Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: 77pA64Tu9Jd8tkwexAhRyCF6WN6pBIC/YDDwCIsQNxg=
Subject key identifier: FA:B9:86:5E:7A:50:1B:03:4B:96:FE:A5:3D:07:C2:C4:ED:71:D0:13
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 01A08979ABE3A76BD59630AFDF83AAAB81D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 04:00:47 +0000
Manifest this update: Thu 10 Sep 2026 04:00:47 +0000
Manifest next update: Fri 11 Sep 2026 04:00:47 +0000
Files and hashes: 1: 9xtV_Pla1WgMl3ubvegTPHITTAQ.roa (hash: AXS+nn2vCSazRZVNivUy+3jk/liVHM3b04sQJUOyc0U=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: AGQAt/cM+cX9dZWfKIU4jyKh5FtwOxzdyZXlndP/gQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:ab:e3:a7:6b:d5:96:30:af:df:83:aa:ab:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: Sep 10 04:00:47 2026 GMT
Not After : Sep 11 04:00:47 2026 GMT
Subject: CN=fab9865e7a501b034b96fea53d07c2c4ed71d013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:0f:ee:3c:fd:d8:0f:03:82:c6:bb:e7:38:
08:ac:ed:7a:f2:d5:22:f1:d7:2a:76:80:c6:38:b6:
e0:6f:66:9d:13:2d:fb:50:0b:e8:aa:dd:22:f5:77:
94:e5:4e:eb:48:5a:f5:24:1e:a2:69:3f:53:d3:b0:
8a:d0:eb:ee:3f:be:c8:69:de:c4:82:ea:5d:24:27:
e8:ee:67:32:55:57:5b:11:f6:52:ed:d7:60:d4:f4:
10:10:48:61:e3:63:0e:de:65:76:57:4a:61:5f:15:
d6:fe:61:8f:52:4e:30:5d:c5:23:5f:b7:92:41:de:
33:49:44:90:fa:52:a4:cc:a4:cd:6c:f0:1d:d0:8f:
7c:5d:fa:e2:4c:fa:cf:6a:63:0e:cb:91:e1:a6:74:
27:cf:9e:91:90:b2:4d:84:cc:4f:b4:92:86:bb:31:
5c:12:cd:62:16:a0:41:1e:92:6b:90:34:bb:91:52:
c1:a4:73:14:1e:61:b7:85:61:da:33:2c:a4:c3:ec:
d7:4a:82:a3:20:6c:e5:97:fb:c8:0a:b0:c4:67:b5:
b3:65:82:e6:c3:87:f0:4e:7a:9c:ec:69:c8:c2:aa:
67:15:2d:3c:26:c6:18:ea:7a:e8:ef:8a:90:e9:49:
43:98:9e:84:8a:96:9d:43:6c:ff:d6:90:52:bf:2f:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:86:5E:7A:50:1B:03:4B:96:FE:A5:3D:07:C2:C4:ED:71:D0:13
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f3:a3:9c:7d:62:bb:5f:5f:ad:54:3c:ef:f8:35:fd:5b:21:
46:b6:e9:0a:44:83:f8:ce:03:08:19:80:88:09:26:c8:fe:53:
06:f8:32:57:f1:90:c9:6b:78:ae:43:76:96:be:f6:b4:6a:4c:
f6:30:8b:2d:ba:25:b9:02:82:d8:1e:cd:6a:1d:94:6d:8a:91:
cf:ec:93:a7:ee:23:1f:1a:ac:3a:12:c6:c1:e0:2b:a8:54:1f:
31:7c:3b:fb:13:3c:d8:21:59:be:46:28:36:2f:24:5d:e7:9e:
d9:81:56:9d:03:ab:aa:ec:ac:15:c2:91:9d:28:3c:cd:dd:01:
f2:a1:cb:d8:d1:61:fd:b8:12:a9:68:99:75:78:11:25:63:00:
77:97:c1:28:26:13:4b:7a:8e:08:ae:9e:31:65:b1:a2:dd:71:
f6:00:01:db:cb:f7:d7:87:89:f2:2e:7f:04:55:38:b5:45:d2:
d6:80:93:f3:28:af:e7:b3:86:8b:d1:3e:99:c3:c9:2a:c5:a8:
ac:b0:26:7e:69:e5:7b:4e:cb:c7:a5:79:fa:9c:b5:3d:8a:e4:
92:32:30:7d:1a:7b:89:1c:4b:a1:a8:60:f3:a5:0e:d1:d3:ae:
80:91:6e:01:11:72:a3:87:f3:8a:91:3e:92:d7:12:d7:de:01:
d6:35:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:51:02 2026 by rpki-client