3d:78:72:d5:42:b5:c6:d2:b2:27:
81:84:88:43:b2:94:19:89:90:49:b0:13:97:5e:89:a0:ec:99:
6e:66:26:42:bc:9d:78:e3:0e:80:0e:f6:fa:38:2c:67:85:b6:
2d:a9:f5:ce:91:a1:7b:bd:08:1b:fa:24:a3:91:c1:52:af:87:
68:d4:66:1a:7e:5a:f8:7d:b2:0a:46:9c:c8:fc:f1:f6:d0:11:
a9:37:a3:aa:22:6b:96:0f:f1:3f:f1:f2:68:2b:90:36:47:22:
21:20:18:77:28:70:47:07:f1:8e:f4:6b:a0:b7:cc:fa:14:dc:
de:da:3a:36:59:98:d6:86:ec:08:0d:fc:5b:3d:ba:3a:34:5a:
73:aa:06:2b:92:8f:e5:b1:a0:39:00:d2:60:09:53:40:e5:5e:
f6:e5:d7:e6:71:92:bb:32:dd:2d:63:4d:14:2d:2e:df:c4:cb:
d7:7e:c1:cc:56:76:b5:e6:00:96:7a:44:1f:58:c7:12:ef:45:
12:56:51:4b:bf:42:5b:f5:fb:3f:c8:56:80:c8:e7:1b:a0:ea:
0f:22:40:a2:23:d5:f8:23:44:69:0e:9e:c0:59:8d:8d:46:d0:
98:a2:f4:90:1b:b5:59:69:d4:df:17:a4:97:0c:36:d2:cd:bd:
65:b8:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:44:28 2026 by rpki-client