Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: o6vElAI6XhKhBjSJdjVoScuV2RW9NBTBy7bhnvC+eSs=
Subject key identifier: 39:D3:20:65:9D:3E:13:CB:FB:B6:FB:83:C5:5A:CF:AD:57:F6:08:6B
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019D9A74BC745F44C7FCFD87942F3FB67AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:34 +0000
Manifest this update: Fri 17 Apr 2026 08:00:34 +0000
Manifest next update: Sat 18 Apr 2026 08:00:34 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: MMIitiD0HOhug/iCqHEF1u2ri5iSihzX+81d6X/SQnw=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:bc:74:5f:44:c7:fc:fd:87:94:2f:3f:b6:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Apr 17 08:00:34 2026 GMT
Not After : Apr 18 08:00:34 2026 GMT
Subject: CN=39d320659d3e13cbfbb6fb83c55acfad57f6086b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:45:e1:66:68:94:58:bf:62:db:88:96:44:
c9:4f:55:8c:d3:15:6b:52:0e:20:f3:43:ad:f0:f8:
7c:da:88:88:94:42:c0:0f:d3:d8:9f:8d:2c:68:41:
8b:1b:30:b5:83:59:fd:08:8e:e9:25:dd:3d:ff:6b:
e2:9e:01:31:50:04:31:8f:23:92:71:ab:eb:08:b9:
ca:99:ed:c4:13:12:8d:ff:48:a2:02:77:45:91:ca:
15:f9:3f:fb:2c:b2:c2:87:5e:6c:1d:f7:b6:d2:80:
97:9e:fe:a2:74:56:29:32:7f:c2:ce:51:9d:16:ab:
22:3b:fd:9f:d2:d2:0a:37:22:b6:f5:23:05:d6:7f:
b1:9b:e7:14:e6:77:bc:98:cd:41:c2:7e:2e:58:2a:
00:5c:90:a3:46:e8:d5:78:cc:dd:8f:90:fe:b2:2f:
cb:d9:fd:e5:8d:36:65:93:da:eb:94:2a:99:90:a5:
7e:bf:90:d1:5d:17:b1:4c:85:cf:cb:ec:4d:ff:88:
f2:a4:98:80:06:c1:81:fe:9c:90:d3:3a:ba:1a:62:
f7:d7:06:a1:24:c5:4e:c9:76:16:cd:00:af:d9:d8:
88:a9:1c:2b:7c:e9:ad:c1:6f:c4:74:5b:f3:96:5e:
b2:d4:81:ae:39:31:89:e5:2e:3e:af:4c:b6:72:77:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D3:20:65:9D:3E:13:CB:FB:B6:FB:83:C5:5A:CF:AD:57:F6:08:6B
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:43:84:ca:91:23:fd:51:c5:1e:f4:2b:57:d4:64:a6:12:
7d:de:f8:bb:a7:54:96:25:57:28:6d:de:3d:b2:08:69:31:c5:
c8:72:0c:6b:76:f4:64:17:03:18:d7:9f:9a:93:6e:dd:e6:8f:
24:8c:dc:55:fb:f6:31:17:28:93:55:77:77:ca:74:bb:27:b4:
6a:cb:38:91:74:8d:b1:7d:d8:09:a5:c7:a4:1c:56:9d:39:8d:
f4:7e:fb:e4:20:23:69:1e:a8:fb:1f:3a:12:bb:5e:24:81:c0:
cf:0a:37:05:8e:1a:49:7f:41:ff:f9:e0:9d:25:2d:41:35:b7:
22:3d:57:46:d5:8a:f4:4f:23:eb:1d:6d:52:89:a2:57:0d:e0:
67:bb:d9:34:42:c7:2b:8e:a8:a7:ae:a8:55:d5:55:27:55:36:
55:6d:4e:97:c1:f6:12:4f:06:fd:57:0b:0b:ec:68:20:24:e6:
16:ef:53:1a:ca:c9:68:55:13:b2:79:06:cc:94:9a:ae:97:91:
23:df:ac:41:88:19:14:17:f2:c3:41:02:5d:1c:98:da:98:9a:
7d:73:cc:12:c6:ce:25:84:5f:c7:05:36:0a:76:78:db:44:8d:
d4:2c:e1:dd:b5:6e:c7:f1:f0:0d:57:64:3e:48:57:55:67:95:
2c:6c:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:27 2026 by rpki-client