Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: GHKDUn01awDPMiVSBVRDryJuSmXvW9E2bYbQ4LasTo0=
Subject key identifier: BC:68:0B:69:53:A7:A3:6F:95:B9:EC:64:F3:E3:ED:70:EB:84:42:87
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019CAEDA479095842478E22071D09B967DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:01:06 +0000
Manifest this update: Mon 02 Mar 2026 14:01:06 +0000
Manifest next update: Tue 03 Mar 2026 14:01:06 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: PRd/zK8b7dBOPdP/ovSgu8b+lfJbkqCX7EU3QBKY1qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:47:90:95:84:24:78:e2:20:71:d0:9b:96:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Mar 2 14:01:06 2026 GMT
Not After : Mar 3 14:01:06 2026 GMT
Subject: CN=bc680b6953a7a36f95b9ec64f3e3ed70eb844287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:6c:b8:13:8e:52:4b:54:32:95:6e:39:57:
be:c5:47:08:71:a0:87:bf:99:d5:6e:0a:cf:e8:d8:
e9:3c:4e:ba:64:48:0d:88:97:e1:a6:09:a3:ac:7f:
20:7c:66:a0:72:c9:d1:0a:7e:7f:2f:c5:ed:0d:e3:
b0:9b:e0:8d:4c:32:8d:d5:f4:27:c4:e0:54:db:2b:
00:8b:f1:08:20:64:3a:e8:d4:40:2d:7f:49:3b:85:
37:95:db:f5:b7:83:3e:2d:d5:4e:b9:d6:10:e0:7f:
eb:60:0b:16:d8:0c:0e:eb:a1:92:3a:34:b6:3b:48:
c5:f8:08:73:1d:82:c8:54:c3:07:4e:2a:ed:2d:24:
bc:6a:53:c4:dc:76:b1:11:8e:af:a9:09:13:43:61:
94:8d:f7:fb:5d:68:aa:d5:d1:c2:1b:b3:02:fa:b0:
9b:72:06:93:a5:62:19:06:88:2c:78:a7:e2:e5:7f:
ce:d7:59:b8:c9:24:89:f9:ba:44:76:18:01:03:2f:
3a:48:c2:d2:5d:9a:79:c7:26:25:eb:99:2f:77:82:
d0:1e:7a:20:83:43:c2:48:f3:54:ad:46:9e:02:58:
ae:9c:b1:03:3d:bc:ae:95:7c:5a:e7:91:98:59:a6:
43:92:e7:f4:57:24:65:49:e5:ba:e3:d2:2d:0e:d9:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:0B:69:53:A7:A3:6F:95:B9:EC:64:F3:E3:ED:70:EB:84:42:87
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fb:df:ab:15:91:4d:fd:27:c1:a1:24:9f:28:1f:fa:d0:96:
64:eb:64:81:62:e0:7d:62:c5:f7:d0:05:36:a6:f8:96:b6:0b:
53:7f:ab:f8:03:b5:a9:98:88:6a:f1:20:66:cc:67:12:9b:11:
23:ea:19:d6:dd:a4:8e:ee:c6:51:54:26:d7:97:55:28:26:6d:
3b:46:00:df:8c:6f:38:6b:95:7a:fc:e5:e1:e0:80:e8:40:5a:
a5:35:86:21:39:39:19:ef:98:01:37:b1:45:47:d5:4b:e9:e0:
11:07:06:b3:c3:83:c8:51:52:16:4a:4c:01:93:1b:2d:9b:f6:
ef:51:ee:47:4f:3f:19:7e:55:a1:8b:9c:e9:39:bf:82:03:38:
93:a0:f2:d8:f9:2f:e5:ed:29:6c:da:0f:c3:56:6b:39:06:b2:
71:e7:7f:b0:66:19:d7:de:e8:e9:27:ba:aa:44:7c:58:a1:bc:
56:b0:00:c7:d1:a6:d2:f9:50:c5:e5:ef:92:e5:55:5a:7c:ab:
78:d4:1e:6e:e1:af:ea:1c:0e:2c:fc:b7:8a:be:63:c0:a9:9d:
76:8d:6b:6b:c3:66:d7:88:6e:76:4d:13:79:db:45:33:d6:37:
7f:58:e6:ec:75:c8:e8:0f:37:3c:1c:09:f7:e9:fb:b2:b6:07:
38:5a:b4:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2keQlYQkeOIgcdCbln21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5
MzhiYjEwHhcNMjYwMzAyMTQwMTA2WhcNMjYwMzAzMTQwMTA2WjAzMTEwLwYDVQQD
EyhiYzY4MGI2OTUzYTdhMzZmOTViOWVjNjRmM2UzZWQ3MGViODQ0Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5lsuBOOUktUMpVuOVe+xUcIcaCH
v5nVbgrP6NjpPE66ZEgNiJfhpgmjrH8gfGagcsnRCn5/L8XtDeOwm+CNTDKN1fQn
xOBU2ysAi/EIIGQ66NRALX9JO4U3ldv1t4M+LdVOudYQ4H/rYAsW2AwO66GSOjS2
O0jF+AhzHYLIVMMHTirtLSS8alPE3HaxEY6vqQkTQ2GUjff7XWiq1dHCG7MC+rCb
cgaTpWIZBogseKfi5X/O11m4ySSJ+bpEdhgBAy86SMLSXZp5xyYl65kvd4LQHnog
g0PCSPNUrUaeAliunLEDPbyulXxa55GYWaZDkuf0VyRlSeW649ItDtnz9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxoC2lTp6NvlbnsZPPj7XDrhEKHMB8GA1UdIwQY
MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt
YTA4ODNjMGIwOTViLzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi
LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifvfqxWR
Tf0nwaEknygf+tCWZOtkgWLgfWLF99AFNqb4lrYLU3+r+AO1qZiIavEgZsxnEpsR
I+oZ1t2kju7GUVQm15dVKCZtO0YA34xvOGuVevzl4eCA6EBapTWGITk5Ge+YATex
RUfVS+ngEQcGs8ODyFFSFkpMAZMbLZv271HuR08/GX5VoYuc6Tm/ggM4k6Dy2Pkv
5e0pbNoPw1ZrOQayced/sGYZ197o6Se6qkR8WKG8VrAAx9Gm0vlQxeXvkuVVWnyr
eNQebuGv6hwOLPy3ir5jwKmddo1ra8Nm14hudk0TedtFM9Y3f1jm7HXI6A83PBwJ
9+n7srYHOFq0yg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:08:49 2026 by rpki-client