Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: wDrUOl2pfwaU7TRjtvvjTnkAyPPo4aI2tJIuhRcGzto=
Subject key identifier: AC:7A:1D:DC:DC:13:B5:AA:60:1B:8D:9D:AD:FB:5E:B1:8B:4A:FE:D3
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 01A0F5D72018A2C92BDC7F7B81260B612593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1A7F
Signing time: Thu 01 Oct 2026 05:01:51 +0000
Manifest this update: Thu 01 Oct 2026 05:01:51 +0000
Manifest next update: Fri 02 Oct 2026 05:01:51 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: vGP5EEDwd864C7I7hd7wRIuNvevGCDhJhT9cQ2YHoYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:d7:20:18:a2:c9:2b:dc:7f:7b:81:26:0b:61:25:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Oct 1 05:01:51 2026 GMT
Not After : Oct 2 05:01:51 2026 GMT
Subject: CN=ac7a1ddcdc13b5aa601b8d9dadfb5eb18b4afed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:d1:b8:d3:ca:24:81:4f:a3:c5:1b:39:c8:
ab:d4:20:9c:3a:0d:18:25:cb:2d:f8:51:f1:b5:e1:
07:3b:d4:7d:c9:b8:27:c6:42:4d:d2:65:d1:ab:5b:
90:b9:d5:af:7a:83:c5:72:c4:2b:46:10:00:3b:e4:
1a:02:04:05:b7:b5:cb:c3:78:9d:fd:24:a3:c4:f2:
8f:b2:39:af:5b:4c:83:91:64:36:40:14:3c:d5:ff:
d3:5f:b2:1c:b3:1d:7a:8d:6b:23:6a:de:71:4b:4a:
c0:48:d2:a6:0b:1d:ff:d0:5d:2b:85:69:56:73:4c:
2d:68:a7:c8:9d:01:38:04:54:7c:86:7c:bc:ff:d2:
b3:8d:be:10:c5:97:37:c5:eb:02:d7:9b:b6:1e:17:
c0:ae:9c:16:6e:b3:fb:7b:fb:6e:6d:2b:7b:e5:62:
07:02:ab:03:6a:29:3e:e6:97:70:0c:f9:5a:25:6d:
1e:ff:38:f3:3c:ae:7d:48:42:a6:cb:2e:da:ac:03:
85:34:26:ca:7c:ad:2e:6e:da:8b:ac:70:78:3c:4c:
64:6c:c9:5d:80:8b:14:4b:aa:e2:f2:a3:a4:ac:cb:
41:c9:74:f8:5d:5e:b9:ab:01:5b:72:5b:8b:ab:21:
d3:75:98:07:15:d6:b0:f9:44:4d:b9:6a:d2:32:21:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:1D:DC:DC:13:B5:AA:60:1B:8D:9D:AD:FB:5E:B1:8B:4A:FE:D3
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2c:49:4c:2a:82:9a:58:27:7a:4d:26:0d:4d:28:17:2d:93:
88:ab:64:49:4c:e4:c4:b0:38:d4:d1:35:bb:20:68:c2:a2:55:
17:73:63:8e:b7:de:1b:b8:34:07:ae:0a:0e:ca:5b:d8:a0:60:
ba:a1:c7:4d:70:ac:20:93:cd:b7:f4:50:1a:17:59:9a:bb:94:
15:f6:8f:71:db:a0:36:ae:64:b4:e3:3d:c1:9c:8d:b4:ae:eb:
d4:b9:e9:7e:07:28:01:be:16:2b:39:51:04:e2:b1:c3:1a:ea:
84:cc:7d:6b:d2:28:f7:ad:dd:46:f4:a7:1e:10:b2:8d:94:68:
e6:b4:a8:65:37:62:51:4c:d9:61:73:d3:68:e9:2e:8a:62:a2:
48:69:6d:8f:6d:d1:7e:c8:08:a5:62:7c:b5:ea:59:9e:82:e1:
54:93:94:8a:9c:e3:ad:58:53:f4:ad:64:3b:61:f7:e9:a3:c5:
4b:84:61:84:d1:6b:9f:d7:60:54:7c:aa:8c:5d:d3:3f:2b:d6:
4d:5c:0e:db:a8:78:80:0d:62:5a:ae:25:3f:f3:e8:20:14:62:
88:64:40:45:e3:44:bc:89:24:8d:f4:03:1a:63:f9:54:07:5e:
f5:d4:71:49:92:f1:8f:65:35:e3:06:ba:91:e6:e8:c4:71:c0:
47:ef:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:54:24 2026 by rpki-client