Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: kOqxsAhGZpUtN/mnF9P3Zn1lWcSTfr4AqYHkLwMl6Hc=
Subject key identifier: 6F:8F:A0:A3:08:2A:A9:DC:6D:C3:68:82:D2:5E:90:20:1A:3F:EA:62
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 01A06E711B3BE3237D129CACB7425F8A6EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 1A51
Signing time: Fri 04 Sep 2026 22:01:41 +0000
Manifest this update: Fri 04 Sep 2026 22:01:41 +0000
Manifest next update: Sat 05 Sep 2026 22:01:41 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: AYZH1itB9ab7Eo69315t0z2mJgd+xw3bvKDiqiDQR80=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:1b:3b:e3:23:7d:12:9c:ac:b7:42:5f:8a:6e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Sep 4 22:01:41 2026 GMT
Not After : Sep 5 22:01:41 2026 GMT
Subject: CN=6f8fa0a3082aa9dc6dc36882d25e90201a3fea62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:69:7d:3f:7c:e3:a0:dc:c3:8a:a6:ea:5b:
9e:4d:f8:62:d6:52:25:f1:aa:6c:07:76:2b:b5:ac:
cd:f4:be:b3:c3:87:b4:c0:3f:39:76:e0:7e:a7:d2:
a3:db:0a:fd:dc:f2:e0:ab:f8:9e:bf:ee:79:fc:a6:
82:ab:d6:2d:3a:7c:b0:47:67:20:e2:63:08:15:7b:
d3:54:d3:bd:13:5e:cb:c1:93:52:cd:9f:94:0e:0f:
ae:cb:9f:7a:25:8a:91:be:39:00:13:64:1a:1d:8f:
e4:a1:f3:40:3f:0b:6a:a5:33:f1:56:24:68:30:a1:
76:d1:77:fa:d5:cd:fb:8d:85:06:9b:77:50:c1:eb:
1b:37:b2:f1:df:34:2f:e0:4b:72:63:7a:2a:b6:2f:
63:c6:87:49:83:0c:e1:5e:a4:44:2e:75:2e:13:c7:
30:13:1c:df:bc:9a:84:21:47:a9:3c:d3:0d:c3:26:
b4:22:2e:30:3e:c3:85:d8:38:bf:e4:e9:be:bf:bf:
dc:08:67:ff:de:e2:77:df:2d:25:5f:7e:39:73:be:
9a:62:9e:f5:48:f6:d1:10:f0:80:70:e4:7c:07:99:
32:08:74:15:c5:c1:bd:85:7a:87:6a:36:0b:6b:88:
15:f8:45:51:df:6e:9a:6c:bc:7e:d5:ab:0b:5d:b0:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:A0:A3:08:2A:A9:DC:6D:C3:68:82:D2:5E:90:20:1A:3F:EA:62
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:76:cd:f0:c9:da:58:4e:b4:76:70:f1:ad:88:aa:d6:a3:00:
72:55:27:a3:67:13:83:51:68:27:35:76:90:09:92:40:2a:0c:
75:14:8d:a1:26:84:98:ce:66:cc:cb:6c:db:09:2b:89:10:b5:
26:11:6b:1e:b6:89:6d:2d:3e:e8:62:73:d3:21:e0:dc:af:3b:
22:63:83:98:f7:dc:90:94:ff:14:14:d1:72:3a:d0:25:a4:aa:
50:10:c1:3e:61:a8:d0:0a:30:24:50:92:20:1b:31:f3:cd:c8:
49:eb:4a:fa:07:70:f4:96:3e:f1:ea:6e:5a:96:47:da:3c:df:
e6:36:12:e5:0b:cf:c1:d4:cd:19:5b:f5:ec:39:79:37:ce:fe:
d6:d6:54:6d:65:0f:ce:3a:50:07:a2:e1:48:4e:78:bd:60:ce:
89:73:45:5f:98:7c:1c:b8:c3:26:41:57:a6:45:87:cf:4c:97:
41:63:42:44:71:f6:29:ff:f4:c8:6b:7b:9f:2f:3a:33:8f:55:
75:a2:98:1a:f3:1b:ae:26:3f:88:68:d0:bb:15:6d:76:cc:73:
b3:ad:d0:a7:4a:91:17:a9:0f:85:47:8b:c5:82:a6:e0:6c:11:
14:63:11:4b:14:3e:a3:2b:d7:a0:55:f6:7c:16:69:0c:4f:16:
16:c1:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:04:26 2026 by rpki-client