Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: hRuUZ3bQbwAVBCPWDPAVAC1BVCYK3fttcEYRAMX8hec=
Subject key identifier: A2:13:DC:93:F0:7E:A2:17:EB:91:40:04:1B:F5:5F:C7:CA:36:A4:8D
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 019CAD598A22F4DC0704F71897637D81CE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 1008
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
4: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: hPJPhJg0hLKxABEbTXvl559n0ayI6kp7Sde6RXguLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8a:22:f4:dc:07:04:f7:18:97:63:7d:81:ce:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=a213dc93f07ea217eb9140041bf55fc7ca36a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:01:9c:b1:1d:3c:ef:b3:1d:e8:8d:ad:8d:
ce:ad:ac:4f:b3:b9:65:f7:ab:31:77:ec:f8:12:9e:
a9:c6:07:ed:91:27:4d:07:99:bf:94:0e:d5:f1:13:
bb:f6:ff:39:56:ee:82:03:51:c7:71:77:3f:ab:49:
90:5d:34:b9:51:d5:f0:df:b4:d9:a1:af:5f:fd:3f:
2a:fd:6f:5c:be:ac:3d:07:cd:e5:81:ad:c0:01:cb:
b3:8b:61:c3:58:01:fd:fe:bb:49:00:99:07:ea:6c:
9f:01:06:50:a8:b0:41:42:37:d5:51:47:0a:e9:61:
74:b7:da:ed:2d:01:4a:26:ae:dc:4e:4a:33:5c:11:
8d:22:6d:2a:b9:f7:ab:c3:6e:cc:32:8c:51:53:ab:
44:83:d0:87:8b:a7:60:f1:9c:ba:21:78:e5:1b:06:
50:8d:eb:6f:a3:80:86:7e:62:8b:e1:38:18:d9:7a:
3d:1c:a6:8f:f7:c1:c9:fc:38:95:af:e9:64:1b:02:
9d:36:7b:08:0c:8e:a4:4b:c3:0f:fd:18:56:2e:6b:
85:f1:10:23:22:cc:11:ca:fd:48:81:ca:cf:c1:11:
d5:52:8d:c7:fe:61:69:35:d7:33:f2:7a:9a:9e:57:
fa:0e:2e:60:e5:ea:1f:58:4e:08:ee:61:68:17:65:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:13:DC:93:F0:7E:A2:17:EB:91:40:04:1B:F5:5F:C7:CA:36:A4:8D
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:63:2c:c0:79:3a:3a:f7:ba:ce:83:9b:a7:62:fd:a5:6a:1f:
d9:b0:a7:5e:84:bd:90:6b:9d:1b:62:47:db:b3:32:d8:8a:ec:
7b:c0:a3:57:e6:41:8a:ec:28:a4:e5:a3:1b:a0:35:ba:b1:c2:
5c:3b:21:8e:c6:f0:75:c4:5a:a6:fb:7d:61:fa:e7:0e:75:b3:
4f:82:17:a5:17:28:d3:69:e6:0e:5e:77:de:0a:d5:7a:72:62:
00:bd:b9:34:0d:06:58:6c:c4:ff:dd:35:7a:2b:02:ba:ab:ef:
0e:58:1d:95:ce:4e:b8:0a:35:66:34:b2:ab:60:74:77:be:96:
ca:e6:81:ed:d9:08:7a:a1:ad:d1:f1:a3:34:8f:e5:06:9e:14:
7e:59:b8:83:70:7b:be:81:65:fa:e4:b4:28:b8:f0:71:d0:06:
70:c2:e8:6b:c8:67:9e:60:d1:e4:e2:b2:ab:ef:90:aa:c2:ad:
ff:f8:b7:01:2e:7a:32:24:51:1d:f1:38:e0:7a:d5:5e:fa:fa:
42:36:90:51:02:9e:f3:39:42:66:d3:69:a8:b6:97:b8:b3:e6:
ec:18:f2:b4:26:26:2c:a9:dc:80:a9:50:d2:d0:8a:21:83:24:
da:30:05:eb:a7:72:4c:2b:6f:8d:24:88:1f:dc:cb:eb:74:97:
5e:62:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:43 2026 by rpki-client