Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: 87o4XcvZaiTs6dSzT+fxUR9QRm0amS3K0/YnXZkuuDY=
Subject key identifier: BC:D1:2C:52:52:E2:89:DD:CA:02:EC:DC:CF:00:08:8E:3F:30:41:4B
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 01A08C0D2EB5A6BCC75919B2097E4FFFF60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 16:01:09 +0000
Manifest this update: Thu 10 Sep 2026 16:01:09 +0000
Manifest next update: Fri 11 Sep 2026 16:01:09 +0000
Files and hashes: 1: A-kESQFgScEyFER7yotzjt_cbmI.roa (hash: Sgz9hgjLc6iRR3ehOM8Ou3pQvfBdAi4xmWA93UFwJFg=)
2: jpSNAjoIWW5o1dEpckRnfaNZUDo.roa (hash: kdIhMxsuZJUQm1IC9DaIIdMEPEig2DJxhqMNYmLbqDc=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: 4zxRuawy6ljrzz4ChCj/Y/NEkGpxSNDJOn45IH//WE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:2e:b5:a6:bc:c7:59:19:b2:09:7e:4f:ff:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Sep 10 16:01:09 2026 GMT
Not After : Sep 11 16:01:09 2026 GMT
Subject: CN=bcd12c5252e289ddca02ecdccf00088e3f30414b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:f3:d8:1b:58:88:df:19:a5:32:9b:cc:a7:
47:7c:4f:a9:b2:7a:68:d1:d3:21:d9:de:27:1c:27:
0d:b3:7d:c8:c7:de:bc:4d:da:e7:d0:94:24:c7:d7:
eb:37:d6:38:24:47:63:5f:4b:78:23:24:3f:b5:4b:
2a:d9:70:9b:10:e4:0d:d8:05:9b:24:07:84:8a:d8:
11:9a:96:3b:c5:ef:0d:05:a7:29:e7:d6:18:01:a8:
b0:f3:ad:10:7c:79:bb:02:1c:09:cc:a2:ec:b9:2b:
47:ca:de:6d:d1:27:43:b4:3c:6b:0f:51:5e:2b:db:
88:07:ef:01:69:7c:84:28:e8:7c:17:ae:b0:12:e0:
03:3e:7a:20:b1:3e:01:38:2d:c2:2f:e0:25:ec:83:
03:0c:67:72:ca:50:8b:8d:24:e5:e6:4c:9e:b9:94:
fa:a9:e9:d8:01:8f:d7:a8:29:b1:ca:86:1a:34:89:
b8:2f:42:42:13:70:d6:b4:8d:7e:99:f4:68:5d:6d:
65:f6:21:2e:cc:41:df:95:b3:ff:6a:d5:9b:c7:9f:
bd:b6:ae:d4:e5:3a:ad:07:ee:77:48:56:9c:bf:43:
15:64:6d:60:72:53:0f:10:65:6b:57:07:0d:f2:f6:
0c:08:03:33:6f:1f:50:d3:26:88:22:2e:3b:ac:5f:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:2C:52:52:E2:89:DD:CA:02:EC:DC:CF:00:08:8E:3F:30:41:4B
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:31:f5:c2:81:83:9d:61:fb:b8:c1:0c:7e:6b:81:96:2b:17:
d6:be:d7:aa:8d:c6:c4:9c:78:1e:04:97:c4:20:86:a1:88:1c:
ee:39:b5:23:54:ef:0a:4a:70:24:27:34:11:e6:a7:b0:19:5c:
53:93:e0:f7:38:72:6d:90:fc:4e:af:53:26:2a:ad:28:32:c3:
e6:1d:6c:b6:5b:f0:a8:f2:b8:54:6b:e7:02:73:8f:c0:f5:7a:
d3:08:95:58:4d:e8:f4:ab:0b:d7:83:9c:63:6c:0a:35:f5:6e:
ab:35:40:88:fb:9a:f8:63:c8:a0:4b:05:b1:a6:f1:c2:34:6e:
a0:53:ce:db:81:f8:8c:5f:92:2a:07:61:88:fe:f5:82:07:50:
4c:ad:b8:53:49:3a:0e:cc:08:61:92:cd:d0:bf:bd:c7:f0:c0:
7e:4a:45:68:0e:9b:ab:20:bf:19:3e:c6:c1:d2:ea:72:5e:45:
0a:f2:b2:66:ab:8e:19:db:56:36:a7:86:1a:13:b5:9d:6c:00:
95:e9:b2:b8:3a:e5:bd:c7:0b:37:c8:17:97:6c:e6:0e:3c:33:
df:1c:3e:41:62:08:ae:42:0a:04:aa:b5:71:75:c2:ff:0a:32:
88:a6:51:b5:37:41:de:12:fb:c3:b1:bf:66:ec:bf:b8:64:e0:
43:7d:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:51 2026 by rpki-client