Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: V2oJOJIbYqcP4RwCmUXxka20DnGcjMPI8swuJHSkXHM=
Subject key identifier: 2D:92:20:CF:E5:AF:F6:F1:D1:78:BF:DB:06:11:ED:55:C9:B3:C9:C3
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019E1FB5DF64259C0A5D0843DDD310A80A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:01:13 +0000
Manifest this update: Wed 13 May 2026 05:01:13 +0000
Manifest next update: Thu 14 May 2026 05:01:13 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: v7z0dysZv13oVT72Wtsjr2aEtI2+agJiEVqyGIf9rfs=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:df:64:25:9c:0a:5d:08:43:dd:d3:10:a8:0a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: May 13 05:01:13 2026 GMT
Not After : May 14 05:01:13 2026 GMT
Subject: CN=2d9220cfe5aff6f1d178bfdb0611ed55c9b3c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:83:a1:a0:19:16:b1:08:d3:70:28:78:e6:
20:5a:96:61:62:0f:48:89:b0:0b:34:81:b6:a4:61:
55:6d:69:d2:4f:ff:45:4b:1e:5a:3b:03:0c:cc:80:
b2:22:33:c5:48:54:12:97:2d:39:48:c6:a2:8b:bc:
38:a6:b3:0e:da:9e:b3:ab:46:55:bd:34:5f:69:fb:
0a:f8:7d:c2:ba:0c:4b:19:7f:e8:63:fe:d3:31:64:
d6:d0:d2:74:23:c9:d6:0d:e9:f9:95:85:2c:5e:15:
e4:e1:2d:28:47:7b:38:af:5c:b7:6c:f3:54:e8:d2:
c3:6f:07:d5:f8:16:b0:c7:4b:93:ab:b2:bb:08:40:
ff:2f:bc:bb:34:4d:37:eb:62:3e:f6:75:59:dd:79:
9b:8a:89:d0:5c:4c:da:b0:e4:4b:bc:fa:da:77:47:
bb:33:dc:c3:5e:a3:7e:a7:fd:d3:8e:b9:1c:86:c4:
2b:5d:80:26:b7:d7:4b:51:96:0a:be:23:5d:00:a6:
92:55:65:6f:43:0d:82:a2:aa:ec:16:66:56:03:85:
c5:c6:f7:98:e4:be:8d:3a:7b:9a:29:b4:43:44:af:
74:28:de:b5:08:d5:b3:e8:6e:8b:0c:c6:68:9f:e8:
6c:4a:78:79:eb:a5:96:fe:c7:9c:7d:9a:67:23:60:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:20:CF:E5:AF:F6:F1:D1:78:BF:DB:06:11:ED:55:C9:B3:C9:C3
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d5:71:9d:67:4e:0e:e9:c0:50:1e:9c:3a:39:ff:5a:28:d3:
a9:ea:d5:c6:9d:f4:1c:ab:8f:cf:4d:39:70:55:e2:c1:f8:95:
d8:69:ea:ba:2f:f2:f9:c4:62:3f:31:2a:03:04:38:b0:a7:d0:
8a:6d:ba:d7:44:65:dc:62:88:1f:87:49:eb:8a:a9:f6:c5:b1:
d4:f1:90:7a:b3:b6:bd:69:d2:d6:b7:a8:ee:bc:02:6d:9f:c3:
0a:28:3e:56:aa:49:dc:7f:74:e8:49:2d:cb:53:3c:85:b0:0c:
60:d8:e6:42:19:9e:1e:73:a4:c0:72:39:6e:76:86:5e:73:e1:
74:9c:91:76:b1:0c:14:14:04:38:a7:b6:f0:7c:de:5f:d3:34:
6c:34:a5:47:a1:86:16:a6:95:b5:9b:c4:36:33:07:7d:7b:84:
1d:a4:1c:59:fc:89:11:00:6c:1f:fe:71:5b:cd:12:e8:1a:56:
53:d3:23:40:21:f7:49:61:b2:9a:e3:db:1a:85:12:67:04:85:
e9:9c:24:2b:eb:d1:57:e7:10:91:41:c7:f8:35:b9:c0:3f:37:
11:e8:47:1e:42:1b:eb:79:e7:bc:04:37:1a:f2:75:d5:c1:8b:
0c:34:6a:26:f9:40:32:af:2c:ae:aa:51:a9:33:c1:8a:14:ec:
32:d9:84:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftd9kJZwKXQhD3dMQqAqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0
YWQyN2EwHhcNMjYwNTEzMDUwMTEzWhcNMjYwNTE0MDUwMTEzWjAzMTEwLwYDVQQD
EygyZDkyMjBjZmU1YWZmNmYxZDE3OGJmZGIwNjExZWQ1NWM5YjNjOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCGDoaAZFrEI03AoeOYgWpZhYg9I
ibALNIG2pGFVbWnST/9FSx5aOwMMzICyIjPFSFQSly05SMaii7w4prMO2p6zq0ZV
vTRfafsK+H3CugxLGX/oY/7TMWTW0NJ0I8nWDen5lYUsXhXk4S0oR3s4r1y3bPNU
6NLDbwfV+Bawx0uTq7K7CED/L7y7NE0362I+9nVZ3XmbionQXEzasORLvPrad0e7
M9zDXqN+p/3TjrkchsQrXYAmt9dLUZYKviNdAKaSVWVvQw2CoqrsFmZWA4XFxveY
5L6NOnuaKbRDRK90KN61CNWz6G6LDMZon+hsSnh566WW/secfZpnI2B+XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2SIM/lr/bx0Xi/2wYR7VXJs8nDMB8GA1UdIwQY
MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt
N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0
LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdVxnWdO
DunAUB6cOjn/WijTqerVxp30HKuPz005cFXiwfiV2Gnqui/y+cRiPzEqAwQ4sKfQ
im2610Rl3GKIH4dJ64qp9sWx1PGQerO2vWnS1reo7rwCbZ/DCig+VqpJ3H906Ekt
y1M8hbAMYNjmQhmeHnOkwHI5bnaGXnPhdJyRdrEMFBQEOKe28HzeX9M0bDSlR6GG
FqaVtZvENjMHfXuEHaQcWfyJEQBsH/5xW80S6BpWU9MjQCH3SWGymuPbGoUSZwSF
6ZwkK+vRV+cQkUHH+DW5wD83EehHHkIb63nnvAQ3GvJ11cGLDDRqJvlAMq8srqpR
qTPBihTsMtmEsg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:42:27 2026 by rpki-client