Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: tqjXbJgdv4od9O3n0z70TcDIQcADf0VnZtT8LHkBl+4=
Subject key identifier: 07:04:1A:B8:B6:BF:66:42:21:F6:1B:69:C7:34:4B:DF:D3:EA:A9:B5
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 019D25F1B6BCA6B45C2F4BB8A58E3CCEA0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 1048
Signing time: Wed 25 Mar 2026 17:01:30 +0000
Manifest this update: Wed 25 Mar 2026 17:01:30 +0000
Manifest next update: Thu 26 Mar 2026 17:01:30 +0000
Files and hashes: 1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: aZPLviF2JSaZ8JwvtQkK3ndzpxXJwv6Wb1yNdlOmbJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b6:bc:a6:b4:5c:2f:4b:b8:a5:8e:3c:ce:a0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Mar 25 17:01:30 2026 GMT
Not After : Mar 26 17:01:30 2026 GMT
Subject: CN=07041ab8b6bf664221f61b69c7344bdfd3eaa9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:0b:0c:55:41:18:bb:04:d1:36:61:92:7e:
86:14:8e:49:77:ae:2e:a8:04:96:5f:db:5b:be:9d:
44:49:85:57:a8:f2:8c:6d:6d:be:ca:7e:73:f0:89:
be:8e:1c:50:76:85:11:a8:cb:f1:8c:f0:a3:f0:ea:
0a:bc:c8:a7:c9:08:f5:41:47:6b:63:fa:9d:1e:26:
f8:eb:49:41:f9:e6:76:e6:df:5a:7d:a1:e9:2f:c0:
f5:5c:27:c3:ab:eb:f9:48:0f:70:ce:41:1c:87:b8:
08:3a:67:f2:d0:04:d9:7a:b6:d0:21:2e:ee:54:f8:
9b:dd:c3:60:f3:fb:ad:4e:e7:35:ad:6f:ac:eb:6b:
7e:5e:94:3c:e8:47:94:7d:3d:17:fb:74:fe:b2:b8:
a0:ae:fa:26:99:56:45:dc:a9:07:fa:84:b3:12:34:
8f:90:1c:5b:76:73:2a:f1:cf:91:2b:c2:fd:04:53:
8a:ea:b8:76:e9:ff:25:91:9f:92:03:ec:e0:45:ca:
c6:dd:9d:80:a1:1f:a3:10:9c:d1:a6:09:06:8b:2f:
c3:9a:5b:6a:0c:d3:43:64:25:33:dc:90:5b:a4:fc:
74:9b:37:e3:e6:5c:1f:e8:f0:89:1b:a9:5f:c8:b2:
db:e0:6d:7e:1d:a7:fc:83:48:96:3b:3f:56:1c:42:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:04:1A:B8:B6:BF:66:42:21:F6:1B:69:C7:34:4B:DF:D3:EA:A9:B5
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f2:8b:f5:a7:97:67:2f:bf:af:75:a1:49:1a:04:66:5d:c7:
ef:f4:f1:b5:48:5e:c9:24:35:c3:e1:0b:47:74:6a:2b:20:12:
25:3c:b1:27:12:66:8f:05:26:03:bf:9f:00:91:f8:19:fb:19:
be:3c:16:c9:a2:c6:21:93:eb:cb:76:30:c2:1f:01:10:d7:6f:
bd:13:41:cf:2c:0f:8c:8c:31:8a:1f:57:ad:82:c9:8c:47:55:
5b:bc:50:50:40:25:3e:56:da:b5:c7:8a:45:dc:92:19:ce:99:
13:c8:0b:b2:23:87:c8:0b:78:9c:2f:37:00:8e:6b:3c:37:82:
e4:28:88:c1:c3:fb:55:bc:67:75:b1:27:25:60:ff:d6:0a:11:
bf:7a:a2:11:37:fa:07:ec:68:16:52:18:ee:cc:a8:25:9c:07:
42:ce:6c:54:a2:24:76:55:a2:09:3d:4c:ce:63:0f:8a:dc:2e:
d9:89:c7:a3:e7:7b:a8:96:44:21:bd:a2:b0:b1:35:f5:56:52:
2c:35:eb:d1:53:bc:e4:42:7b:64:9a:b4:01:e1:71:bf:e6:37:
f9:27:e6:05:e3:79:8b:01:54:44:77:16:56:0a:47:fe:41:49:
e2:5e:18:cc:1a:d3:83:2a:37:3a:28:09:f5:42:9f:a1:e8:60:
6c:0c:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:40 2026 by rpki-client