Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: EavGUj4jVCKvsJaCjBbJKm0i7Q/pBF+e0H57epMwVkE=
Subject key identifier: B3:F1:F9:F7:4E:A2:3D:69:85:E3:88:62:C7:A8:47:F6:EC:03:84:71
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019D988676D29C4B4F875D5610533CFE740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:42 +0000
Manifest this update: Thu 16 Apr 2026 23:00:42 +0000
Manifest next update: Fri 17 Apr 2026 23:00:42 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 5U6/bNmZYROwqaiLxqcpuiWUxksGmzTscNrLFB903UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:76:d2:9c:4b:4f:87:5d:56:10:53:3c:fe:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Apr 16 23:00:42 2026 GMT
Not After : Apr 17 23:00:42 2026 GMT
Subject: CN=b3f1f9f74ea23d6985e38862c7a847f6ec038471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:2a:d8:06:0b:f3:83:b1:bb:4d:14:e6:d3:
85:d9:45:2c:d2:76:b7:40:62:bd:5d:6c:c0:7c:bf:
b1:73:1f:e4:94:6f:b2:12:20:e1:06:24:9a:7a:16:
07:17:2b:04:94:e2:1e:64:0d:1e:c7:9e:a4:81:7a:
b5:60:99:7a:2b:c7:de:7a:9b:bc:1f:34:41:5b:03:
09:7e:f6:f0:b4:9c:ba:34:d7:68:d3:49:5f:81:43:
59:e2:fe:26:48:0e:5e:c7:2b:3b:c4:4f:1d:e2:d8:
26:24:4a:8e:18:6b:30:5f:c0:44:37:e6:35:42:b3:
d9:c6:21:9c:63:c8:5d:e1:71:d6:0e:57:c9:a0:8d:
d7:90:0a:02:88:c8:71:77:f5:79:d4:4f:53:5e:b5:
d3:dd:82:a9:bd:0a:4d:b7:20:d1:66:07:2b:0f:1f:
f6:6b:8d:ab:44:3f:1b:7f:41:73:06:c8:00:87:8a:
f5:85:d8:ca:fb:9a:80:a0:8f:ba:19:21:5a:ac:b8:
bd:4e:4f:f3:09:1f:f6:9b:1b:12:9e:31:0a:a3:47:
7f:5a:3a:60:71:46:e2:54:71:05:31:01:9b:f8:f3:
5c:ca:a4:85:69:c9:36:a5:53:d1:82:d4:52:c3:29:
6e:c2:79:69:cf:f7:8c:ac:34:b8:ed:c2:60:1f:9a:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F1:F9:F7:4E:A2:3D:69:85:E3:88:62:C7:A8:47:F6:EC:03:84:71
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ac:cd:86:04:5c:1c:a3:23:cd:ef:dd:ac:e5:87:a8:77:30:
94:f8:9b:46:40:ab:52:c5:c2:8a:e1:c5:f2:ac:e2:47:26:e7:
56:e1:c3:5e:2a:05:c2:4c:b3:5a:1b:94:09:b3:c9:c0:77:7c:
32:a0:a9:cb:33:65:e5:d0:3b:b7:56:4a:ba:3e:49:a9:9c:c5:
a7:d2:ec:35:0b:a2:09:f9:f8:1e:87:ea:b7:b6:e6:22:6a:86:
3b:5b:6f:e4:53:f0:20:66:2e:89:08:43:c9:9e:e0:40:15:dc:
b4:91:01:51:ba:d7:72:44:a4:4d:ac:0c:d8:93:d5:67:0e:77:
fc:e9:3b:c1:95:a5:5f:16:9e:16:73:33:4f:47:59:10:82:9d:
40:33:4b:ee:97:64:27:9c:9b:82:b3:36:44:a0:85:3b:1c:fe:
b9:d7:33:74:8a:ce:12:8f:11:7f:c7:5d:af:7a:ba:df:7b:9e:
1c:48:fb:c6:fb:7e:c6:10:6f:17:c3:cd:7b:5c:67:88:35:b4:
d3:a8:79:33:0f:d0:db:d4:7d:23:bc:21:9e:75:b3:91:5a:b1:
94:45:f8:23:d8:82:9b:ce:b6:54:5f:e6:f6:ab:94:a0:b5:19:
6d:d2:63:61:fb:07:cf:38:84:d4:e6:d2:13:8e:b9:8b:74:4c:
b0:5c:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:49 2026 by rpki-client