Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: IvDWVKyidnXNatGl1AO9IYR1eigQ9u8x4VyfXoFeml0=
Subject key identifier: 3C:9B:6D:74:E3:62:A3:59:2B:59:30:F6:62:95:DD:BC:57:CE:E6:7B
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019D9C6381A258852DCE2C9C62086974379F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 17:00:59 +0000
Manifest this update: Fri 17 Apr 2026 17:00:59 +0000
Manifest next update: Sat 18 Apr 2026 17:00:59 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: L8ZRJerWk1JRk99FRCqHa4HDxTeKW3XoerOrG2dX9BM=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:81:a2:58:85:2d:ce:2c:9c:62:08:69:74:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Apr 17 17:00:59 2026 GMT
Not After : Apr 18 17:00:59 2026 GMT
Subject: CN=3c9b6d74e362a3592b5930f66295ddbc57cee67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:8e:c7:6f:c7:aa:e4:cb:5a:f7:b5:67:2b:
73:fe:13:d8:21:01:e5:c2:4b:d2:ab:c2:cb:c6:68:
fd:65:7b:bf:8f:f4:72:6d:13:84:d8:ff:f7:4a:a7:
46:8f:87:d0:51:dc:6e:02:bc:02:bd:86:49:c0:1b:
30:8a:ab:3f:ac:2d:a5:24:4d:9f:29:5b:a5:db:0e:
4f:2a:b8:d8:24:4d:13:59:62:7f:71:f5:6a:6f:a4:
c4:bb:ea:3f:cf:b1:7a:99:84:b0:d0:4f:bf:87:bc:
a5:60:55:cc:1f:82:a7:c2:8d:a4:90:48:c6:3f:f5:
44:dd:5d:24:fe:8e:22:8e:dd:79:1c:97:3a:11:26:
b5:db:de:52:b4:3a:65:fe:c6:54:a0:a1:81:97:90:
1f:25:57:eb:71:1b:9f:35:9d:a7:2f:43:9a:62:06:
16:8a:e0:37:16:48:0a:25:66:4d:98:cb:94:89:90:
9e:db:49:eb:3e:f5:c4:52:56:fc:a8:7c:5f:28:a6:
5c:31:a8:dc:73:01:11:0a:61:3b:74:72:9b:9a:eb:
88:ac:c3:7e:9e:42:64:1a:7a:1d:14:bf:df:82:6a:
3a:d1:ac:1b:8a:72:14:bd:3d:45:87:ed:6d:37:5f:
f0:18:72:e6:d3:d7:6c:0b:0f:5e:1b:e7:88:28:ab:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:6D:74:E3:62:A3:59:2B:59:30:F6:62:95:DD:BC:57:CE:E6:7B
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:7c:21:0d:2b:cc:dc:22:f0:9f:29:42:68:26:40:71:b9:
14:29:74:6b:3e:19:1b:fa:d1:f8:d3:5c:60:75:8e:67:7a:38:
45:39:55:62:7c:a7:2a:fc:48:90:a6:a4:c7:51:5d:ae:90:cf:
ec:d3:c1:b5:f5:70:a9:8f:81:c4:4b:62:48:e9:5b:1c:40:56:
c4:4b:ed:65:93:a2:ef:c6:bd:77:c5:5c:84:0d:ad:c0:58:ab:
12:e1:c5:e9:c8:cb:48:14:e9:98:17:06:f6:9b:f1:40:bf:c1:
46:45:c8:12:85:aa:27:6d:2c:e9:cb:1e:e8:6f:97:b9:79:02:
1a:cf:29:75:03:03:15:dd:89:9d:ef:97:54:ff:4f:64:67:bd:
98:71:b1:0d:26:21:12:c3:79:e5:24:1d:f5:29:b3:e2:af:d0:
b3:7d:75:e4:08:64:c7:f2:aa:d0:c9:9c:a1:da:e4:87:5d:6b:
f8:fa:66:f9:3d:65:85:77:ab:00:90:16:fa:c4:fc:46:72:a7:
1a:97:3f:41:54:98:7c:6b:68:aa:18:5b:69:ef:e6:35:60:25:
c0:5e:eb:c3:aa:41:9b:fa:1b:e7:f8:dd:fc:f3:bd:d5:f5:f5:
f8:d9:df:d1:74:c2:60:8e:0f:ec:4a:4b:ea:73:a8:42:e5:9c:
5c:d6:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:53 2026 by rpki-client