Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: nzSYxznWEoP+tkQlTSSAj0soAUBaPSjYElSQIfuuhPE=
Subject key identifier: 9C:20:5C:5B:13:EA:DC:2A:34:A8:F6:82:78:B0:D1:96:0B:45:D7:E6
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019EC3DC38609FDF5C6B9D34792EEE825368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 02:00:49 +0000
Manifest this update: Sun 14 Jun 2026 02:00:49 +0000
Manifest next update: Mon 15 Jun 2026 02:00:49 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: mMna4JAzjYni3DRP4uVkW2NmtfH5pRwpGEGsto5qj54=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:38:60:9f:df:5c:6b:9d:34:79:2e:ee:82:53:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jun 14 02:00:49 2026 GMT
Not After : Jun 15 02:00:49 2026 GMT
Subject: CN=9c205c5b13eadc2a34a8f68278b0d1960b45d7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:07:8f:f4:e7:2e:5c:a0:8c:dd:09:4a:7e:
5b:e6:fb:e3:0d:6c:f0:ed:b2:7a:be:1c:22:31:87:
fa:c3:81:43:40:05:09:4f:5c:e1:7e:4e:7d:0b:4c:
c5:90:22:f2:72:00:4b:2d:12:16:e7:1d:26:c9:b4:
4d:63:75:49:d0:4f:a8:29:92:87:c3:4e:9c:46:14:
c6:cc:ef:ee:1e:59:0f:bc:b6:1b:ce:90:45:06:08:
a5:91:41:bb:a7:3b:79:03:47:f8:4f:7a:ca:77:0f:
ab:db:05:e1:d3:14:fa:42:de:55:53:0b:93:94:6f:
28:dc:51:41:e1:f4:db:87:99:f4:b0:25:e6:63:89:
de:71:5f:ed:89:8c:58:c4:07:af:02:84:6c:68:e0:
d8:87:b2:a7:17:74:d5:38:e4:b4:c1:48:4b:60:f2:
d7:e1:dd:8c:32:5c:bc:60:d7:2f:05:1c:0e:1f:27:
0f:d8:80:a8:6f:5a:fa:04:c0:f3:70:35:62:be:2c:
f4:fb:fb:9f:52:ce:12:40:0c:84:19:b3:82:20:b3:
8a:54:a6:2d:f6:e2:e8:45:77:6d:de:1e:dc:f6:8a:
c0:40:20:9e:6d:72:b4:ff:78:ae:fd:7f:18:1f:de:
7b:56:9e:c8:2a:91:f7:ed:38:83:45:50:81:3e:e6:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:5C:5B:13:EA:DC:2A:34:A8:F6:82:78:B0:D1:96:0B:45:D7:E6
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:71:63:c7:34:cb:f1:7e:2a:c5:75:16:8b:fc:ad:76:6d:
15:cb:d8:50:0f:26:f7:6c:05:52:80:99:3d:8e:0d:48:7e:2a:
95:c1:75:8d:a2:de:54:4a:63:d5:53:eb:d6:fd:b6:76:aa:5e:
a9:80:30:49:67:8e:da:74:d4:2f:bc:82:41:a9:3f:4e:a2:be:
d9:41:ba:a4:64:c1:c5:82:d7:9c:12:9a:f5:0f:99:30:da:98:
d4:32:5d:90:ba:46:3c:94:d9:27:4d:5d:0f:e9:df:84:91:e2:
05:60:5b:11:c2:0b:e2:57:01:f4:f7:6f:d5:3c:f2:cb:b7:30:
0d:92:83:6f:5c:74:30:bf:e9:41:91:18:82:da:3f:24:85:96:
de:45:9e:05:df:89:e9:4a:ab:61:44:33:d6:f5:35:b2:ee:bf:
3c:93:70:60:9d:93:20:90:15:49:05:f1:4e:50:4f:83:d3:a8:
b6:42:16:cb:8f:78:b9:ad:81:ae:c4:33:c7:35:4f:54:dd:c5:
49:b7:82:fd:92:f0:d3:9c:3e:96:a0:66:00:31:5f:68:a6:2a:
a8:16:49:34:60:48:06:e8:63:e4:c7:8a:cd:5c:ee:c3:70:3d:
f7:72:96:8d:f9:6a:cb:63:38:27:a6:cf:af:cc:84:42:97:fe:
ee:33:88:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:36 2026 by rpki-client