Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: bnHbZrDhg8/Ekby8MuI9IqLhlY72hmHqCNRzJOXdSlg=
Subject key identifier: 82:FD:48:77:3D:DA:2E:02:E5:EC:1D:94:D2:98:3D:10:32:32:AC:F8
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 01A0DA28BE1476B4D3C5FE150B91CE71169E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 1233
Signing time: Fri 25 Sep 2026 20:01:38 +0000
Manifest this update: Fri 25 Sep 2026 20:01:38 +0000
Manifest next update: Sat 26 Sep 2026 20:01:38 +0000
Files and hashes: 1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: CfAkHS3MbFkxoHLvCf6C32HXEkLYOPQm6s3uLpQXknM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:be:14:76:b4:d3:c5:fe:15:0b:91:ce:71:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Sep 25 20:01:38 2026 GMT
Not After : Sep 26 20:01:38 2026 GMT
Subject: CN=82fd48773dda2e02e5ec1d94d2983d103232acf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:5e:36:30:2e:1d:be:04:19:95:7a:16:55:
02:c4:e8:ed:a4:07:b2:4f:b2:e9:66:42:2e:b8:42:
38:a9:ca:7a:96:80:d5:d8:09:f8:c8:86:94:4f:be:
36:62:83:9b:cc:9f:32:f2:07:f4:b8:da:06:7f:d1:
d6:89:aa:02:52:5a:2c:aa:a1:96:67:2a:bd:c7:bd:
6a:61:d0:b0:fc:08:a5:4c:f7:42:32:d7:cb:55:ed:
d0:b2:63:d1:89:6d:ef:ef:25:2c:65:5b:3f:90:45:
71:3d:39:1a:2d:c2:54:83:70:6f:bc:f4:4c:7c:33:
7d:58:f0:08:ff:92:b5:0b:96:89:b9:03:6d:94:88:
1c:e2:3d:da:29:1d:09:61:d1:7a:9b:c5:02:57:40:
ac:20:34:24:35:e7:53:22:3b:00:0f:b0:37:8a:94:
1d:f4:01:d8:4a:b8:34:e4:48:0d:3e:be:f3:3c:cd:
85:e9:aa:c8:70:f7:0f:a9:ca:46:d7:ce:9a:a5:47:
0c:cf:28:42:32:f3:14:c9:a8:6f:15:12:cf:8f:87:
7c:03:6c:c2:e6:49:ed:cf:21:dd:c1:78:48:7e:0a:
db:5c:9c:82:64:34:fd:bf:53:8e:90:3f:3c:18:e2:
bc:20:2c:89:2d:9f:85:07:08:71:ed:4a:50:0d:21:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:48:77:3D:DA:2E:02:E5:EC:1D:94:D2:98:3D:10:32:32:AC:F8
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fd:fc:a4:c9:4b:74:a1:2c:0b:d7:32:57:e4:33:8e:3f:d9:
75:4a:71:6e:7d:6e:01:f0:ba:fa:1f:8e:e9:46:00:52:4f:0f:
f9:9e:9e:19:97:91:e4:18:c0:d8:a4:4a:8e:e4:d8:dc:27:4c:
29:2c:96:2f:1a:1c:7f:d1:19:4b:fd:60:68:59:4c:44:ba:9c:
50:eb:4b:cf:31:7c:ce:38:4d:31:e9:e9:0c:01:68:1f:61:ee:
f4:e6:32:87:9e:5d:69:90:72:40:ec:62:d0:a2:81:a4:c5:78:
5d:f0:e4:fe:04:bd:9f:3b:36:3f:81:1a:2a:27:4a:6d:f3:87:
bc:28:b5:b7:0e:19:15:50:70:a0:95:89:04:70:f6:5d:85:52:
b9:e9:58:65:59:02:d5:31:d2:4b:b9:4d:5c:80:2c:00:8c:b2:
9d:6b:03:9b:6a:a2:3b:94:9b:84:d8:4f:02:a6:43:bc:e9:8e:
d4:9d:1a:9a:fa:8b:70:6a:7f:75:5c:b2:a1:59:a5:43:5e:f2:
ef:1f:66:7e:df:8c:34:64:71:0d:6e:2f:f6:c3:5a:22:9d:58:
03:6c:12:6b:e5:19:6d:14:99:9d:13:5d:e3:1a:aa:86:fd:25:
6c:44:0a:88:3a:d9:d2:38:9f:57:37:ce:8b:96:79:7f:4a:7c:
76:d1:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:12:54 2026 by rpki-client