Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: LPI2mvVY25BSpyHgRs6TLNVzz88KCLXSYeF0rymQ478=
Subject key identifier: 84:7A:37:3A:8C:EB:8B:90:05:C5:EF:F4:5E:E0:82:D2:9E:29:62:6F
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019EC3DC7464852ECE14B399BDC616E8CBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 195C
Signing time: Sun 14 Jun 2026 02:01:05 +0000
Manifest this update: Sun 14 Jun 2026 02:01:05 +0000
Manifest next update: Mon 15 Jun 2026 02:01:05 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: yA4yyYYNxlROInM+0S+nwpEiWBkNlwzR4ahwQvTykK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:74:64:85:2e:ce:14:b3:99:bd:c6:16:e8:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jun 14 02:01:05 2026 GMT
Not After : Jun 15 02:01:05 2026 GMT
Subject: CN=847a373a8ceb8b9005c5eff45ee082d29e29626f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:09:aa:a9:07:a0:08:8c:0f:9b:83:96:4f:
a2:b0:db:e4:d6:f3:6a:6e:11:e2:93:bc:1d:98:3e:
4a:81:17:c5:f5:f0:b4:db:41:a8:2c:2b:5a:86:07:
44:a3:2b:c6:61:a9:70:c8:88:af:26:d7:8d:9a:0c:
28:c2:c0:c0:ff:4e:45:d4:1b:51:bf:23:4f:c1:5a:
0e:b4:79:1b:c6:01:09:55:a6:66:0d:a9:e8:eb:7e:
79:fd:94:0d:71:2f:22:0a:7d:c1:16:5c:43:0c:0a:
c6:00:d6:4f:c8:83:c3:b2:73:32:8f:45:16:c8:83:
94:64:0e:78:b7:80:55:bb:71:3b:9c:5f:c7:0a:c5:
59:fb:03:07:f5:2e:0b:e8:0a:db:54:26:30:69:fe:
8f:c9:43:45:db:cc:db:8b:cb:71:70:44:37:2b:51:
31:33:c4:23:28:f6:73:99:59:dd:5a:a1:c4:42:e9:
7e:de:6e:2c:52:35:11:23:39:7b:98:d9:01:6a:70:
ea:a5:cb:58:24:65:c2:01:3f:86:9d:73:18:f5:2e:
02:18:4c:a6:8a:3c:16:bd:a3:91:76:d2:7e:b7:0b:
58:7a:e8:6e:cf:fe:d3:bc:0c:f4:79:8d:ca:33:16:
8e:17:8e:4d:f9:19:7f:d0:74:b6:b9:e0:2d:f7:74:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:37:3A:8C:EB:8B:90:05:C5:EF:F4:5E:E0:82:D2:9E:29:62:6F
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f9:14:cb:9c:83:35:01:06:19:55:82:86:2e:c9:2d:33:6e:
67:a2:61:c4:a7:00:c1:18:64:ee:a3:ed:db:57:b2:d7:0f:1b:
48:0e:15:4d:3b:df:c5:4e:d7:c9:58:b8:b0:d0:8c:df:f0:b6:
5a:5f:33:55:76:13:68:9d:3c:f3:ef:77:5d:0a:9c:e6:d2:c7:
f0:27:93:5a:f2:d5:f0:1c:91:f4:31:7d:35:bc:c5:a4:75:7b:
9a:17:d4:69:67:85:2a:49:3f:2e:54:b4:37:02:70:23:42:10:
bb:f2:3b:d5:da:cf:54:31:88:dd:67:4f:3f:0d:6b:07:a0:e6:
54:e8:4b:f5:11:8d:d7:c4:08:4c:14:d1:fb:39:23:4d:df:a8:
28:61:a8:91:25:b1:ca:da:5f:e0:ee:f6:f1:6c:cf:99:12:58:
fb:ba:c0:c8:6e:e6:b5:d8:cc:35:a8:63:04:17:a5:4e:68:a1:
58:2e:f9:42:c1:fe:6b:94:91:48:34:91:e2:76:94:2b:3b:e1:
9a:3a:a9:a9:d8:3b:a3:d4:3d:de:6e:48:98:4a:47:14:ed:84:
4a:02:e7:94:02:82:74:2c:aa:e6:b3:8e:ac:d3:60:d9:c0:42:
fa:5e:61:58:2f:4e:e4:6d:bb:8f:ea:52:50:6c:a3:84:d8:c7:
4c:91:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:43 2026 by rpki-client