Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: P7PvWWSuge5TzLlwPnQwAaW16loeGTVOruEcwxJuQLk=
Subject key identifier: 49:D9:BB:46:44:53:4C:7A:99:A8:34:D7:FF:78:DF:89:93:EF:EC:AC
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019F927FD8329CF91801E86B38FD7A492DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:01:19 +0000
Manifest this update: Fri 24 Jul 2026 05:01:19 +0000
Manifest next update: Sat 25 Jul 2026 05:01:19 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: HfAOP6+Eh8Q/x0tvTkMpyt+LIYuxLINW2BBYtRikqoI=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:d8:32:9c:f9:18:01:e8:6b:38:fd:7a:49:2d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jul 24 05:01:19 2026 GMT
Not After : Jul 25 05:01:19 2026 GMT
Subject: CN=49d9bb4644534c7a99a834d7ff78df8993efecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:5f:9f:41:52:12:fe:e2:a7:95:44:9b:fc:
8e:51:e6:31:18:d5:02:0a:d5:c0:0e:2f:aa:88:af:
fc:00:ce:64:c3:3d:93:15:ff:78:9a:b0:69:ae:86:
f1:31:60:2b:d5:e3:f3:c7:f9:1f:31:69:e6:d2:f6:
13:59:3f:0b:41:f6:ff:a0:a7:4e:f3:c8:f6:db:e7:
a5:1f:37:85:dd:10:c4:8e:e3:4b:fa:1a:ef:f1:4c:
39:ef:b1:5c:20:ac:9a:ad:09:06:9e:a9:df:56:09:
c1:0a:c8:70:10:ae:13:3c:bc:49:11:1a:ac:6a:01:
a0:2e:fb:c4:5e:3a:1d:1c:5e:40:6c:6a:3a:36:b9:
43:28:10:19:8f:c9:63:2b:4a:47:6b:ff:4c:27:8b:
63:23:a8:c8:f8:e0:fe:24:eb:0c:87:ee:a6:4c:9a:
ba:69:99:cf:e2:00:42:2d:83:84:c1:2c:d2:95:c1:
53:a6:5f:53:cc:20:7a:7c:b6:a1:2b:ce:65:48:58:
74:e5:6a:4a:1b:40:2f:4c:31:01:04:1c:2e:09:16:
03:d3:fd:2e:25:95:b2:41:7a:ff:ee:39:0d:5b:ac:
a8:87:c8:48:7b:cb:fc:c5:fb:9f:63:69:4d:25:09:
d3:56:8a:d3:62:ae:a0:ab:92:cf:de:78:cd:a4:ee:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:BB:46:44:53:4C:7A:99:A8:34:D7:FF:78:DF:89:93:EF:EC:AC
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f5:52:46:de:a0:95:3f:59:47:52:98:5e:18:13:e9:2d:ec:
10:a7:a2:44:93:32:75:bc:01:4f:08:ac:89:f6:70:ee:8f:9a:
f7:e3:c2:5e:16:15:57:1b:c3:89:77:61:01:00:38:d2:fb:88:
97:e1:e4:bb:b0:46:81:0a:34:d3:ab:c4:cd:0d:4f:69:ef:79:
f9:97:15:36:d5:87:54:2f:50:ad:63:60:68:67:26:68:2c:c6:
c7:59:2d:05:14:02:71:ce:45:6a:83:96:d5:39:63:27:ca:89:
99:da:1e:d5:b9:74:1a:cb:af:e0:e4:4c:3d:a7:d8:a6:96:dc:
31:f8:f4:9f:de:38:9d:5c:50:0e:66:53:c2:7f:17:5a:1a:a5:
4b:d5:c4:16:20:35:7f:87:8a:e4:c9:e5:c8:b4:06:3b:2e:80:
fd:a4:e5:8d:6e:71:8f:ff:61:66:30:5b:82:91:ce:29:67:7b:
d8:3b:1a:b2:b0:28:07:7d:4d:48:b0:1a:2f:c3:27:41:45:09:
1a:0f:8a:3a:9d:22:7d:ca:38:65:cf:73:ab:f9:87:1b:39:09:
95:57:50:42:3c:e4:2d:a2:32:b4:d0:e6:c2:e7:4c:76:c7:32:
2b:bd:61:b5:91:7a:44:f6:dd:2c:44:f9:b5:4a:5b:3b:9c:84:
c6:59:5d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf9gynPkYAehrOP16SS3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0
YWQyN2EwHhcNMjYwNzI0MDUwMTE5WhcNMjYwNzI1MDUwMTE5WjAzMTEwLwYDVQQD
Eyg0OWQ5YmI0NjQ0NTM0YzdhOTlhODM0ZDdmZjc4ZGY4OTkzZWZlY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fhfn0FSEv7ip5VEm/yOUeYxGNUC
CtXADi+qiK/8AM5kwz2TFf94mrBprobxMWAr1ePzx/kfMWnm0vYTWT8LQfb/oKdO
88j22+elHzeF3RDEjuNL+hrv8Uw577FcIKyarQkGnqnfVgnBCshwEK4TPLxJERqs
agGgLvvEXjodHF5AbGo6NrlDKBAZj8ljK0pHa/9MJ4tjI6jI+OD+JOsMh+6mTJq6
aZnP4gBCLYOEwSzSlcFTpl9TzCB6fLahK85lSFh05WpKG0AvTDEBBBwuCRYD0/0u
JZWyQXr/7jkNW6yoh8hIe8v8xfufY2lNJQnTVorTYq6gq5LP3njNpO6fkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnZu0ZEU0x6mag01/9434mT7+ysMB8GA1UdIwQY
MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt
N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0
LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPVSRt6g
lT9ZR1KYXhgT6S3sEKeiRJMydbwBTwisifZw7o+a9+PCXhYVVxvDiXdhAQA40vuI
l+Hku7BGgQo006vEzQ1Pae95+ZcVNtWHVC9QrWNgaGcmaCzGx1ktBRQCcc5FaoOW
1TljJ8qJmdoe1bl0Gsuv4ORMPafYppbcMfj0n944nVxQDmZTwn8XWhqlS9XEFiA1
f4eK5MnlyLQGOy6A/aTljW5xj/9hZjBbgpHOKWd72DsasrAoB31NSLAaL8MnQUUJ
Gg+KOp0ifco4Zc9zq/mHGzkJlVdQQjzkLaIytNDmwudMdscyK71htZF6RPbdLET5
tUpbO5yExlldnA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:34 2026 by rpki-client