Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: rYnHvdxJhJhB+rnta5DwN+7E3utIBP5OlgLEZ32RRgg=
Subject key identifier: 9F:E8:78:F3:2F:A3:C8:84:A0:2A:6F:8F:80:19:2A:83:B3:7B:86:D1
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 01A08B9F8A513F61AB2B393E7C511BF4CD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 14:01:23 +0000
Manifest this update: Thu 10 Sep 2026 14:01:23 +0000
Manifest next update: Fri 11 Sep 2026 14:01:23 +0000
Files and hashes: 1: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: 2YvIis9DZJmBBp5mEnq8WdjOXrF7IReZnwE/+ADpKVE=)
2: sFhaHiuTZkyPvfZGeitPsQ50uDY.roa (hash: A+Ir0fHumCJtAvIDD0Uq1l9aMQ2n7on4GhmvbKyT6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:8a:51:3f:61:ab:2b:39:3e:7c:51:1b:f4:cd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Sep 10 14:01:23 2026 GMT
Not After : Sep 11 14:01:23 2026 GMT
Subject: CN=9fe878f32fa3c884a02a6f8f80192a83b37b86d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:f2:77:8c:31:fb:7e:13:14:68:36:82:39:
7d:72:6d:a4:a4:ea:f5:82:be:96:fa:12:d6:df:a5:
e0:96:6d:43:2d:bd:56:87:da:21:79:7e:28:02:37:
06:56:9d:d8:5e:99:8c:f3:b0:18:61:87:eb:f0:7a:
10:5d:06:73:0c:0e:1d:14:38:0f:94:9a:50:16:3e:
f0:98:0c:34:2e:14:bd:b1:78:c1:3c:2b:5e:b5:11:
27:44:b4:ad:c2:ad:99:d5:3a:d1:40:e0:ec:41:72:
18:5a:a6:27:c4:2f:df:8a:4e:ef:40:15:ea:eb:ac:
58:e3:46:f6:f9:07:3e:2f:8a:81:74:23:9a:8c:00:
34:b8:b1:46:bb:ad:59:94:1b:00:47:3f:62:b1:49:
56:7d:bc:aa:43:bf:a1:42:b8:41:10:7b:8e:0e:dc:
cd:b5:4c:45:ca:6f:c8:35:30:95:30:d4:f4:e3:3a:
47:19:22:de:4b:c6:15:aa:c2:44:0b:fd:34:39:d7:
6d:27:3b:b6:c6:c2:ff:24:89:b0:16:fa:1f:88:85:
a6:2a:41:82:75:1b:cd:ee:cb:34:97:d2:63:e8:33:
da:1b:f5:29:51:57:64:c2:4e:83:02:16:a1:c9:55:
9f:ee:20:f6:e7:ad:a7:1c:53:b6:23:c5:d4:15:63:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:78:F3:2F:A3:C8:84:A0:2A:6F:8F:80:19:2A:83:B3:7B:86:D1
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:84:fe:c8:2f:74:a7:45:d2:b2:16:22:af:99:ea:88:fd:e7:
73:d4:0a:b0:97:35:81:ea:5a:7a:d3:5a:db:f7:fa:43:a0:90:
38:55:78:47:ba:e3:b0:6c:ca:0c:2e:a3:87:0b:35:c7:db:02:
4b:e2:d5:f8:66:ae:fa:b9:41:90:c7:01:27:da:81:35:dc:f3:
2c:45:68:8c:db:5a:7f:72:8e:ba:55:5a:cb:6b:bd:6a:10:99:
2c:1b:dc:3a:8c:0b:df:95:b6:c5:b8:45:eb:81:af:94:31:39:
1c:3d:6a:4a:26:16:12:8c:0a:d0:08:b6:ba:1f:61:e7:30:0e:
ab:ef:19:cd:2c:aa:36:8a:76:b6:e5:81:4e:5f:79:18:17:c4:
58:d0:74:e8:0d:5a:fc:eb:5d:49:4d:e7:74:23:e9:02:c9:2f:
f6:29:ef:3c:b7:61:1b:92:81:39:3d:d5:86:86:69:44:ed:7b:
a1:6c:c5:04:40:8a:3c:d0:a7:eb:2e:46:80:af:62:8a:3d:b5:
b8:04:2c:82:f5:66:81:88:b9:ad:e6:12:6c:e1:d2:1e:01:2b:
e2:24:88:6b:b1:4b:6b:09:54:f8:f5:3d:b0:57:dd:78:fd:cd:
c8:31:01:13:86:df:57:d0:5b:88:fa:f3:d4:b1:b1:42:af:b9:
c7:a0:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:04 2026 by rpki-client