Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier: igsuwlxhjJbGJtsm3bWYvYTCYdcNsEG8NLC61Y7PfPI=
Subject key identifier: 18:94:57:EE:86:31:B5:98:C9:1E:B7:14:96:94:74:84:59:C0:D0:FE
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer: /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial: 01A16722F283C083EC05563622AC4F251840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number: 0D37
Signing time: Fri 23 Oct 2026 05:01:45 +0000
Manifest this update: Fri 23 Oct 2026 05:01:45 +0000
Manifest next update: Sat 24 Oct 2026 05:01:45 +0000
Files and hashes: 1: T8H29xdvMM615tBBaetAKqxS1Lg.roa (hash: f1JOsohKbsQAHJoFy6fUS25sjpjOzZztTxeJ515Q3+k=)
2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: hCSiMPa1/Gho4cEnsDUSGofIpUCwLsIiQBiBAuBDFfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:22:f2:83:c0:83:ec:05:56:36:22:ac:4f:25:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
Validity
Not Before: Oct 23 05:01:45 2026 GMT
Not After : Oct 24 05:01:45 2026 GMT
Subject: CN=189457ee8631b598c91eb7149694748459c0d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:ed:53:33:b6:6b:44:99:52:09:b3:19:c6:
96:e2:ad:03:eb:36:3d:40:95:bb:ed:18:1e:17:ea:
0b:91:e5:e6:43:67:4d:2d:71:dd:93:a8:56:f2:b6:
51:b6:45:61:c9:5f:93:bd:8f:55:92:bd:80:cc:29:
77:dd:1b:f6:1d:90:c5:4d:b9:21:14:f3:69:f8:51:
a3:97:5a:4e:43:82:1d:51:f7:33:88:66:a0:57:e2:
74:e3:f6:1e:44:0d:6b:87:52:bf:37:18:64:24:0b:
3a:3a:76:7b:81:26:21:b6:d4:e7:24:d2:29:4f:2f:
3f:e4:f4:52:9a:ac:e5:5d:52:23:6e:3e:4c:50:b8:
6a:22:9d:ae:da:35:cb:05:0c:00:c3:ff:07:f9:b4:
ef:41:be:f6:45:db:27:42:60:0e:bc:6c:4a:93:e8:
5b:95:e3:c9:2e:e3:33:53:47:d4:31:3d:84:33:bf:
93:c6:9e:8b:4d:71:ba:2f:b7:26:b6:f2:5d:a5:99:
46:7e:0a:44:5a:e2:82:5b:c4:83:08:65:cd:b8:66:
db:b1:c5:0f:cb:da:aa:75:c0:97:ec:07:1a:b9:fb:
e1:b4:b7:e9:57:0e:19:2c:3a:45:1b:47:87:83:2c:
71:3e:d0:61:e3:3f:12:60:e6:4d:54:4e:d5:86:92:
c1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:94:57:EE:86:31:B5:98:C9:1E:B7:14:96:94:74:84:59:C0:D0:FE
X509v3 Authority Key Identifier:
keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:b5:c4:b4:6f:3c:bd:0c:9b:72:46:f6:39:7b:14:f1:0b:
e7:7a:ba:c9:e5:2d:d3:87:61:ac:57:66:20:b9:d9:ff:c0:b4:
a1:2c:5b:a3:59:8e:91:6d:cc:34:3f:3c:eb:65:42:19:11:ce:
8c:86:f5:5d:80:aa:e4:06:70:00:5f:dd:13:9a:e8:37:ee:c4:
31:d6:04:d3:dc:53:70:31:27:98:e4:eb:56:dc:bc:3b:2b:07:
e6:99:6a:4b:80:44:62:17:81:fc:2d:9f:73:b9:cb:36:dc:e2:
de:72:f7:83:48:74:04:b2:88:99:95:22:04:1a:ac:0e:75:69:
6e:8f:a5:53:83:08:e6:03:9f:2a:f0:ba:28:ad:ef:1d:87:37:
8c:3b:ba:ed:5c:96:88:c5:b7:fc:93:cf:42:58:35:e9:f0:3a:
fb:e7:c5:01:70:a8:85:e5:0f:3a:24:50:c4:09:c4:f7:6c:80:
96:62:59:f0:ac:94:66:1c:05:29:77:1d:55:84:03:96:2b:8c:
b4:8e:27:25:74:7f:dc:65:82:84:6b:72:d8:19:fe:59:dd:57:
38:58:0b:66:ff:f0:e8:ac:6b:c2:bf:13:de:af:06:91:fa:d5:
6a:fb:31:ac:52:f3:c4:51:92:49:a6:13:63:e0:d0:e8:6d:32:
82:e8:84:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:55:03 2026 by rpki-client