Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: AE/Z9WPaY0+6M0+42FBYzeo4WAePwdJp0y8Y9PIwjl8=
Subject key identifier: E0:EA:4C:48:DC:7C:13:E0:6F:94:B0:82:BF:A0:20:1A:4D:00:EC:B7
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 01A0F9B3CF1BD81D878A446583569F933005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 23:01:45 +0000
Manifest this update: Thu 01 Oct 2026 23:01:45 +0000
Manifest next update: Fri 02 Oct 2026 23:01:45 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: Bhblqrw07XmLg6/DeQcqAmhERT/BJSB+xb3U/FKiyiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:b3:cf:1b:d8:1d:87:8a:44:65:83:56:9f:93:30:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Oct 1 23:01:45 2026 GMT
Not After : Oct 2 23:01:45 2026 GMT
Subject: CN=e0ea4c48dc7c13e06f94b082bfa0201a4d00ecb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:71:2f:d0:c1:bb:33:7e:c1:12:eb:19:3c:
9e:5f:b2:89:ab:93:7e:df:15:ab:10:c7:7d:e7:06:
a3:aa:3b:52:52:c9:4d:c4:de:ef:7f:56:62:34:78:
99:e1:53:b8:cd:36:ce:f4:6a:66:99:89:5a:27:71:
d7:1b:84:4c:91:e6:72:0a:0c:d2:3a:61:52:98:b6:
f0:61:09:c8:57:21:aa:f5:6a:64:f1:c8:ff:45:13:
a6:21:9e:e8:42:1f:14:8d:17:fc:de:8e:5f:17:08:
a6:47:c4:81:b6:16:21:81:d4:a5:7e:7d:17:25:50:
e1:07:48:b4:05:7d:7c:7f:65:e8:28:80:9a:fe:3d:
1d:3b:03:d6:fd:0f:fc:68:5c:d4:c2:9e:0d:65:8e:
3f:ae:5e:25:97:fc:83:d1:a0:34:26:de:82:d4:31:
9d:c0:d0:e4:43:d5:6d:01:63:0e:93:cb:32:c6:16:
75:8a:af:af:9d:4c:9a:be:23:da:d4:79:c2:1c:b2:
37:0a:0b:cb:cd:db:ff:9d:0a:e9:ee:f3:bc:72:d5:
d4:99:f1:99:00:9c:5e:4f:bd:1d:93:6a:2b:d4:60:
25:5a:77:94:6b:d5:ca:a1:4a:da:fa:7d:1f:99:42:
30:75:dd:26:bb:6d:f2:71:b4:23:d7:cf:30:37:d1:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:4C:48:DC:7C:13:E0:6F:94:B0:82:BF:A0:20:1A:4D:00:EC:B7
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d4:43:33:dc:d6:74:01:96:90:d1:17:50:7f:2f:3d:ed:2d:
33:56:ce:30:50:8d:62:8e:cd:51:2a:1f:59:3c:a5:8a:f2:45:
f1:16:00:3b:e4:75:ee:e4:f4:96:68:9c:cc:ec:9a:9e:7f:3d:
e2:02:22:ba:34:5e:77:a9:fa:f6:a5:22:16:8c:a5:6b:85:66:
65:f5:fc:af:ad:0e:b0:fe:f0:08:72:97:77:ab:44:6b:c3:36:
a1:e0:15:92:4f:d9:ad:30:48:ac:27:20:1e:c4:13:30:41:2b:
a0:a7:e6:2e:ee:a8:c4:4a:8b:0e:b1:a5:8e:c7:17:6f:2d:ea:
f4:47:d2:2d:c7:81:a1:9b:a3:49:24:15:f1:9f:53:38:9b:a8:
48:ea:d5:b6:5a:51:a8:cf:cf:5f:6e:57:62:5a:98:32:ba:20:
c9:fb:51:03:95:64:ce:6e:96:40:ee:85:e7:01:3a:cd:00:34:
fa:4b:6d:ea:9a:ec:1c:09:25:1e:dc:e1:3f:aa:86:1d:18:3f:
70:91:b5:c8:ce:98:45:99:25:63:63:e7:6f:74:c7:74:02:15:
b6:90:93:d1:51:df:69:9b:aa:bd:fe:73:b7:ab:c1:a3:f2:3e:
2a:27:f7:a1:0d:f2:98:b6:cb:bf:f0:5b:86:66:df:4c:cb:0c:
32:73:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 05:36:28 2026 by rpki-client