Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: LyIXwAOfn904iAXV7H6moUR9c4UQAkrXC9LyRnK2OfY=
Subject key identifier: CF:45:04:C9:3E:FF:E8:BC:4A:97:08:3D:B0:5B:17:94:D6:38:CE:66
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019E1DFEA1EF910B82398E9A853C72A03DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 18BB
Signing time: Tue 12 May 2026 21:01:27 +0000
Manifest this update: Tue 12 May 2026 21:01:27 +0000
Manifest next update: Wed 13 May 2026 21:01:27 +0000
Files and hashes: 1: DnAMEipRWT4zScgCErBfImrHIYM.roa (hash: cJyfemKh5vlzqlnJgKkTt1cfO363Sh99iZPfMnWSktk=)
2: cTlliJQGudEc-EL6iDNgBU6q-DI.roa (hash: fFq0wxKYSeUMmP8/3JXlsdr3hGg6WxNOxEODFwgQ024=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: 4Hr9wiJIgZV7f5s3UgBjkm+/NugRcBQiY+oYd7Jouso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a1:ef:91:0b:82:39:8e:9a:85:3c:72:a0:3d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: May 12 21:01:27 2026 GMT
Not After : May 13 21:01:27 2026 GMT
Subject: CN=cf4504c93effe8bc4a97083db05b1794d638ce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:9e:c8:b9:22:36:a7:44:cd:6a:49:48:e8:
f9:30:ed:eb:d6:0f:14:bf:56:5a:69:b0:e2:44:31:
1c:a1:30:20:03:d7:ad:b5:13:00:36:14:9f:25:06:
85:9b:3e:fc:58:44:73:0f:b4:58:05:d8:d1:31:c7:
4a:65:db:51:3e:3b:07:0a:78:cf:e7:7a:8d:a4:4c:
5d:ce:a7:b4:7b:27:e3:b0:56:66:2b:17:fd:79:75:
0d:5d:67:20:78:2f:ab:70:c0:b7:1a:33:fc:41:3d:
64:f8:55:3b:05:85:7b:de:ad:7f:86:a1:d8:dc:7a:
9c:2f:48:0a:89:46:37:7a:77:03:42:ca:e8:a9:93:
36:cd:04:d1:12:28:00:75:09:fe:02:43:51:17:9c:
8f:69:8c:d8:23:f6:6f:b1:aa:c2:4d:87:86:13:b2:
02:ca:6d:44:d4:af:c6:9a:fa:32:c4:0f:b0:28:d6:
87:b2:2e:1c:d2:09:8f:57:55:23:ef:28:b2:82:fe:
15:01:61:c4:f8:6c:4d:e6:7e:c9:90:24:d3:32:ac:
20:97:d0:e8:d7:f3:d2:11:3f:25:1e:9a:6c:8c:e9:
b5:24:6f:e1:0f:ee:2b:b5:76:3f:25:8c:c8:2f:6b:
38:4d:af:e9:df:ad:8f:b2:a5:a6:10:30:9a:df:90:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:45:04:C9:3E:FF:E8:BC:4A:97:08:3D:B0:5B:17:94:D6:38:CE:66
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:24:7a:ee:52:79:f6:6b:88:00:8e:87:55:ab:84:72:d1:2b:
a8:fc:05:79:72:d5:78:19:b6:e7:fa:a9:19:b3:6f:f2:ca:a0:
8b:fd:d8:91:a5:fb:39:6b:0d:8b:45:e6:e3:b2:46:6a:0a:b7:
b3:07:fa:04:06:c2:16:65:8f:ee:38:8b:0c:ff:1f:53:ef:0f:
b3:19:63:34:34:a5:75:e4:68:86:3d:a3:fc:32:66:31:8b:3a:
d5:c0:58:08:03:92:38:f8:63:6b:89:39:fe:9f:0c:e4:12:c5:
80:fc:e3:3e:b0:73:4d:cb:a7:87:13:7e:50:d7:9b:cd:b1:6b:
e7:b1:a5:79:d9:70:ee:0c:25:9d:64:b0:3e:6f:61:c8:ff:f4:
db:d6:d2:37:c0:8b:4b:e0:d7:c0:b2:1f:fa:fb:4d:f2:54:86:
d0:68:de:f9:70:44:d4:9d:f1:45:ac:c0:8d:d4:20:5e:f8:89:
a1:25:68:54:ed:40:ec:2f:37:25:82:a7:54:df:d3:dd:0f:ab:
15:6f:87:26:8d:75:9b:ac:dd:7e:9f:03:f7:2f:03:fb:7a:bb:
cc:28:96:47:54:05:a7:ab:9e:be:87:b7:a4:e4:4d:67:4a:16:
1d:81:e1:54:96:32:fa:f7:91:ad:1c:e9:10:33:31:38:b9:fa:
40:3c:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:22 2026 by rpki-client