Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: 2rNMgaO7r2ashG9r3HDGkrwqxVD1MSaKFyWyO6uEaGg=
Subject key identifier: 8B:5B:A8:01:94:AA:C6:25:D9:D8:5A:0F:7A:F2:4E:44:66:C5:F0:71
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 019FA718B9F56DE4D383344D477BAD46626C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 1194
Signing time: Tue 28 Jul 2026 05:00:43 +0000
Manifest this update: Tue 28 Jul 2026 05:00:43 +0000
Manifest next update: Wed 29 Jul 2026 05:00:43 +0000
Files and hashes: 1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: qWoXLnb3n+32xwxWKWy6vQaHpB/JvLdhv/fE/T2p6HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:b9:f5:6d:e4:d3:83:34:4d:47:7b:ad:46:62:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jul 28 05:00:43 2026 GMT
Not After : Jul 29 05:00:43 2026 GMT
Subject: CN=8b5ba80194aac625d9d85a0f7af24e4466c5f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:a4:5e:58:92:94:8a:68:3d:67:17:30:80:
09:e2:82:0e:c0:1a:2c:1b:2b:e4:82:92:e9:81:54:
a9:86:08:fd:34:e1:1f:8e:cb:58:fb:c6:4b:da:43:
1a:bc:d4:f3:64:ae:74:21:b5:62:fe:4b:12:44:e6:
4f:f8:e6:66:3b:22:ac:ff:30:42:bd:45:63:e8:26:
7a:9c:bf:44:f4:a2:36:33:ae:2a:46:22:3b:f4:2a:
c3:b9:8c:0a:95:5e:03:1e:22:33:2b:30:f5:cd:d5:
cc:56:52:e2:95:0c:79:b6:51:ec:47:4c:24:e5:06:
cf:52:48:f3:ac:e4:95:da:2b:ee:e3:be:ff:77:de:
81:86:66:75:05:6b:d0:2a:7e:35:a4:a3:3a:60:ec:
60:e0:99:42:43:8a:43:77:32:cd:51:c2:e3:c2:39:
07:55:20:d0:27:96:75:10:6e:00:12:41:a7:d8:30:
9a:b6:d7:4a:cf:27:9e:48:25:62:ab:c3:05:eb:e2:
53:77:19:91:1c:97:24:1c:03:b7:7d:5b:e3:17:02:
93:eb:3f:df:dc:40:ce:11:b0:ec:a9:53:e5:8e:52:
72:8b:55:21:73:db:be:55:51:da:8a:77:a9:9e:58:
7b:b9:93:07:87:4e:a7:f9:47:e4:a8:05:96:32:0e:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:A8:01:94:AA:C6:25:D9:D8:5A:0F:7A:F2:4E:44:66:C5:F0:71
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ff:23:a5:18:52:b8:d3:fa:7c:5d:54:af:d6:94:eb:a5:92:
b9:56:f7:84:42:eb:5a:be:50:f0:56:f4:09:ec:da:58:6d:d4:
84:ee:1e:bf:df:f6:c5:4e:d0:1d:93:86:5e:c5:de:9c:44:20:
9b:41:04:91:1b:86:49:e8:2f:37:da:8a:e4:f4:7d:9f:0d:e5:
74:21:cd:20:a5:62:94:29:18:8a:4f:ce:45:f6:70:bd:b7:64:
50:eb:ef:a4:43:67:c3:ca:18:a4:44:62:12:9b:dc:a4:e4:dc:
48:43:71:2a:db:df:f6:5a:4b:84:92:d3:6f:a6:c3:1d:6e:03:
55:65:c5:d9:13:2c:6b:63:7c:16:55:6a:34:b7:95:d5:ce:16:
97:be:d8:10:ed:9b:fe:70:ab:a2:f3:a5:bf:0f:fb:73:ba:5f:
97:49:b4:0d:68:88:40:be:ec:c1:e1:f8:30:ef:2a:78:63:c3:
f8:8f:9d:b6:1d:1f:f7:93:b0:37:8c:f2:4f:f5:98:69:71:c2:
a2:6e:0f:32:5f:7f:75:8b:6f:d5:ea:a2:f6:33:87:7c:68:e7:
64:f6:35:aa:89:84:ab:5e:32:40:b3:ec:e8:0f:a2:c0:02:c0:
33:bd:f8:b7:b9:ad:01:52:19:66:e8:02:6b:f1:9b:55:42:aa:
ce:c5:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:20 2026 by rpki-client