Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: cW8E+HSIkYihKCwdsfIaStHHXcZ+jDhXRz13GHvwb8k=
Subject key identifier: 12:AB:37:6C:77:34:27:9A:3B:09:5C:EA:4B:7C:73:15:97:58:FA:CE
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019D2884BE6241DD440A592C943FA24A5112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: T4gwZuWz3mD9IYJMQ35Qfi+2zfF/te0VVdTru9FtI0M=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:be:62:41:dd:44:0a:59:2c:94:3f:a2:4a:51:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=12ab376c7734279a3b095cea4b7c73159758face
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:c1:a1:fa:06:cf:42:4a:d7:94:5a:d7:16:
a7:1a:4f:fc:03:8f:6d:98:47:d0:46:66:bf:a8:c1:
ca:d0:ae:68:78:1e:ea:3a:07:ef:e1:d6:d9:e2:1b:
f6:c8:19:52:21:39:3f:1b:22:40:74:0d:f6:e0:7b:
06:c9:ba:c6:68:cd:c7:5d:69:0d:bf:ea:02:40:4b:
31:67:16:28:eb:c2:98:00:b8:1f:28:62:54:0f:35:
4c:7d:27:71:c3:cf:1e:13:51:18:d0:61:d4:cc:fe:
4b:37:5a:97:ee:c6:34:c3:9e:9e:c8:59:61:a7:54:
78:31:47:04:32:c2:0d:98:c1:a4:dc:ac:ea:f6:be:
b7:30:97:b2:19:75:3e:83:6c:b7:c5:63:36:29:d9:
18:b9:54:57:4f:61:f6:c6:0a:71:6b:eb:e5:63:7c:
fd:a3:28:ea:c3:3a:b2:f0:fb:42:8a:13:d0:41:ba:
26:d0:ba:70:52:00:1f:f3:0d:a1:eb:89:ed:d5:ba:
89:ad:4f:eb:cf:15:ef:10:60:19:96:5c:63:86:cf:
bb:9f:bc:6d:e1:bc:10:2b:6d:8d:f6:54:4f:b2:de:
ab:4b:d6:32:bd:9a:0a:16:1c:7c:f1:9e:65:a3:7d:
3e:f9:92:3b:bb:7e:04:7b:e6:d9:24:49:a5:32:da:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:37:6C:77:34:27:9A:3B:09:5C:EA:4B:7C:73:15:97:58:FA:CE
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:c7:a3:d4:63:3c:f6:1b:3d:ba:a2:41:5c:6f:69:b6:58:
b5:f8:a2:01:62:77:2a:36:0d:69:2c:a7:27:21:44:e1:5b:7f:
e9:4f:ca:2d:42:40:fe:bc:ee:27:68:8f:a8:27:6b:09:08:0c:
65:59:04:7a:79:a8:00:d8:92:44:45:ba:a6:a8:0a:a1:9b:93:
ce:18:75:a1:6e:51:b7:ee:eb:3e:6b:da:43:a7:c2:12:18:db:
c6:78:36:d5:ad:33:dd:2b:ee:2d:c5:49:07:2a:14:5a:b5:ad:
71:2d:f1:d5:24:be:ef:e3:85:0d:c8:25:e0:96:3c:d1:e4:7d:
0b:6e:26:59:9b:70:ff:2b:6e:cc:6e:f4:27:6c:0e:f3:7d:14:
36:3d:e0:43:e7:ce:26:fb:9e:95:e1:4d:b4:93:06:fd:7b:cd:
cd:0e:ea:32:ea:89:58:1a:f0:3d:2b:87:22:b6:9f:c7:b9:11:
80:8f:24:a6:83:27:b0:ad:df:02:e4:07:16:29:e5:6b:fa:96:
5a:08:ba:6e:7c:9d:3d:f1:ff:2a:70:26:42:89:04:e0:70:e4:
42:b3:0e:20:cc:c9:24:37:11:d9:8a:c6:b9:23:9b:e7:36:e3:
13:5e:fc:c7:9c:22:4c:c6:e6:73:b2:e4:7b:57:ca:77:53:c7:
de:8d:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:47 2026 by rpki-client