Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: aNJFwD/kzMe02qMvnpSBFW6vIMJCqMbyELJJEzAd4q0=
Subject key identifier: B0:76:C4:75:D8:C1:9C:60:54:AC:5C:A1:AC:6D:BC:FD:C0:C2:2C:81
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019D265F4DB2B51F8320886ABFE617FD3E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 19:01:13 +0000
Manifest this update: Wed 25 Mar 2026 19:01:13 +0000
Manifest next update: Thu 26 Mar 2026 19:01:13 +0000
Files and hashes: 1: MmigRRL2LyWePgn6NdPmnp-_7Fo.roa (hash: BqaSO/Kz9QyCKoZzd5EqVaPPf4EzqcDWslrygs00Jqs=)
2: PVLhPYh9NJguck7AY7uc4y9zEXc.roa (hash: K7wMgagtYa/+gA6yFcAepqwtwV8qsQ0klI3xlG+quOA=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: 37SuyOddCrIZb+y/jMrqzr9kp3LwsmehrsluyVRcImg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4d:b2:b5:1f:83:20:88:6a:bf:e6:17:fd:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Mar 25 19:01:13 2026 GMT
Not After : Mar 26 19:01:13 2026 GMT
Subject: CN=b076c475d8c19c6054ac5ca1ac6dbcfdc0c22c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:c0:c7:6e:13:68:6a:df:52:d2:41:22:fb:
ba:06:06:20:b9:d0:e4:8c:9f:79:f4:85:24:f6:4f:
ea:2d:d0:16:81:7a:09:28:95:10:c3:c3:3c:ea:e9:
12:86:1d:ee:b5:7b:c2:ea:52:59:2f:e5:37:65:fe:
b2:aa:01:98:86:31:ec:3c:a9:46:b7:cd:39:42:3a:
ae:c6:6a:30:e6:c5:73:e8:43:d1:59:68:1e:fb:63:
f3:85:61:fc:56:84:8b:27:9e:c6:39:84:5f:47:47:
82:6e:9f:3c:24:25:50:66:d1:36:89:f9:ba:50:dc:
16:e0:56:cc:10:57:14:63:6a:0a:60:cb:48:19:d7:
63:c5:ec:a8:4a:6d:20:2c:0f:a9:d7:86:eb:ea:af:
f5:b7:d5:80:af:0b:9b:87:1d:23:5e:61:29:7d:4a:
b0:57:69:50:21:56:f0:5a:12:64:a1:74:42:9c:4a:
20:ee:da:be:1b:b9:71:7f:70:4c:b2:eb:1d:f2:08:
cc:c3:3d:40:a5:77:5f:23:bb:64:4b:56:d4:62:2d:
59:13:44:77:cd:78:ad:41:e4:14:01:e1:f1:b7:1a:
0a:ae:74:b3:1c:1f:03:9b:14:79:fd:7d:aa:43:d4:
44:a9:cd:71:3b:5f:ef:37:21:41:16:3c:3a:6a:53:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:76:C4:75:D8:C1:9C:60:54:AC:5C:A1:AC:6D:BC:FD:C0:C2:2C:81
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:12:33:fd:dd:aa:e3:ab:f9:bf:57:97:bc:39:e2:b3:99:
0c:6d:f2:76:52:09:84:38:91:8b:ca:fc:84:fa:1b:86:49:c7:
10:a7:2d:6a:04:f4:0a:ee:48:7d:4e:01:f1:2f:f8:f6:0b:e1:
09:12:e4:85:18:0c:ee:6b:4a:8c:6b:07:2c:ec:1b:5d:5f:5c:
e9:62:b9:ef:38:b7:2b:fb:b9:62:4e:13:a8:42:4c:4a:6c:ac:
fc:cf:7c:d7:4f:d6:9d:cc:c8:07:59:d3:ee:f3:12:35:46:f7:
f3:d5:36:b8:41:42:24:8a:20:60:31:87:e7:69:e3:97:bf:6c:
83:47:c0:99:52:f6:e8:9b:09:ae:c3:09:9b:65:70:a9:e4:30:
14:85:57:2b:5d:5b:47:1e:27:64:00:c3:c2:24:63:1d:bc:4f:
48:41:a6:b4:20:ed:45:af:a8:2f:66:3b:89:1a:8a:b4:6f:e7:
a3:e7:72:ce:0a:94:c7:83:89:c0:2f:28:74:bf:9a:f5:40:fa:
9f:67:e4:be:7d:c1:f4:00:f3:b3:f6:3d:a5:7b:21:0c:5b:df:
1f:aa:84:f6:40:77:a2:1f:ad:67:b0:d2:e8:d3:df:69:38:a9:
11:d7:48:7e:b4:f6:35:48:dc:62:c4:8e:8e:99:88:5e:dc:61:
b5:b9:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:58 2026 by rpki-client