Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: ui/+9AHp7xArdC/LiOjMIieM+1PJJlQtsGvfHnZ/PKE=
Subject key identifier: 00:E3:EC:6B:FF:13:0B:CE:7C:C8:95:FA:1A:74:0B:8E:CB:FC:D0:37
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 019CABA1DE7B4E9939C841E182D764084448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 14E8
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa (hash: aU0rHFNkYFHdV5H8egljpHkLcw9iIq3HEwixa6GSrPc=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: +Ta/9TNWy2axTfzmj4m6rdLaPcSsmKEpD4mjrfeI7xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:de:7b:4e:99:39:c8:41:e1:82:d7:64:08:44:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=00e3ec6bff130bce7cc895fa1a740b8ecbfcd037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:6d:bb:7c:09:c9:7a:5e:51:c4:85:7c:d2:
fa:a1:6b:ad:8a:38:04:91:21:28:cc:60:20:da:8a:
d0:45:80:12:f5:e8:11:91:03:78:4d:1c:fe:bd:8f:
4c:ef:c9:fe:29:69:38:62:51:d8:ec:f2:98:96:93:
7f:13:2d:0b:0c:9f:b0:eb:30:2e:a2:85:ea:6e:1b:
93:1d:d8:dd:bd:90:64:f9:e0:8f:22:87:59:f7:16:
89:08:7f:3b:f4:07:54:02:56:98:26:e1:71:03:62:
4d:6f:b2:e6:55:b9:94:77:98:7e:4a:1b:78:32:9c:
94:49:9d:30:aa:3f:a4:e7:69:d1:f6:5d:3c:a4:36:
c3:5b:91:a6:e0:55:d4:fa:ec:e0:7a:d4:7d:08:82:
cf:c6:ea:53:4a:52:3c:ff:29:fc:b0:45:94:f9:16:
88:5a:68:9c:f1:05:e0:97:7e:fc:1c:98:68:e3:d1:
aa:1b:f9:6e:3f:55:c3:88:67:82:ba:c1:dd:5d:f8:
cb:a0:83:88:4b:70:b8:5e:16:2a:19:2f:8c:3c:b9:
9d:53:05:7f:2e:6a:e6:9e:81:96:27:9b:82:40:66:
5c:86:14:37:58:8b:ae:89:f1:fd:bd:47:c1:6d:2e:
4e:db:38:23:4e:a5:c9:f6:b7:fa:5d:75:ca:90:6b:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:EC:6B:FF:13:0B:CE:7C:C8:95:FA:1A:74:0B:8E:CB:FC:D0:37
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b4:de:30:09:c3:d1:e1:3b:e8:b4:98:5d:1f:e2:c2:40:29:
0e:01:d7:95:77:e3:31:9e:39:86:31:74:e7:18:2f:c0:4c:51:
70:cb:0a:33:11:09:88:e3:6e:9f:3b:d7:2d:97:f7:22:b7:eb:
ff:23:98:df:9e:27:f4:dc:94:54:67:a2:b4:7b:1e:8b:e8:67:
ff:86:e0:06:21:bc:d2:3e:40:81:f8:d4:d7:6c:af:a6:ac:d9:
29:5d:e9:55:d5:48:c0:1a:cd:75:50:78:46:b9:56:56:ae:9d:
ad:ea:37:f2:12:28:04:71:07:6a:ba:e9:bd:68:e5:ec:bb:67:
d5:9b:88:21:81:87:c5:41:6a:ad:85:92:79:2d:e3:5f:cb:e4:
9e:7e:95:fb:a4:10:bd:0c:e7:0f:00:e7:f0:ca:39:06:6a:e6:
ef:9b:00:77:00:32:42:3f:4c:d6:20:e5:ff:3c:04:34:46:b3:
f3:39:40:c8:03:a9:44:1b:eb:57:0d:db:2d:97:51:b1:ec:a7:
05:36:6b:49:ec:23:18:71:a1:54:1f:7b:4c:da:9b:3b:cf:b5:
ac:51:3d:85:db:0f:cd:40:3b:28:1c:24:ab:82:b2:67:f4:44:
f1:eb:67:fc:11:77:ae:f1:d6:64:ed:a1:e4:2b:2e:df:b8:55:
d3:87:7e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:56 2026 by rpki-client