Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: Bu1bEs8Y2hSExR8VwlmHjyVp0xb0GAcfrZ4CecF0Z+s=
Subject key identifier: 84:9E:7A:07:26:53:28:1D:0D:C4:27:DC:71:69:10:C9:9A:BE:AA:28
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 01A152F655A1A52AD4E1B680BB48AEEC0A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 1AB3
Signing time: Mon 19 Oct 2026 07:00:37 +0000
Manifest this update: Mon 19 Oct 2026 07:00:37 +0000
Manifest next update: Tue 20 Oct 2026 07:00:37 +0000
Files and hashes: 1: IwmQjZUfdYPhFC1XFVEaDl2crNc.roa (hash: GjZxnW1gzHRN+UqmaVQ0ZwFiCbXVNJT18u7noxRI/WE=)
2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=)
3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: w4XatwhuM4nrPXO8RwytpyrzSGtBMcqQmUWoOZ/O+oE=)
4: qhrFDF2N9P-DSl7QdTShxOTMpGA.roa (hash: Su+QNGIdR5cFHBOaO84honpjK8HUibgIUYb7+1xR83U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:f6:55:a1:a5:2a:d4:e1:b6:80:bb:48:ae:ec:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Oct 19 07:00:37 2026 GMT
Not After : Oct 20 07:00:37 2026 GMT
Subject: CN=849e7a072653281d0dc427dc716910c99abeaa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:6d:84:6d:90:35:51:22:ba:99:ef:4d:91:
b2:6b:dd:eb:fc:cd:28:bd:ec:ce:f8:45:60:76:fb:
be:df:65:d7:d6:f9:29:95:14:b9:dc:b3:dd:92:c4:
59:f3:63:58:c1:5f:94:9a:7b:99:af:62:ee:8d:58:
5a:b6:ea:26:b5:4c:6e:1d:2b:9d:2d:b1:34:76:9d:
89:28:f8:04:b5:4e:53:d3:c2:b6:99:12:fb:f2:0d:
fc:e5:98:39:ea:c2:b7:4d:82:d9:83:d6:34:68:5b:
a1:40:9e:99:ec:2d:8b:39:f3:f2:ab:b2:c8:40:c6:
81:56:5f:67:e5:26:4a:b7:0f:73:f5:f6:ad:2c:45:
53:60:7e:41:64:dd:94:d3:f9:61:d7:ff:2f:61:93:
ff:34:93:7d:c2:59:15:76:f3:36:f2:7d:7f:96:b2:
66:9d:32:54:52:f8:85:7c:46:34:70:d8:bd:fb:47:
59:f0:d5:34:a0:8f:cc:e5:de:3f:7a:3b:8f:9d:7d:
a6:66:73:b0:b3:2c:1c:65:76:30:35:ca:0d:20:73:
ba:5c:b9:09:67:73:7f:f9:76:4c:7a:db:a2:7c:d2:
f5:38:6b:c1:20:48:92:7a:c3:87:e9:a3:8a:a0:69:
bc:80:bf:a6:1f:f0:e6:c2:cf:62:db:87:83:39:b5:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:7A:07:26:53:28:1D:0D:C4:27:DC:71:69:10:C9:9A:BE:AA:28
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:36:13:09:6c:00:79:32:a9:88:13:d9:4e:02:75:25:6c:3f:
37:2c:da:5e:e0:e2:4e:8f:bf:7a:46:54:b6:e0:a5:4d:dd:0f:
22:35:39:7a:58:a3:d5:a1:e0:3b:75:0a:ed:b4:d0:e2:e9:d1:
d4:56:e1:c0:ce:51:ba:c1:9a:1e:a4:c9:44:4e:88:ae:aa:73:
c8:86:83:7f:04:dd:74:e5:e1:38:a8:cd:17:91:07:02:ea:d6:
e0:a8:1c:67:fb:e3:2c:01:27:6b:43:5c:0a:98:dc:40:17:43:
cd:80:0e:5f:e1:aa:7a:b4:5b:5b:b4:20:d7:82:ca:70:03:25:
06:99:e0:d9:31:2a:a5:24:cf:27:55:20:3e:94:cb:34:4a:2e:
9c:13:85:24:73:63:38:3f:3d:84:55:54:65:a8:c8:0a:b3:3f:
02:bb:90:38:53:18:cc:50:d7:96:68:34:ae:cc:6c:31:58:ca:
fe:87:a7:f3:08:35:87:6c:05:d8:aa:94:9a:48:4f:bb:e0:a7:
ac:1f:e4:ac:20:fd:a4:47:7d:97:c1:8e:86:a3:92:70:f4:39:
e6:91:40:7a:33:1f:bc:e0:02:f3:ba:f4:34:0e:6f:9f:ac:94:
72:47:12:a5:92:7e:1f:5f:b1:53:0f:f6:94:45:4f:62:ca:43:
bb:fd:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:50:34 2026 by rpki-client