Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: oWGWuX5CyKdrdz1rHFY3RGhhTKL8g1OyCbPyuS60X14=
Subject key identifier: 85:64:D6:D8:33:BA:3A:B5:D3:EA:83:8E:42:98:BA:06:6E:FD:A6:21
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019D39E5BCCE1848FC8C40F4B89058197AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:50 +0000
Manifest this update: Sun 29 Mar 2026 14:00:50 +0000
Manifest next update: Mon 30 Mar 2026 14:00:50 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: +syOjjC8knk0vE5FKes62aqHmxAXeEBwiSg159ZVsac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:bc:ce:18:48:fc:8c:40:f4:b8:90:58:19:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Mar 29 14:00:50 2026 GMT
Not After : Mar 30 14:00:50 2026 GMT
Subject: CN=8564d6d833ba3ab5d3ea838e4298ba066efda621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:e0:55:d1:e6:f2:45:b9:0d:ce:70:6d:d2:
3e:38:51:f8:fc:10:74:57:ca:15:8f:1d:77:db:ad:
59:42:12:03:c7:c8:74:c3:06:20:41:b8:b1:72:96:
d0:95:86:f2:be:0f:79:b7:ef:e8:38:28:84:98:93:
3c:ad:a5:a0:97:6a:06:3e:9d:a8:61:7e:97:f6:28:
30:a9:e7:31:46:35:20:ed:1f:1a:04:2b:60:cc:96:
f8:d3:2d:87:99:50:a9:8f:18:7d:83:3f:28:b6:3e:
a8:b9:46:68:56:3b:c6:c1:88:d6:37:29:3d:40:9c:
60:f8:8b:85:e2:6e:e8:ea:6f:26:fd:0e:79:da:fa:
12:bc:cd:d8:72:61:ee:67:8f:3a:b0:32:58:9f:2a:
65:39:42:ac:f6:ac:0d:74:82:48:40:da:0e:d7:b0:
67:56:cb:32:17:ab:f0:b9:47:8f:f9:f6:a4:d3:bf:
bb:a2:43:38:59:fa:15:46:96:ef:d6:66:bb:7e:fc:
6b:61:7d:c2:4d:e3:dc:5e:a8:33:19:f7:b4:84:25:
98:6e:d9:dd:e1:86:8b:50:8b:be:ff:93:2d:f9:71:
d6:4f:1c:b9:af:2a:71:0c:72:6c:41:8f:62:38:40:
35:fc:4f:f2:54:9a:81:00:e0:5c:ef:57:29:ca:00:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:D6:D8:33:BA:3A:B5:D3:EA:83:8E:42:98:BA:06:6E:FD:A6:21
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:75:96:13:db:28:d9:85:9e:f6:16:fc:1f:b0:64:28:14:fa:
08:68:bb:30:b5:a9:56:12:29:e3:bd:0a:e7:22:43:e6:4f:1d:
2d:01:c7:4e:c1:78:a6:b2:ed:2b:d4:2d:e8:ab:0f:41:49:cc:
5d:03:0f:52:e4:cb:1e:2f:c3:4a:e9:f1:b8:42:62:87:e7:7e:
75:15:ca:98:0e:99:f4:fa:06:81:04:2e:1d:a6:de:31:0d:4e:
40:a9:ac:a9:fb:9b:02:60:86:1e:4f:23:d5:1d:35:57:65:20:
0d:ce:15:56:d4:8f:aa:21:f8:e3:f3:c5:fb:af:08:5b:7d:eb:
dc:dc:35:1e:25:da:af:95:e7:0b:0b:0f:f6:40:fa:46:25:ee:
fd:42:c2:a4:00:aa:46:1e:07:81:52:86:6c:d6:54:38:e0:c2:
7e:a0:fa:ef:b6:b2:8a:87:75:bd:5e:5e:1e:e2:9c:09:d7:14:
ce:fb:5a:49:38:29:62:32:c8:4d:9e:27:f4:42:a7:b3:26:27:
de:83:a8:16:e0:49:62:a5:5d:08:e0:13:4f:7a:f3:22:08:a1:
95:4b:33:5d:91:e7:99:a3:31:65:bd:c1:e4:9b:0b:8b:0d:32:
33:75:f1:18:48:d5:d0:e2:63:3c:35:90:c9:21:82:60:85:41:
40:76:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:35 2026 by rpki-client