Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: VmI8qOAKi5XqtEei57L8O+Ntdb8Eqh2Gd8CSSClXKhY=
Subject key identifier: 73:2E:01:16:AE:DC:F5:11:25:AE:5A:8E:1D:5E:2D:1D:97:F9:7F:3A
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 019D389C38CF5A8ED7AE7D2152FFF41CD30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 1531
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa (hash: aU0rHFNkYFHdV5H8egljpHkLcw9iIq3HEwixa6GSrPc=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: KuMqGlvzyZ/rB5/ZKuQE/X5GGhxRGKZaRyePdpAWwfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:38:cf:5a:8e:d7:ae:7d:21:52:ff:f4:1c:d3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=732e0116aedcf51125ae5a8e1d5e2d1d97f97f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:14:ef:2f:ce:54:67:1c:18:41:c6:2d:e7:
f5:d2:0c:98:ce:87:e6:6b:3e:23:bf:04:66:4e:7b:
c6:c9:09:6d:de:f8:ef:f8:9c:21:94:20:1a:74:a9:
4b:e7:63:31:32:f2:10:42:c3:15:e3:aa:84:2d:9b:
f2:a3:ca:6a:24:09:f9:75:84:b3:1a:fc:df:08:7e:
14:18:16:a0:e2:58:b7:44:79:47:b6:57:ae:5e:8c:
b9:71:bb:b4:5b:89:44:d8:7c:46:15:16:cf:77:61:
4e:8b:fb:2a:2a:34:f2:38:34:5e:28:9f:f6:e8:45:
c5:74:32:e0:1e:d7:0a:00:a6:56:b7:7e:ad:e7:fb:
32:8d:ef:89:47:3a:64:8e:aa:20:b6:10:94:89:65:
35:26:58:aa:23:17:22:88:35:37:a2:ae:fe:6d:54:
e0:09:c6:6c:4c:bd:cb:3c:88:bd:b0:64:c4:ea:f0:
33:36:4a:da:1a:05:fa:2e:05:3c:f3:27:2c:9c:1c:
9f:e4:1f:ef:3d:61:4a:59:d5:f0:d7:c6:30:f2:6f:
3a:e1:70:11:29:be:93:8d:ce:16:9e:85:9b:73:25:
68:64:53:5b:62:be:92:16:b8:36:8d:ac:94:bc:d2:
a6:03:93:8e:25:1a:b8:1d:e6:41:98:5a:08:94:17:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2E:01:16:AE:DC:F5:11:25:AE:5A:8E:1D:5E:2D:1D:97:F9:7F:3A
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:d4:0f:ed:22:e1:34:81:50:20:8e:25:9b:57:0f:2e:8f:
65:4b:87:00:1f:cd:09:84:4c:bb:19:66:90:30:8b:f4:32:5d:
1b:23:cd:f4:18:4f:2e:d1:e2:1c:78:81:c3:bb:4b:fc:d0:69:
d6:39:10:7d:1b:e9:68:33:75:58:bd:36:bc:aa:23:a1:84:36:
0f:d7:f8:e1:63:47:3d:7c:f5:71:3c:d6:1d:14:5b:d2:6d:6d:
3e:e5:4e:29:26:2c:a4:47:20:a5:11:96:9b:78:66:37:b9:2f:
1a:df:71:f6:a6:3b:29:4a:dd:c1:45:ac:00:fd:da:08:ea:f7:
79:b0:0e:fa:e5:0c:39:8f:ca:d0:f4:85:c0:f9:2e:1a:5c:31:
8f:f6:a6:62:02:49:88:db:f4:76:8c:16:c3:b0:52:36:61:21:
6d:49:d9:7f:fb:2a:61:58:d9:9e:87:74:5a:54:ca:9f:d5:1f:
9d:9b:34:d9:79:7b:c8:d2:72:29:bf:e5:0c:0b:a1:04:af:30:
84:03:08:41:4d:77:7d:59:46:8f:0b:e6:9a:d9:47:d2:b2:88:
ae:f9:3c:28:4e:db:f1:33:f2:ce:b9:cf:38:0e:6d:aa:ab:c3:
b1:9a:21:d5:10:82:2c:6c:a2:bc:2e:b9:cc:d2:59:59:a1:2a:
07:15:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:22 2026 by rpki-client