Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: Dcp65PZEnkThdkzw5c/ST/b3SuuiWAcpR5mVy2nvAlI=
Subject key identifier: A6:43:64:AD:F6:D9:98:67:BB:F8:A6:2A:E0:65:45:5B:2C:38:1A:5A
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 01A0FBA17968AC11824AB47F5055F33B9B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1A83
Signing time: Fri 02 Oct 2026 08:00:58 +0000
Manifest this update: Fri 02 Oct 2026 08:00:58 +0000
Manifest next update: Sat 03 Oct 2026 08:00:58 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: gEgqNg8LZCbmDViipiXaCTL/wWRHeSHO6t7XS3qBm4M=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:a1:79:68:ac:11:82:4a:b4:7f:50:55:f3:3b:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Oct 2 08:00:58 2026 GMT
Not After : Oct 3 08:00:58 2026 GMT
Subject: CN=a64364adf6d99867bbf8a62ae065455b2c381a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:f0:81:12:3a:25:98:21:bf:88:8a:a8:ea:
ed:a5:a5:29:36:71:9b:c1:2b:23:81:78:2e:6d:9a:
d0:3c:6c:2c:c9:d0:49:14:41:ff:13:59:1f:9c:0f:
93:3c:d1:19:c1:15:df:77:d0:2a:3d:58:59:1d:13:
03:3d:78:ef:bf:6b:c1:44:93:31:c2:cb:0c:4a:1c:
83:a7:81:02:9f:87:60:29:39:58:97:cf:96:4a:46:
6a:65:4d:37:de:1c:cd:23:1a:76:60:98:fb:5d:5a:
a7:7f:1d:c3:93:16:37:5b:14:f5:b5:2b:9d:2e:9b:
8b:75:48:b8:f7:6d:37:6f:7a:83:d7:82:91:2a:be:
84:93:ef:c8:7f:40:67:13:41:53:54:78:5c:44:78:
8e:d5:f1:c4:4a:b7:28:0a:6a:06:85:5a:59:99:64:
f0:e3:21:81:48:f8:96:4e:4e:22:ee:db:7a:2f:20:
e9:0d:70:32:1e:2f:07:60:2d:42:c1:50:0c:00:35:
6d:f6:6b:27:b3:fc:b4:25:07:f4:d2:ec:9f:88:3b:
ef:9d:d7:29:47:0f:8d:29:2a:88:f8:fd:4b:1c:da:
ab:e7:41:45:05:87:f0:12:25:62:5d:76:0a:38:e3:
41:28:8d:f1:2e:a2:fc:0d:4b:76:fd:bf:76:53:47:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:43:64:AD:F6:D9:98:67:BB:F8:A6:2A:E0:65:45:5B:2C:38:1A:5A
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4c:dd:f2:bd:69:c3:70:01:4c:f7:89:f2:3d:c5:9e:0f:02:
5e:0d:ce:e8:cc:0a:1d:a4:c0:af:4a:91:84:cf:56:4a:37:69:
be:5b:7d:1d:8b:68:2b:08:a1:88:1e:88:d4:e8:89:37:7b:d3:
b2:b8:b7:c5:cf:90:74:2d:92:06:e6:3e:de:71:7e:88:ad:95:
a7:f8:dc:e5:01:13:8b:4d:e3:6b:3b:df:d9:03:4f:f8:00:40:
91:25:83:93:56:6e:a5:23:bb:55:3d:0c:dc:6f:ec:c5:21:73:
5d:73:72:b8:73:3d:e1:81:1e:34:7f:8e:63:44:64:94:f7:3e:
16:a0:28:8e:f1:b4:2b:ed:40:0f:95:40:2a:9c:d2:ca:b6:f3:
f1:3a:ee:14:d4:e1:83:1a:83:66:0b:7e:3a:d3:62:a5:c1:ed:
08:c2:98:2b:e8:13:2f:38:07:34:14:be:fa:a1:30:57:ce:d0:
08:0a:ef:94:e1:c2:41:31:a3:7a:e1:4e:46:f5:d8:89:00:22:
f1:30:c1:80:93:fe:2d:f9:4e:7d:13:9c:65:12:39:ab:e4:da:
7f:3b:57:88:22:3d:91:d7:05:bc:de:28:a9:77:50:f1:7f:8f:
1b:6a:69:8b:21:7e:53:1e:48:e1:cd:ef:95:25:66:12:89:b2:
a2:73:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:46:00 2026 by rpki-client