Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: gXb7DmeSIGTQHHI9pOZbI/C7AbV8o92Fu5zp9xEd1Yk=
Subject key identifier: 4D:55:9C:5A:50:F6:A9:54:1D:EC:1C:B2:AA:DE:02:89:B5:72:36:EA
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 01A0CFDAE1FFF123A92534BA1B12A36AAD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 20:00:23 +0000
Manifest this update: Wed 23 Sep 2026 20:00:23 +0000
Manifest next update: Thu 24 Sep 2026 20:00:23 +0000
Files and hashes: 1: 4rFM8nRqB3wIzJNdl4Iak_eVuZE.roa (hash: Kwqu0+r6aXX02cJCwND/MQ/S96ntwFBqXiJUoHPSRng=)
2: 8gZUKS9DPrzIKU6t3Ppj9HpjN8s.asa (hash: 5QyuW7GmPubpV6wNPhptkp1H/1cC97GACwQ13UVYU/U=)
3: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: 57/DB9X881qugcu1JOlqDXZ5NIw5ScxbkRidmsIkhjU=)
4: PSLB-l9ImRjJYxXtqUzR_0IrtRI.asa (hash: LVEG5N1yX8OBlNGRloySVOQ5WSEHDaxbsgyqrIM+wcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:e1:ff:f1:23:a9:25:34:ba:1b:12:a3:6a:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Sep 23 20:00:23 2026 GMT
Not After : Sep 24 20:00:23 2026 GMT
Subject: CN=4d559c5a50f6a9541dec1cb2aade0289b57236ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:db:f1:70:34:da:bc:c6:3e:7e:11:65:7e:
16:d8:88:03:26:4f:9c:5b:ef:25:78:eb:58:0b:c2:
59:8c:4e:d1:dc:65:8a:3b:dd:2b:43:e1:8b:42:b0:
9a:1f:26:04:c7:b3:da:7e:ff:5b:6c:5e:e2:f6:e7:
59:1f:23:68:9d:59:b8:f1:12:a9:b2:e6:f5:dd:24:
4a:60:ee:72:76:f2:38:8f:31:d0:01:62:0c:d5:ff:
31:f3:85:89:5b:7f:80:7f:d8:16:86:69:f3:00:e2:
b8:50:1f:90:80:f6:bd:cd:a5:5c:5e:66:2c:a7:03:
ec:a6:b8:c5:56:a1:30:2b:b3:f5:b9:a5:1e:32:59:
2c:72:ea:cb:00:81:34:6f:3a:cf:3a:40:e0:fb:57:
ed:09:b3:5a:13:59:ca:a7:c8:2e:14:68:29:f8:9b:
a5:11:ef:f3:a7:46:7b:54:ee:a8:39:28:30:35:79:
0d:e5:e3:74:45:0a:88:f5:8a:a4:34:65:3d:e4:41:
fe:ea:c8:be:cb:74:a6:1f:aa:95:ac:8d:1c:62:8a:
9c:b4:71:cb:19:0c:98:de:63:94:5d:fe:7e:ea:2b:
28:16:05:90:e1:de:77:2c:36:12:15:1b:16:0e:18:
ef:55:10:fc:2a:82:2a:27:a5:30:a8:7d:72:94:dc:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:9C:5A:50:F6:A9:54:1D:EC:1C:B2:AA:DE:02:89:B5:72:36:EA
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:e6:4f:04:58:93:53:6e:8f:75:b7:df:3d:53:70:27:69:
57:84:04:19:7e:33:38:99:a2:59:a7:5d:92:c6:0d:0a:ef:45:
82:ab:c2:c5:e6:a6:a9:a9:5b:9a:f5:dc:59:00:ee:d5:a7:1a:
4d:e8:89:6d:e4:43:97:20:42:4c:ef:32:d1:1b:66:4f:b4:31:
cc:5a:8f:d5:ff:9d:a2:85:f8:3f:4a:e2:99:f9:cc:d0:e9:39:
b8:ac:35:91:9f:83:f5:ff:00:76:ef:5e:82:f5:86:3e:c9:d6:
40:e8:05:e2:d4:56:ea:35:01:e2:a3:ff:11:e5:28:20:2d:c7:
e5:a9:c1:f8:e6:a4:44:94:ab:70:bf:0c:5a:3a:40:29:06:ea:
43:a7:6b:44:77:9b:7e:19:fd:a3:c1:59:3b:d7:24:92:e5:a5:
14:f3:a1:53:64:55:0f:92:32:51:23:83:25:e5:1c:ca:8e:c0:
0a:1a:7b:81:b9:56:98:dd:16:22:63:77:c0:3a:8c:e4:c9:68:
af:e2:5f:b4:ba:16:d8:ad:62:95:ee:4a:d6:da:53:42:0d:03:
29:14:ce:3f:1d:5d:f4:f7:0e:04:e6:ec:72:13:7c:77:72:38:
e7:ba:93:20:8b:e0:24:f0:01:55:2a:2f:08:21:49:a0:e0:0a:
51:d2:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:26:42 2026 by rpki-client