Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: LEFoSyOACquaX/s0pHiy/cnQZF93JGsfvhbIABarXfk=
Subject key identifier: 18:44:DB:5F:AE:1A:1F:22:2B:99:D6:C2:C9:F2:AA:BB:E6:4B:52:31
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019FAB9A9C9D23D24C4BFBFD96184A2EB66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 02:01:04 +0000
Manifest this update: Wed 29 Jul 2026 02:01:04 +0000
Manifest next update: Thu 30 Jul 2026 02:01:04 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 8CtzAmwbibQArvV5xx/rI/n8VbRPdotPPfiKwSHUsfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:9c:9d:23:d2:4c:4b:fb:fd:96:18:4a:2e:b6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jul 29 02:01:04 2026 GMT
Not After : Jul 30 02:01:04 2026 GMT
Subject: CN=1844db5fae1a1f222b99d6c2c9f2aabbe64b5231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:ee:10:1f:6e:28:36:e4:ee:b3:ec:e0:c1:
93:bf:96:e5:b5:a6:d9:0e:05:ce:98:d0:dd:68:94:
50:cb:b6:8b:ad:4b:69:72:27:05:48:bf:5d:75:a1:
8d:63:05:44:68:0e:46:53:2c:3e:05:43:22:4d:03:
7d:83:82:ab:92:ad:2f:ef:0f:9a:93:45:06:2d:ed:
5e:95:e5:d7:f8:98:e0:1d:9a:6d:ea:be:bf:50:d8:
0f:10:ff:3e:d5:24:71:37:14:5e:a4:3c:52:d3:36:
a2:7c:68:06:e8:88:82:ad:5c:d9:24:37:05:12:e7:
aa:b5:f2:30:f2:44:16:3e:0d:ef:3e:e1:bd:ea:52:
4a:7c:d6:a1:6e:bc:71:e4:b7:fa:1e:6a:e5:b1:29:
16:92:84:01:9e:16:46:a8:6e:b3:da:b8:97:91:8c:
7b:d7:02:aa:41:9d:f3:c3:e7:c8:86:18:1f:59:f7:
de:3b:a7:bf:03:76:18:c0:2c:92:30:08:fd:b3:64:
0d:c0:66:fb:41:07:7c:65:c6:bf:5f:a3:a2:47:1f:
e0:46:7d:e6:0a:70:92:88:dc:13:b7:ae:36:d6:81:
7a:b9:04:4b:58:17:3c:f6:47:8d:c0:41:dd:49:e1:
65:fc:ff:30:17:57:07:4e:aa:14:5c:7c:c9:ee:8f:
90:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:DB:5F:AE:1A:1F:22:2B:99:D6:C2:C9:F2:AA:BB:E6:4B:52:31
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d8:a2:12:a2:2b:da:68:c2:e2:ba:0a:cb:3b:1d:ef:48:f3:
20:93:91:4c:e9:15:d7:d1:da:03:ef:68:11:b8:92:4e:c0:c3:
1c:d5:f2:33:7a:c8:73:2b:ac:3a:df:b8:ee:a5:7f:e9:88:51:
e3:26:ea:33:3c:1c:59:cd:84:d6:e0:8b:c8:7f:01:b6:3e:0c:
33:c5:7d:e6:1a:49:38:06:b5:2d:d5:f5:2a:7d:ab:28:c5:8b:
b2:93:c6:a2:6e:23:08:fc:bc:ec:da:b8:cd:90:d5:41:ad:f9:
1a:2b:39:7a:74:73:73:a3:27:ad:5d:8d:d3:60:cc:1c:a6:f9:
6c:98:6b:2c:99:2f:30:48:a4:04:95:c0:bd:25:b1:a2:49:eb:
8e:0a:f0:72:09:b8:f7:ae:7c:e5:5a:b2:3d:aa:1d:bc:6d:59:
41:8f:62:ea:f2:3e:98:9d:0b:31:72:66:c5:b5:b9:61:24:d7:
a7:90:6c:54:5c:81:45:cf:f6:20:87:0a:88:cf:de:cc:2c:20:
4f:28:7f:fe:66:67:ed:2c:a7:00:97:bd:ec:94:ce:41:52:1c:
f5:f2:ba:b0:26:40:09:89:bf:a4:55:b2:ac:cf:ca:23:86:6e:
4c:ed:2a:57:c5:c0:e5:aa:f5:f1:d9:ad:a3:f6:13:eb:53:43:
b5:80:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:57:15 2026 by rpki-client