Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: mAeAklH+nsgT/NpB2/SuR2TTl1b0FrdonR/zbzaXv2A=
Subject key identifier: B2:C8:E3:8B:F6:24:79:23:7D:C9:BE:52:A2:5A:9F:D7:C7:15:8B:D8
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 019D29294CC8455E57E33A744E4812465C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 1529
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa (hash: aU0rHFNkYFHdV5H8egljpHkLcw9iIq3HEwixa6GSrPc=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: 1LLVSf07hWKLvzWbehD/5gdIZcvF+2DfGr1u6cqKLP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4c:c8:45:5e:57:e3:3a:74:4e:48:12:46:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=b2c8e38bf62479237dc9be52a25a9fd7c7158bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:68:f9:e4:6c:4e:4d:2b:e0:5d:0e:e6:df:
82:16:0d:51:e9:89:1a:63:ae:26:6d:10:35:46:b4:
1f:2e:1a:3f:64:85:16:83:76:8c:c0:8d:1c:0d:a9:
6d:d7:5a:9a:51:e3:97:c2:a5:c6:2f:e5:d8:4b:ed:
22:e8:fc:97:69:e3:e8:d7:eb:28:59:b8:2f:f3:dc:
c3:87:c3:e8:73:06:d2:2c:5e:38:f1:12:c7:32:4a:
ac:01:9c:b0:48:85:3d:f9:80:b2:f3:4b:d8:21:d4:
e5:d3:6a:bd:c8:33:d7:1d:fe:22:b1:47:6b:1a:34:
c9:16:b7:c3:9f:1e:86:63:90:5d:2c:a3:b9:53:6d:
bb:9e:85:1b:70:43:6a:bb:5c:b8:bd:bd:68:b5:8b:
44:51:79:78:88:a4:4e:8b:be:7f:89:d4:63:4a:99:
31:47:09:cb:b0:b3:c5:80:64:d1:82:32:2d:fe:c0:
c4:df:e9:2a:f6:49:ac:61:99:bb:0d:de:f6:94:b3:
9f:d9:95:cd:e0:82:c5:cf:0a:c9:86:d4:2e:43:f4:
c8:2a:50:be:ae:c1:a8:c9:e5:7e:0e:94:25:d8:e6:
a4:23:73:ed:0d:8b:64:d4:7c:da:7d:ba:87:fc:58:
3c:2a:62:ec:af:79:b8:12:e3:b3:22:f0:82:51:3a:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:E3:8B:F6:24:79:23:7D:C9:BE:52:A2:5A:9F:D7:C7:15:8B:D8
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7f:1f:5b:47:72:26:94:44:b3:8d:3f:33:5b:eb:60:2d:4e:
38:17:aa:9d:77:62:5c:67:c3:d1:3d:49:91:34:0b:03:6c:f8:
98:f1:b8:f6:15:20:bc:b1:62:63:86:6d:fa:89:43:85:27:60:
38:b7:72:7a:46:6e:a0:97:c3:79:1d:b2:5e:39:42:cd:d9:a0:
33:c6:68:ff:45:26:df:7f:6a:4b:08:5f:04:28:82:57:01:ae:
34:56:9b:c1:6b:74:6f:03:87:36:75:34:31:53:76:a6:de:58:
2f:52:d7:2e:dc:a9:5a:d3:fa:ad:27:10:89:c8:1c:bb:08:10:
03:55:64:8f:6f:ff:d8:16:aa:28:63:71:5c:4b:e1:b6:f6:dc:
7d:f6:c7:45:43:19:1f:05:f5:a9:1b:e0:ce:25:a1:8a:60:00:
8f:df:45:12:06:b9:9a:fb:7e:af:99:fc:36:d4:e6:d8:b5:94:
da:c3:9d:e9:5e:8f:a6:fd:e4:2c:9f:bf:b1:97:8c:b0:79:cf:
f6:56:06:fa:60:02:bc:b3:a5:cb:e9:2a:1f:23:fd:82:2f:c4:
23:5c:4a:2f:1f:78:5c:95:1d:60:f9:6e:9e:be:02:0f:91:36:
fa:e5:2e:34:aa:de:dd:63:c6:40:22:9e:eb:44:32:6b:55:b5:
de:10:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:04 2026 by rpki-client