Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: vx0IbKqA27vLxYwTUheSmLhxRVK3hUnG/8Oxk/HI8YU=
Subject key identifier: 23:1E:BB:72:6D:A0:C6:55:0D:FE:42:6C:E9:65:6D:08:3A:F7:C8:91
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 01A10737C23066BE0A9DF447DFCCE57343AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 14:00:56 +0000
Manifest this update: Sun 04 Oct 2026 14:00:56 +0000
Manifest next update: Mon 05 Oct 2026 14:00:56 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: u446Sb2bRF341boKXppntP7wMeuC3ivKSJQaKSRcn2A=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:37:c2:30:66:be:0a:9d:f4:47:df:cc:e5:73:43:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Oct 4 14:00:56 2026 GMT
Not After : Oct 5 14:00:56 2026 GMT
Subject: CN=231ebb726da0c6550dfe426ce9656d083af7c891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:06:33:5b:8e:6e:48:4e:4f:be:30:da:36:
d8:14:51:c7:1d:95:a6:04:9e:cf:fa:35:ba:19:b7:
14:aa:0d:4c:ee:5e:70:f4:46:4b:91:35:22:98:31:
37:0a:7c:18:6f:a3:02:c2:93:59:f3:7a:88:da:23:
1e:d5:34:35:44:97:cb:b5:a6:c2:c0:99:56:7e:25:
d8:f4:c2:f1:88:0f:da:cd:84:f5:1c:d5:81:82:01:
e5:78:00:32:ac:56:b0:52:23:20:1f:42:14:0b:22:
9e:a0:34:02:72:e8:4a:60:2e:e6:86:c9:6b:98:42:
bc:4f:0d:0a:b3:65:ce:a9:7c:81:67:59:6d:2a:80:
0b:86:ea:b4:e1:ec:62:74:36:ef:66:4c:02:63:c5:
a7:98:20:26:18:54:c6:f7:bf:58:ea:55:31:6b:67:
1c:60:0a:0c:bf:22:bf:f4:46:90:0a:db:fc:6e:47:
55:e1:e6:4a:c9:f3:c5:cb:1a:7a:72:5c:16:82:9e:
89:13:d7:a9:a2:eb:bc:c0:e5:f1:fe:99:35:06:91:
7d:30:a0:c4:52:35:60:d9:9e:32:95:e9:a9:b0:c0:
ae:eb:40:61:c9:aa:5f:4a:6c:80:3a:b6:f6:e1:eb:
c0:9f:cc:28:a9:a4:d9:ee:48:39:6a:6f:8c:41:82:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:BB:72:6D:A0:C6:55:0D:FE:42:6C:E9:65:6D:08:3A:F7:C8:91
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:de:04:e9:9f:91:8b:ad:80:1e:d3:03:e0:52:8f:3c:f8:7c:
fc:4e:34:a1:43:e0:8a:6c:60:ba:68:fe:8a:88:1a:7a:ac:0c:
7f:6c:6c:b1:a8:20:39:ce:df:90:cd:c0:09:d8:96:b7:06:53:
b0:85:ba:0e:93:cf:a6:9b:b8:0f:a8:76:c3:e0:d1:dd:c4:e9:
f2:d3:3e:29:56:5c:d9:81:3d:05:da:0c:20:9d:49:1c:24:a4:
38:7f:8f:7a:89:d3:38:dc:47:6a:f9:e2:a0:b5:37:57:15:72:
d7:7b:65:fd:10:27:8e:31:bb:a2:c7:43:f2:88:ce:e5:db:ce:
16:92:44:2a:a1:64:97:d3:2c:00:03:3e:02:f6:8a:be:4d:9d:
41:dd:83:86:d8:9a:d7:de:f3:91:cb:89:f6:42:30:52:09:e8:
75:99:b5:55:30:91:6f:03:cd:35:46:b0:79:5e:d4:fa:07:fd:
36:c5:b8:fd:d1:7f:b4:be:c4:fb:47:38:5b:c1:e9:f4:64:56:
14:9f:c5:9d:dd:02:1c:d0:c3:bc:ca:be:94:dd:de:d7:e7:82:
12:7c:5d:c9:e7:da:78:cc:9a:f2:b4:ac:b1:2b:fa:c8:5f:94:
ec:df:fc:61:32:a8:ce:18:65:60:5e:66:f2:59:a1:a7:ee:8b:
38:c9:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:45:14 2026 by rpki-client