Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: peXMq3SbV4uubNF0rsJrnhoMd6Co3ACi/NDHER5ViOw=
Subject key identifier: E0:1A:21:26:DB:3E:E6:D2:A2:A6:0D:4F:49:34:6E:18:DB:CF:DD:85
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 019D99CFCECEDCA7217252CC8A64F6DDBAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 1084
Signing time: Fri 17 Apr 2026 05:00:25 +0000
Manifest this update: Fri 17 Apr 2026 05:00:25 +0000
Manifest next update: Sat 18 Apr 2026 05:00:25 +0000
Files and hashes: 1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: VG63d6W4X6JayeOfTclPDMaFwV6CkeufvSUAYk6J1hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ce:ce:dc:a7:21:72:52:cc:8a:64:f6:dd:ba:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Apr 17 05:00:25 2026 GMT
Not After : Apr 18 05:00:25 2026 GMT
Subject: CN=e01a2126db3ee6d2a2a60d4f49346e18dbcfdd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:54:75:37:30:8a:64:f1:77:83:fa:4a:90:
9b:75:54:4a:4d:e9:e1:07:37:25:5b:f4:93:6a:d9:
a7:40:5c:aa:76:3c:cf:52:94:a8:db:6b:19:6e:d5:
5b:16:b3:cb:58:88:fb:86:62:eb:34:56:05:e0:44:
d9:2f:d8:82:4d:74:ec:d5:04:65:65:4d:62:33:54:
63:63:e0:e0:1a:4a:ed:20:0d:ee:9e:e3:de:fa:5a:
74:0f:bf:cc:8e:c8:89:3b:a9:c6:ee:7b:71:22:36:
61:be:45:fe:e7:b1:2c:42:6e:91:b0:79:39:95:ea:
99:36:bd:49:c2:64:49:bf:29:58:a5:85:5c:fb:13:
81:8e:4b:3c:f6:bd:bb:b0:7f:ca:df:fe:74:7a:9c:
1f:81:80:48:34:f4:46:b6:de:25:38:4f:e1:2f:2d:
b4:64:a4:24:c6:b6:61:32:95:f4:94:60:ed:b6:00:
ad:7a:15:a8:a1:18:54:5a:5e:f1:31:1d:32:99:ff:
0b:fb:51:89:c4:37:f5:34:13:62:0e:a4:0f:43:eb:
84:e3:02:99:98:72:19:52:04:d7:b7:af:00:b9:ba:
de:4f:c7:8e:aa:a7:e9:80:01:6c:d0:27:4a:06:9d:
3b:0c:0c:80:39:63:a8:99:0d:d9:fe:a1:30:9b:f2:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:21:26:DB:3E:E6:D2:A2:A6:0D:4F:49:34:6E:18:DB:CF:DD:85
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f3:84:a9:9b:57:b2:0c:33:ca:6d:5a:db:fd:b1:cb:d2:2e:
c0:6b:1b:62:6a:b2:48:90:6b:d5:93:dd:b5:87:3c:94:ef:8c:
b5:fe:8b:b1:10:05:1a:ee:36:6d:d8:38:6e:6b:ca:0d:cb:da:
50:5a:5a:da:f5:e2:51:20:b6:4c:1c:0c:0a:15:76:9f:fe:1c:
c8:20:51:ee:fb:62:d0:4b:79:76:8b:5d:16:ae:09:b1:ca:fc:
83:41:ef:ea:9e:60:2d:2b:ff:32:4d:19:58:93:1d:80:a3:38:
d8:19:48:43:38:45:42:1d:6e:37:52:91:05:d3:5f:6d:04:3a:
9c:be:1a:e7:c1:6d:5d:13:ce:a3:a6:3e:15:3b:34:00:bc:c6:
14:31:a4:3f:6d:a5:cf:3b:e7:9c:4a:3c:e4:c2:99:b1:1f:59:
49:f3:f6:ed:5e:e0:ac:33:0d:e6:31:c2:8e:65:da:03:fd:29:
73:9b:ec:c4:fe:f1:6c:34:85:c5:1d:ae:3d:30:87:68:8c:fc:
e0:1e:fe:7b:79:39:ab:3c:0e:9b:37:db:aa:a0:63:0d:46:86:
ba:13:e9:f0:57:4b:dd:18:34:e9:5d:b9:67:04:98:0e:e9:6a:
a1:d3:81:68:c5:d6:54:f1:31:78:17:8e:da:cb:ee:7a:43:5e:
dc:00:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:18 2026 by rpki-client