Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: r62BHtaxlT0JYpDbbv4UFojo9v1akG017Ee4NZwZmp8=
Subject key identifier: 24:5B:C5:38:17:01:30:E9:0C:FB:1D:05:EB:B6:F8:70:45:68:DA:BB
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 019D97E27627B76E02376A0A865E47D10B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 20:01:34 +0000
Manifest this update: Thu 16 Apr 2026 20:01:34 +0000
Manifest next update: Fri 17 Apr 2026 20:01:34 +0000
Files and hashes: 1: C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa (hash: Vnmpnxzb5d888xy3LtJLua3mvD0ti0N+tPvmlqaYeqw=)
2: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: PKoiqA+y1HLF1FJ9PwOO4kLYvzcOUoqUlZGY5Jeko0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:76:27:b7:6e:02:37:6a:0a:86:5e:47:d1:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Apr 16 20:01:34 2026 GMT
Not After : Apr 17 20:01:34 2026 GMT
Subject: CN=245bc538170130e90cfb1d05ebb6f8704568dabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:72:a2:d0:9d:f9:52:aa:06:87:59:df:de:
0f:60:21:82:78:36:32:de:e0:d9:ea:3a:3f:84:1d:
91:24:21:34:21:62:ac:98:ed:07:af:92:8a:64:d3:
1b:fc:4b:e9:4d:11:78:40:b5:df:50:7e:0a:d1:7a:
2d:d4:26:5c:97:68:cc:3c:39:66:ba:69:a2:e1:30:
6d:45:44:88:aa:c0:11:2d:f0:c2:0c:e9:d9:4b:ac:
18:f0:d8:87:a6:29:78:6f:37:04:8d:2d:83:d7:1e:
b6:c0:91:d7:a1:b5:2a:21:54:f9:63:24:3b:47:cc:
ac:8b:2d:5b:94:4b:72:ae:02:21:fa:70:b7:69:46:
b9:e5:bc:0e:43:60:db:06:51:ec:06:53:64:31:38:
ec:8c:d7:8e:5c:28:42:9f:eb:05:61:54:cd:2e:32:
18:ab:9f:45:16:fc:af:f9:69:b0:11:1a:c3:19:85:
f3:60:cb:28:fb:33:19:9d:7f:75:8f:2f:e9:9a:27:
1d:83:99:3a:64:dc:e2:d4:b7:db:fb:ca:8c:ed:00:
87:a1:1c:c9:b8:87:c6:93:c2:81:7b:31:62:3b:e9:
19:9b:35:78:64:bf:6d:5a:3e:4c:12:e7:47:e9:9d:
0f:d2:37:cc:c8:89:5c:ba:74:e3:c4:42:52:2f:1c:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:C5:38:17:01:30:E9:0C:FB:1D:05:EB:B6:F8:70:45:68:DA:BB
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ad:ba:ea:a8:b7:81:fd:d9:39:a7:43:b1:33:a0:44:ee:97:
77:db:61:bc:dd:38:df:c6:db:6c:99:4e:bb:f8:45:7f:3a:77:
6e:af:c2:f9:1d:0e:ad:a9:ba:64:cf:df:c3:3d:eb:6e:2d:d8:
a3:4f:02:34:a8:d7:98:fe:9a:16:67:0a:82:2e:f4:ef:77:99:
56:12:4c:c3:d7:34:3c:4e:c2:25:98:0e:a4:77:1e:53:9b:32:
83:f2:51:73:51:fc:a5:24:13:51:fa:cf:11:98:e5:66:f4:43:
b7:c6:e4:21:41:6e:96:a0:09:74:79:ab:fa:19:1f:b7:1f:19:
1d:7a:ef:79:80:31:e5:bb:dd:c3:3f:32:b8:67:8f:52:ba:5e:
39:e4:86:b5:ba:32:ee:b3:bd:e3:bb:d7:8f:35:85:19:d3:f4:
fe:28:44:6d:54:c9:35:54:9c:fc:04:98:a1:68:76:66:1f:f8:
93:64:cd:26:70:c0:63:f5:a9:10:7e:9d:a2:7d:a2:f2:11:ed:
98:cd:ae:d8:c6:88:ea:57:85:94:26:5f:40:bf:04:3b:77:84:
2b:a7:f2:f3:ba:bd:d3:2e:30:8e:ad:c4:7d:09:3a:95:76:13:
4e:ae:66:41:14:6e:db:39:1f:00:e6:ca:b2:fc:f0:f4:d5:21:
7c:db:4f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:12 2026 by rpki-client