Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: qHQU7h7VZiQp7csWm04NYslFwekLDK/JODL4dMjRKTM=
Subject key identifier: 52:EB:03:E3:B8:E4:2A:9B:90:16:03:7D:94:23:F0:ED:55:CF:33:0D
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 01A14FBE7ED453EBECEA94DC01873D5FC6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 16:00:46 +0000
Manifest this update: Sun 18 Oct 2026 16:00:46 +0000
Manifest next update: Mon 19 Oct 2026 16:00:46 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: 9TI1o05083PvJnEUZ2lmC/MFusZ+rJNCWNWkaGcyBaQ=)
2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:be:7e:d4:53:eb:ec:ea:94:dc:01:87:3d:5f:c6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Oct 18 16:00:46 2026 GMT
Not After : Oct 19 16:00:46 2026 GMT
Subject: CN=52eb03e3b8e42a9b9016037d9423f0ed55cf330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:11:cf:20:88:43:5b:2e:d4:c0:a3:73:f7:
9a:b0:31:eb:d7:b0:3a:1a:7f:43:de:3e:d9:9e:7a:
c1:77:36:d0:84:ff:69:80:94:9f:f7:20:8c:dd:a1:
48:5f:3b:af:78:d7:6b:7d:d1:38:26:6b:44:df:71:
7a:1a:79:99:56:e6:76:64:b3:0b:53:71:bc:dc:af:
10:10:87:fb:9d:42:85:d3:3f:c3:d7:1c:7d:1a:b1:
43:4e:51:be:9d:4b:d5:39:b1:54:60:1a:df:c2:95:
10:7f:83:b5:ad:8e:53:70:ea:b3:e6:84:07:d3:84:
1e:b2:f7:52:5f:5c:9c:d5:25:dd:63:e2:fc:50:5a:
5e:fc:3b:b0:bd:52:41:8f:52:a6:a7:da:6b:45:08:
3c:3a:0f:7f:33:5e:c8:45:00:f2:a7:38:59:ca:2a:
72:78:aa:9a:7b:e6:87:1d:d2:b5:67:74:ab:89:f0:
2c:b7:e2:80:6f:2a:1f:74:4f:f7:49:96:ef:36:71:
fd:5d:ad:f0:eb:0f:cd:28:3a:d3:39:5d:f0:e6:44:
be:41:1b:28:61:54:16:74:e5:91:38:70:63:79:93:
55:94:2a:3c:14:34:76:fb:6b:43:77:0d:26:ea:17:
e8:64:48:59:ba:12:fa:41:a5:30:6e:fb:86:a8:8b:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:03:E3:B8:E4:2A:9B:90:16:03:7D:94:23:F0:ED:55:CF:33:0D
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:5b:5d:05:6b:08:c9:2e:a8:38:6a:fb:2b:43:cb:4f:84:
60:5d:1b:07:25:09:73:1e:cd:60:1a:45:a7:c4:92:f2:a0:32:
0a:35:81:17:3c:0d:6a:75:48:88:1e:5b:62:43:8c:77:63:b5:
ba:d1:9a:bc:36:cb:6d:4c:ba:09:21:70:0d:12:9f:32:c5:48:
a1:5a:e0:f5:a9:5c:a4:ab:f3:d5:a1:58:b3:46:79:fe:f0:fa:
eb:87:f5:6f:6c:f0:b1:bd:a0:e9:8b:3d:d8:73:7a:0d:1b:2d:
3b:1e:cc:8f:08:ec:ac:ef:a6:1e:8d:ff:0f:b1:b7:f7:ea:57:
4c:ce:87:0a:b3:03:39:24:3f:2f:6e:41:b5:51:33:51:cf:30:
4c:78:e1:0b:9f:77:39:b2:e4:9c:29:40:fd:99:ee:e3:6f:b0:
16:d0:8a:54:a4:3f:43:52:c3:a8:57:ba:37:d6:cb:5e:c2:ac:
65:16:7e:bc:71:56:12:05:7b:3f:83:75:ec:e1:d1:6f:44:56:
08:77:fa:94:b1:9b:04:38:a8:6e:2b:76:0f:a0:de:5f:9f:ea:
dc:a7:1e:7a:d8:bf:bf:b6:9a:8e:58:0c:6a:1d:33:04:f5:e9:
fb:d5:65:5d:92:52:cb:b9:6d:fd:43:89:4f:79:43:88:58:48:
bd:23:ec:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFPvn7UU+vs6pTcAYc9X8b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzA3NWNiYjdlYjE2OTNlZTcxYmM5MGU1ZjczZGFkYzIy
NWQ5MWEwHhcNMjYxMDE4MTYwMDQ2WhcNMjYxMDE5MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg1MmViMDNlM2I4ZTQyYTliOTAxNjAzN2Q5NDIzZjBlZDU1Y2YzMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUIRzyCIQ1su1MCjc/easDHr17A6
Gn9D3j7ZnnrBdzbQhP9pgJSf9yCM3aFIXzuveNdrfdE4JmtE33F6GnmZVuZ2ZLML
U3G83K8QEIf7nUKF0z/D1xx9GrFDTlG+nUvVObFUYBrfwpUQf4O1rY5TcOqz5oQH
04QesvdSX1yc1SXdY+L8UFpe/DuwvVJBj1Kmp9prRQg8Og9/M17IRQDypzhZyipy
eKqae+aHHdK1Z3SrifAst+KAbyofdE/3SZbvNnH9Xa3w6w/NKDrTOV3w5kS+QRso
YVQWdOWROHBjeZNVlCo8FDR2+2tDdw0m6hfoZEhZuhL6QaUwbvuGqIvf3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLrA+O45CqbkBYDfZQj8O1VzzMNMB8GA1UdIwQY
MBaAFKYwdcu36xaT7nG8kOX3Pa3CJdkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYt
ZTcxYzMxN2EzZmE4LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iYmU5ZmYtMjM2NS00OWM4LTk4ZDYtZTcxYzMxN2EzZmE4
LzEvcGpCMXk3ZnJGcFB1Y2J5UTVmYzlyY0lsMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjlbXQVr
CMkuqDhq+ytDy0+EYF0bByUJcx7NYBpFp8SS8qAyCjWBFzwNanVIiB5bYkOMd2O1
utGavDbLbUy6CSFwDRKfMsVIoVrg9alcpKvz1aFYs0Z5/vD664f1b2zwsb2g6Ys9
2HN6DRstOx7MjwjsrO+mHo3/D7G39+pXTM6HCrMDOSQ/L25BtVEzUc8wTHjhC593
ObLknClA/Znu42+wFtCKVKQ/Q1LDqFe6N9bLXsKsZRZ+vHFWEgV7P4N17OHRb0RW
CHf6lLGbBDiobit2D6DeX5/q3Kceeti/v7aajlgMah0zBPXp+9VlXZJSy7lt/UOJ
T3lDiFhIvSPs8g==
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:18 2026 by rpki-client