Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: D1AuUA+SDfYFfpNPDDstAfwN1VCHSPIZrAS3jnY2Zvs=
Subject key identifier: 4E:44:C0:A9:C9:23:D6:5D:92:41:BE:20:FA:F5:36:29:08:8A:A7:18
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019D26961FBA18ABE41FE15CD535DED77009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:05 +0000
Manifest this update: Wed 25 Mar 2026 20:01:05 +0000
Manifest next update: Thu 26 Mar 2026 20:01:05 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: nzP4y7sPrikVibsvANxJdm2/rO76ee4gzReg2/hvLBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:1f:ba:18:ab:e4:1f:e1:5c:d5:35:de:d7:70:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Mar 25 20:01:05 2026 GMT
Not After : Mar 26 20:01:05 2026 GMT
Subject: CN=4e44c0a9c923d65d9241be20faf53629088aa718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:09:a0:6e:c8:1e:99:7c:10:dc:90:58:a3:
1a:d8:d9:30:e9:aa:88:f9:d6:ad:ca:16:67:5b:0f:
7b:e7:cc:11:28:dc:89:8d:95:d8:65:d5:a6:9b:8b:
84:52:9c:d1:06:30:27:9d:8c:51:dd:37:be:7f:f3:
bd:1a:8b:79:64:82:d7:e1:30:48:f9:f5:70:45:57:
10:ec:06:0c:dd:88:d8:46:a2:3c:29:5b:4f:43:a2:
35:8c:5b:51:82:85:01:12:ec:fe:3d:b7:8d:fb:7f:
b3:ea:d1:09:51:ef:93:fb:05:32:7d:30:fd:da:a5:
4c:5e:9f:29:c5:5d:a9:85:d1:71:69:f0:2c:5f:3e:
f8:30:f8:51:6b:6c:84:dc:46:d8:d8:7b:57:b4:f0:
40:80:39:8b:89:d3:5f:31:7d:f4:4a:8a:3b:88:33:
fc:c2:fb:a3:79:7b:1c:25:d9:10:52:03:fb:ac:e4:
0e:0d:a4:5d:fa:48:6b:19:28:76:f1:cc:5a:69:76:
f4:c5:3b:ba:7a:e3:ec:da:2e:fe:13:60:07:03:00:
7a:4d:3b:22:ee:7c:ba:3b:61:c1:73:93:62:86:57:
ac:9c:75:78:65:f4:15:ce:98:56:f6:54:d2:0a:56:
84:32:ce:df:31:0a:23:41:e4:5e:c6:db:6e:4c:dd:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:C0:A9:C9:23:D6:5D:92:41:BE:20:FA:F5:36:29:08:8A:A7:18
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cc:3d:0e:ee:a4:ee:4d:f9:5a:b7:11:69:ea:08:0c:9c:ac:
c5:0e:96:5a:66:1a:1c:2a:c5:1d:67:18:3d:51:9e:ef:78:2e:
e1:27:30:a2:2f:88:3d:d1:7d:ab:47:18:52:f6:f9:b7:e1:b0:
6e:20:70:9d:73:70:3c:27:fa:35:16:69:f6:c7:34:ae:d7:bd:
e4:c1:d7:25:c7:50:80:5f:0f:33:57:1a:72:a7:11:d4:4c:a0:
2d:85:95:9f:31:b2:b6:cd:8f:5e:ef:7b:4e:99:46:13:bd:d4:
ee:30:48:17:62:d2:98:75:a5:53:18:6a:70:d3:19:7c:d2:70:
24:4a:aa:98:8a:1b:9e:76:97:8b:a8:2c:45:7a:71:b6:f8:6b:
92:1e:87:31:be:7a:d8:99:ec:25:3b:6e:fb:2b:a8:4c:13:60:
e8:60:0b:ae:46:88:8f:2b:c8:23:53:b6:10:46:b8:0c:e5:a1:
84:28:c7:5e:20:e1:b1:ff:86:d1:f1:0e:6a:79:a3:e6:69:55:
ca:1a:62:10:fb:28:11:df:1a:fd:cd:f0:e8:b9:9e:05:c9:27:
af:a4:51:dc:72:3d:00:43:16:41:5f:a6:e6:22:30:50:f4:76:
8c:d3:b1:09:74:ad:a4:7a:42:29:8e:98:11:a9:d1:44:e0:ee:
be:4f:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:32 2026 by rpki-client