Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: +w8Djm/UiBN94qix56sj43cWMh2kooSgGnKdGC/hv20=
Subject key identifier: 23:6B:6C:B6:1F:DF:F4:E1:0E:4F:F4:69:D3:88:E3:A5:2B:69:59:A2
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 019D9819088D806AECEF6C2D433F03BF2522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 11C8
Signing time: Thu 16 Apr 2026 21:01:10 +0000
Manifest this update: Thu 16 Apr 2026 21:01:10 +0000
Manifest next update: Fri 17 Apr 2026 21:01:10 +0000
Files and hashes: 1: L7-WIklCKzAwiReoXEp9xRVENo0.roa (hash: MFsW1dq4HLP+RBbceeVBdgcqk98TN9POqdqj/eyse6g=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: y8eVx7SpcJe8/rxqD41JWSQtUw80ZnOjnaSILeFe3QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:08:8d:80:6a:ec:ef:6c:2d:43:3f:03:bf:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Apr 16 21:01:10 2026 GMT
Not After : Apr 17 21:01:10 2026 GMT
Subject: CN=236b6cb61fdff4e10e4ff469d388e3a52b6959a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:1c:58:dd:85:eb:c6:83:e7:bb:ee:76:ad:
2f:cc:30:15:16:66:eb:4d:08:e7:69:a6:a8:11:96:
f8:18:37:a1:27:35:01:ee:de:df:44:6d:cd:d1:a1:
d1:3f:eb:b9:7e:7c:59:a0:67:b2:f0:c6:22:22:a8:
fb:b5:8b:ed:18:47:db:64:fa:0a:6a:63:f5:20:7c:
c6:1f:61:83:ae:92:51:66:e5:1a:b4:c9:4d:7d:bf:
7b:83:95:2f:7e:c0:81:d2:c3:ba:6a:88:82:a2:9e:
b3:47:75:bc:41:51:2a:71:66:c4:97:c8:ee:35:64:
f9:cc:10:bf:a6:e2:93:67:ae:88:9a:4b:29:1a:82:
7a:d4:22:b1:dd:fc:de:5d:b7:c1:27:26:29:60:6d:
07:a1:ac:e0:88:c2:f1:3a:82:a2:e2:e7:11:b7:f4:
0a:9e:91:26:ed:e1:2f:cb:f5:6c:6a:33:8d:98:50:
0c:9a:f0:d9:53:84:b3:c9:68:18:f1:ce:82:a8:d2:
c3:fb:0d:b8:11:75:1c:64:82:44:15:27:00:f3:cd:
ec:08:aa:c8:ca:2e:9a:2f:35:76:a1:f0:86:b6:48:
14:30:e7:4c:9f:41:a6:bf:d3:a4:6b:75:a2:82:f6:
a4:17:2b:bf:09:7a:fe:fb:27:10:1e:6f:5c:9a:d0:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:6C:B6:1F:DF:F4:E1:0E:4F:F4:69:D3:88:E3:A5:2B:69:59:A2
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7d:c2:a6:50:f6:ea:6b:e2:55:60:dd:91:ef:ff:c1:06:74:
2f:0f:5d:dc:66:25:94:a4:09:b6:62:28:52:30:9c:37:9b:3e:
de:25:25:c2:62:c8:12:f8:35:38:27:ef:be:79:66:af:33:37:
3d:1c:91:e3:84:31:4b:8e:57:17:e4:3b:e9:61:0a:59:2a:a0:
59:d3:16:ed:b5:7b:0f:2e:0b:e8:85:d6:71:10:68:7b:c1:a9:
0b:b1:40:7a:17:7b:5f:69:27:b6:b6:a8:d9:28:23:76:89:4e:
99:ba:45:02:13:ca:d6:c8:0e:4a:2a:1d:a0:49:c1:2f:d8:bd:
82:15:82:05:ca:c2:c8:2b:93:a8:83:a3:2d:ec:bb:61:25:47:
66:1c:a8:9d:a8:3c:ac:29:23:fe:03:d0:cb:4d:9c:2a:e7:7b:
8d:26:28:e2:fd:e5:58:be:2c:8c:85:03:10:f8:96:b9:fb:c5:
ce:b6:4e:e5:e9:de:16:8b:57:19:90:12:16:d8:6c:2a:2e:88:
66:35:ff:d5:32:58:5e:67:02:9b:b6:d1:c3:b4:d6:d5:84:9a:
f4:dc:f4:1d:1d:a7:55:f6:72:36:3e:ea:33:c5:16:28:19:e1:
7e:b4:ce:dc:7b:4d:c2:ff:50:42:9e:72:cb:e6:f3:15:a7:54:
48:f0:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:32 2026 by rpki-client