Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: PC/6R0QWETP/eiXXspptJUqEGE/EaOf1FrSvZj9bs7s=
Subject key identifier: 14:25:48:C5:AF:18:8D:9C:E2:2A:A3:44:DD:2C:77:A0:C6:28:4D:76
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019CACEB7B76A726CB87905422D06464E85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:00:39 +0000
Manifest this update: Mon 02 Mar 2026 05:00:39 +0000
Manifest next update: Tue 03 Mar 2026 05:00:39 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: 3xu0sIHQiobQGyspLdk+oxO7d5WM1zBgNilKGEZ9psk=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7b:76:a7:26:cb:87:90:54:22:d0:64:64:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Mar 2 05:00:39 2026 GMT
Not After : Mar 3 05:00:39 2026 GMT
Subject: CN=142548c5af188d9ce22aa344dd2c77a0c6284d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:73:3d:e0:66:3f:e0:fe:d8:f3:ad:e6:ad:
6d:56:01:25:a5:0d:59:07:77:23:5f:d2:cd:b7:a9:
9b:89:1f:2d:c1:ec:dc:a8:37:c8:cb:b1:54:cd:f1:
39:b8:c6:a5:01:f1:e9:b4:10:c8:39:a4:fd:27:fa:
ba:54:6b:bb:5d:5f:e2:21:3d:79:f3:af:e6:ac:b3:
1a:2e:86:c0:5f:a0:54:a7:95:19:f6:4c:d4:8d:a0:
b9:8a:9f:00:d1:1b:5d:17:d6:df:63:f3:22:08:24:
b6:50:02:59:9f:1a:39:63:ad:5d:20:6d:55:aa:09:
14:ab:cf:24:83:c9:fe:27:64:5e:7c:81:25:48:68:
b2:67:95:47:45:51:2e:af:51:31:82:f9:91:38:34:
f4:45:c6:67:46:27:4e:a7:04:bf:10:8a:a6:54:12:
b5:4e:97:f2:08:35:f9:93:c1:6d:d0:51:03:d7:d3:
32:24:10:2c:d4:2d:20:c6:ca:47:1c:2f:81:17:6f:
f1:1e:d3:8a:20:46:15:dc:3a:cf:d6:9e:13:87:46:
f4:ed:75:99:7a:57:4b:0b:6e:0e:a9:c5:c4:66:39:
9e:fc:89:ae:d8:b3:18:60:03:ee:ed:15:aa:fc:75:
dd:ef:57:6e:26:4d:79:a7:39:e9:61:5d:cb:bc:c7:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:25:48:C5:AF:18:8D:9C:E2:2A:A3:44:DD:2C:77:A0:C6:28:4D:76
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d9:b7:e3:1c:7c:e6:57:61:d0:c8:e8:f8:fc:0c:09:a4:99:
f6:0f:d6:8f:53:92:58:3a:74:4b:01:c0:e0:c0:b6:b5:d8:d0:
3f:95:de:49:9f:84:6e:af:c7:6a:58:18:b4:22:9c:25:7f:a5:
93:dc:4a:b5:cf:26:b3:00:96:23:46:29:4e:20:68:b9:ba:63:
a9:a2:02:c2:0a:57:65:ed:6f:82:a0:64:0d:0d:86:f2:b6:d2:
fc:f4:79:37:80:68:2c:0b:ea:dd:c4:54:c2:7f:b3:16:8e:f3:
4b:c5:7d:3b:89:bc:20:f5:f2:2b:5f:34:5f:ee:7c:20:7b:37:
e8:2c:38:8c:e3:f1:3e:93:28:50:6a:8f:b5:98:fe:7a:ac:5c:
76:f3:3e:96:22:3a:65:26:e1:d5:fe:7f:b7:87:09:46:2a:d2:
09:93:0b:a9:3b:51:09:04:b7:84:50:b3:e6:9f:b3:ff:be:e4:
d1:ad:4b:73:84:49:2b:ad:7f:26:d5:4c:cd:d6:ef:55:0c:c5:
fe:1d:37:c0:5e:8e:e2:cd:72:bc:da:72:9b:ee:e2:ab:dd:54:
be:df:2f:02:65:6e:29:60:68:10:66:83:56:42:1c:16:06:9e:
7c:7a:53:b2:20:84:31:17:95:73:a0:20:fa:3d:65:5e:7e:b5:
06:78:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:46 2026 by rpki-client