Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: tgPDQzaC01uObhVKmBAWY3vdxHCsEyn6T7AlaT1H0Os=
Subject key identifier: 38:97:24:89:B8:C5:28:3C:B6:96:95:8A:83:CE:75:64:E1:30:35:67
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019E21A3C72C69D7C17DE9824BA1E78F6E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 14:00:41 +0000
Manifest this update: Wed 13 May 2026 14:00:41 +0000
Manifest next update: Thu 14 May 2026 14:00:41 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: /mhCs5uTspfuSv4xgal3DXZ4i2XHs4CI20fL5QLUlc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a3:c7:2c:69:d7:c1:7d:e9:82:4b:a1:e7:8f:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: May 13 14:00:41 2026 GMT
Not After : May 14 14:00:41 2026 GMT
Subject: CN=38972489b8c5283cb696958a83ce7564e1303567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:1c:ab:a2:43:0a:b5:e8:c4:d7:e7:85:4b:
4b:6c:d0:c4:5d:b2:c2:e7:26:bb:14:ea:74:58:30:
b4:5b:ed:6f:98:11:0c:f3:ba:24:c0:97:48:6c:2b:
77:d3:fc:66:e1:a4:5d:48:c0:c9:45:29:63:d0:7c:
d8:91:e2:a6:34:83:df:e6:90:01:c2:55:19:6b:61:
c8:f1:0b:36:4d:b5:e6:7e:cd:3c:bb:40:c7:11:2c:
3c:f4:65:88:53:7e:f5:c9:4d:36:a2:03:32:d3:65:
31:bb:85:d9:56:fb:00:fb:06:ae:8a:82:a9:f6:88:
08:8b:c4:41:c7:ed:b2:32:fd:6e:3f:91:58:b5:80:
f1:49:e9:84:06:a3:5d:2a:10:05:dd:5e:80:4a:a7:
98:46:ce:de:ef:60:9b:48:03:f1:f8:5f:7b:ec:62:
04:33:32:c8:80:5e:0c:02:9d:84:86:12:20:28:d2:
9b:da:f5:fa:42:56:9f:06:1c:c8:e3:cc:57:65:ac:
84:98:07:73:24:57:76:19:14:c7:ae:fc:b4:d5:ea:
39:14:f9:5e:7e:2b:20:7c:be:de:d3:e9:aa:a2:d1:
20:0d:67:3b:12:db:b0:dc:78:f0:9d:5b:15:a6:4c:
10:89:d5:32:4c:77:e4:97:24:2b:92:1b:b8:d3:65:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:24:89:B8:C5:28:3C:B6:96:95:8A:83:CE:75:64:E1:30:35:67
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:81:93:6a:d1:c6:b6:fb:30:4f:99:e8:20:ad:d5:ff:89:
87:57:aa:61:6c:16:f3:a5:c0:c7:81:2b:f3:f8:2d:af:88:22:
7e:57:7c:8c:1f:d5:fa:ce:8d:78:0a:67:e4:cd:53:69:c6:af:
60:0c:16:16:0a:76:2d:e8:69:32:84:b2:a2:67:ad:e4:02:e3:
88:0d:e2:d3:eb:f4:9b:23:96:0e:3e:41:f2:3d:36:24:2a:60:
e2:f8:93:f2:fa:9d:48:c1:b7:c6:11:61:9b:e3:4f:ed:53:26:
78:c9:0e:55:45:2a:8d:7c:0f:f1:8e:0a:61:62:1c:99:e9:15:
30:d9:78:60:49:1d:4c:2c:a3:33:da:de:97:66:ad:93:20:c8:
d7:68:92:78:d0:05:00:5b:57:99:83:2c:eb:1b:37:b9:c8:23:
cc:ad:d8:7b:9e:3d:31:6d:5b:80:c8:90:43:0d:0e:70:1e:79:
2c:42:9a:97:ab:6d:50:34:20:c0:f2:ce:0e:c8:3a:09:98:78:
62:c7:4b:5d:fc:ea:34:c9:f8:00:b4:48:39:98:0d:84:32:49:
0b:ea:b9:26:87:bd:d9:ae:19:58:02:66:64:c3:65:e0:8e:c3:
d3:4a:0d:68:bc:4b:4c:ce:4b:5c:a8:63:06:48:ef:88:52:4c:
2c:7c:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:24 2026 by rpki-client