Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: h0/hy18UpMTcu4Wn9giI3Mxa26JzC8hAGRUdyPZGyNQ=
Subject key identifier: 9D:28:B6:B7:62:4A:6A:56:53:DF:27:AC:15:22:7B:E8:83:01:E4:74
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 01A0DCBB451587AE1CB5092BFF6166F8FA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 08:00:55 +0000
Manifest this update: Sat 26 Sep 2026 08:00:55 +0000
Manifest next update: Sun 27 Sep 2026 08:00:55 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 1U2kfcyk89c3QPkDFUmoVy0EFCjP3KlZn+Evj/kGopQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:45:15:87:ae:1c:b5:09:2b:ff:61:66:f8:fa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Sep 26 08:00:55 2026 GMT
Not After : Sep 27 08:00:55 2026 GMT
Subject: CN=9d28b6b7624a6a5653df27ac15227be88301e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:39:e2:06:72:a2:e8:16:70:d0:0b:29:d6:
8c:26:4f:bf:6e:de:9a:90:5e:78:98:7c:9e:7b:1e:
86:f0:87:f9:69:0c:dc:db:35:d7:fd:fd:f0:46:6d:
53:d8:6f:74:1c:18:d0:6e:95:dd:ec:e6:9e:82:c4:
17:92:33:e6:84:e6:68:cb:32:11:9a:51:c5:09:54:
05:7d:c7:49:6b:1b:01:a4:9d:89:13:7f:f5:35:b2:
9b:d3:ca:72:21:55:9a:34:d5:08:33:2e:b5:a0:5c:
e8:84:7e:12:d9:a2:bb:8e:f8:0d:a0:8f:0e:1a:fa:
8c:5e:51:2f:5a:8b:19:a8:a6:9d:8e:2c:29:f0:94:
c0:08:57:7e:2d:bf:58:18:93:aa:10:87:bb:a5:09:
29:96:b8:50:36:2e:2b:45:96:55:03:e0:d0:6b:a9:
a9:f7:7d:ad:19:3a:48:cb:8c:74:b3:8d:f8:87:a6:
33:95:34:b5:93:15:e2:5c:86:af:5c:a6:b0:ed:40:
8c:90:ac:4d:3d:1f:07:17:9f:35:51:6b:9f:8a:01:
ed:54:06:89:70:52:ed:74:f7:0f:39:15:b7:e9:d9:
02:72:6c:b1:65:0b:80:e8:0a:13:42:30:8a:67:41:
26:b8:26:6e:83:c7:03:8f:59:c1:40:5a:cd:c5:e1:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:28:B6:B7:62:4A:6A:56:53:DF:27:AC:15:22:7B:E8:83:01:E4:74
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ca:05:ac:a1:0f:64:4a:ac:0e:02:fc:50:04:73:8d:88:1f:
bf:6b:37:6d:92:e2:b3:af:b5:2c:3b:2e:e6:4c:26:3c:9f:c1:
a1:47:44:cd:1c:b1:cf:a5:fd:29:64:55:41:49:76:69:70:e7:
77:16:a4:b6:4d:27:88:7f:d6:b4:a7:51:2e:30:e1:62:cd:63:
74:d4:db:04:e9:eb:a7:17:10:66:8b:b9:24:f5:d4:0b:a4:32:
bd:0c:7c:eb:51:41:08:9c:ab:c6:62:d0:62:d3:a8:62:6d:8f:
bd:6b:67:33:cf:01:8e:8a:00:a9:08:62:e2:c4:af:fe:a5:24:
db:99:2c:99:af:9b:df:f7:6e:a9:e6:72:b1:25:61:77:e2:95:
a1:e6:c5:87:31:82:c7:d2:ee:dd:34:70:73:26:0e:14:5e:04:
cf:13:ed:7d:3c:73:b2:28:4a:0a:94:1e:7c:79:e5:07:f6:97:
3a:81:71:3a:7b:0b:f5:f6:42:fa:9d:dd:ef:a0:30:14:90:b2:
79:20:4b:f8:3c:cc:29:05:e7:32:82:74:d6:5d:70:46:27:c9:
54:45:1c:a4:73:9f:e3:83:b9:01:44:be:2a:53:4b:21:0d:41:
83:61:fe:87:c1:b9:89:2e:4d:5b:98:ea:48:2c:0a:ef:e9:7f:
67:c6:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:19 2026 by rpki-client