Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: cVKbJLor8+3LN4l5ju/BzbFb6Syp5uBuleF+Qyc7mHs=
Subject key identifier: FA:70:CC:11:BC:6D:8B:7D:C4:87:16:8D:7D:F1:7F:9F:5D:6C:41:E6
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 019D99992373370CEF43069C8C1268CCAA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:43 +0000
Manifest this update: Fri 17 Apr 2026 04:00:43 +0000
Manifest next update: Sat 18 Apr 2026 04:00:43 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: YWAP2sTeckiola5+cI6a6E9HW5IC3gdrMMcnz1uWlac=)
2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:23:73:37:0c:ef:43:06:9c:8c:12:68:cc:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Apr 17 04:00:43 2026 GMT
Not After : Apr 18 04:00:43 2026 GMT
Subject: CN=fa70cc11bc6d8b7dc487168d7df17f9f5d6c41e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:84:38:c8:d1:d2:ac:2a:c7:e0:86:60:38:02:
3d:9b:0f:67:de:86:fd:4d:52:1f:ba:78:d4:02:f9:
cb:63:8e:92:59:51:19:07:38:cd:8b:97:80:61:d0:
b7:a0:38:7c:62:ce:3d:c7:fb:e4:8d:7a:1c:4d:23:
6f:fd:a3:34:11:27:ea:90:55:98:f3:1d:3c:b4:b9:
41:8b:3a:70:d6:1d:53:d5:2f:7f:34:96:df:8d:7c:
66:10:e7:66:74:1c:52:37:f1:5c:62:2d:67:1b:23:
3d:1f:a4:d2:dd:f2:ed:98:4f:30:4d:9c:eb:2c:8d:
f5:04:37:46:9f:c4:eb:a3:ee:18:1c:04:15:55:bb:
59:ec:b7:35:30:d0:a9:9b:db:e6:a2:93:12:77:69:
2c:10:dd:23:dd:aa:44:f8:d9:dc:03:54:2e:e5:97:
d6:75:51:c2:dd:aa:e4:3f:08:ac:01:b5:7b:50:b5:
ab:e1:f9:96:78:59:fb:68:70:4e:89:37:88:cb:6a:
04:ec:25:cc:57:53:52:30:f9:d7:6e:d9:29:a9:fc:
26:0f:cf:16:f6:17:88:eb:b5:14:6b:7c:4b:78:a0:
10:ea:4b:b7:90:52:d1:dc:f9:0d:db:44:94:5b:45:
fd:43:ec:fe:fb:2e:b0:29:aa:d8:6a:ba:68:2f:82:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:CC:11:BC:6D:8B:7D:C4:87:16:8D:7D:F1:7F:9F:5D:6C:41:E6
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:85:3a:46:2f:61:07:ac:d8:41:e7:6c:12:42:47:2c:93:9f:
f5:69:a2:93:de:15:22:f6:14:3f:2e:5c:09:d9:bd:4d:1c:f3:
0f:91:8b:3d:b1:54:d5:6f:ba:61:ff:52:2e:27:22:5d:0c:67:
91:3c:8f:6a:c8:10:0c:23:ea:ca:25:08:b5:c2:ca:b6:c3:72:
cf:cc:87:9a:05:96:6b:b9:4e:ed:39:f6:04:43:ce:88:06:a0:
4f:ca:99:a3:6d:37:dd:e7:3d:f1:f4:7c:ba:b9:1d:38:b2:4d:
4d:df:6c:7e:da:cc:00:f7:6e:12:19:f0:a6:ed:bd:a7:88:7e:
cc:c3:64:0a:77:86:5a:f3:f4:7a:67:38:23:68:56:fa:91:64:
86:63:18:a0:ef:85:ac:57:d4:3b:f7:2b:32:0f:c4:31:96:d8:
cd:72:fb:d8:b0:d2:fe:58:ce:6b:9c:e7:aa:22:13:cd:70:ee:
9d:03:45:c6:97:28:47:58:10:a2:f8:28:e9:c2:3d:93:37:3d:
5a:71:e6:65:27:02:b0:4f:a2:e5:14:df:af:30:c3:ec:d2:d6:
44:1e:16:b6:42:35:60:0c:a4:bd:0c:62:15:cf:4e:cd:21:56:
df:ff:c6:d9:33:69:38:db:6b:3a:99:9d:f3:0f:9c:1c:e0:21:
83:cd:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:24 2026 by rpki-client