Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: dh4CdMKI0t8w2HKWMlU0ufiSdntpS7EeiE9Yuzcb6YM=
Subject key identifier: EB:2D:A6:3E:B3:84:B3:B5:D4:2E:C3:C9:53:8E:B0:98:83:EB:3E:55
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 019CAC7DD1FE2BBF6A98D43BCC967E9BC61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 114E
Signing time: Mon 02 Mar 2026 03:00:52 +0000
Manifest this update: Mon 02 Mar 2026 03:00:52 +0000
Manifest next update: Tue 03 Mar 2026 03:00:52 +0000
Files and hashes: 1: L7-WIklCKzAwiReoXEp9xRVENo0.roa (hash: MFsW1dq4HLP+RBbceeVBdgcqk98TN9POqdqj/eyse6g=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: NdOd4nf5AZUgeKQfbXbS7I8BsF7ZZVbyh1/UB/naTOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d1:fe:2b:bf:6a:98:d4:3b:cc:96:7e:9b:c6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Mar 2 03:00:52 2026 GMT
Not After : Mar 3 03:00:52 2026 GMT
Subject: CN=eb2da63eb384b3b5d42ec3c9538eb09883eb3e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:63:1a:40:29:4e:69:ac:8e:2a:ab:cb:64:
44:50:09:52:73:8d:72:63:b6:c1:33:ce:70:d8:a9:
2b:a3:b1:e2:18:1a:7f:4f:45:fd:59:d2:cf:35:cb:
0a:b2:ec:91:bc:29:fd:da:a5:79:32:59:ba:a2:51:
3d:f9:c6:32:4f:fb:93:a7:fb:5f:9b:76:d0:77:9f:
f2:08:8b:b0:5e:8e:61:c6:5a:78:33:94:d4:10:eb:
09:f4:2f:88:d3:48:72:6d:e9:4a:da:a9:ab:98:21:
2a:1b:c7:c3:a6:72:cb:89:cd:37:bf:4d:8d:dd:ab:
49:95:2c:c8:bc:66:70:d6:4f:0d:f9:fe:4c:c4:5a:
a8:6a:65:62:4c:11:e1:83:a7:47:45:e4:13:53:a0:
dd:16:70:7d:07:fe:a0:34:bb:26:2f:56:b4:0d:27:
a6:42:a0:87:07:ce:d1:e8:00:0c:98:93:09:90:e3:
75:93:55:14:d6:1b:db:01:b7:74:b4:2c:7e:d9:8a:
bf:3a:97:5e:48:eb:95:00:2b:63:b8:63:72:85:69:
5b:3e:33:e2:92:04:bc:7d:c8:b4:44:c5:57:e4:70:
f3:ba:66:38:58:c1:b8:16:24:86:cd:f6:ff:ef:bc:
b5:0a:a1:a4:c9:f1:55:5c:70:48:31:84:17:0b:78:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2D:A6:3E:B3:84:B3:B5:D4:2E:C3:C9:53:8E:B0:98:83:EB:3E:55
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:de:8c:cf:09:a4:46:67:e0:ee:0f:04:6c:c5:ca:e1:d4:
0c:ec:18:fb:4e:bb:c0:cc:1b:2f:7f:62:d5:d2:d9:3c:85:4a:
ff:d1:9f:4d:67:76:41:2a:78:cc:8a:61:b1:fc:7a:85:1d:7e:
39:32:8b:c5:72:84:56:fb:ac:d2:36:db:5f:2c:6b:12:c1:17:
8d:c3:82:03:83:a6:36:f5:11:62:6f:f2:64:9d:06:ea:85:36:
f9:3e:b9:15:b3:d2:f1:a1:a6:ac:61:ab:2e:8e:56:eb:25:f1:
b4:12:19:35:e8:86:3e:fe:a2:01:47:30:4b:29:cf:e3:5f:33:
68:7c:85:e0:51:45:d7:88:11:8f:c8:09:bc:aa:fa:ed:92:6c:
87:5c:8e:b6:fa:22:a9:3c:48:d8:fb:30:12:a6:e5:88:d0:3b:
0a:35:21:f2:e7:5b:f5:c9:92:72:d1:0b:fa:55:7e:e5:6e:d0:
7e:21:d9:dd:54:e6:c6:2b:b4:96:bb:31:a2:20:9a:1e:03:c7:
82:66:d5:bd:45:12:e8:15:ec:72:47:79:af:6b:ef:4a:6a:bb:
71:68:cb:a4:97:bc:75:b0:39:13:b2:a4:af:5d:60:92:e7:38:
44:ca:7e:94:cb:d4:4e:91:d2:db:54:d1:b6:78:b1:5d:fa:03:
82:df:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:41 2026 by rpki-client