Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: Z4FN/oWwMgFqRK3b6Rp+THFxbrdmHtM+EqkcWCGnTm0=
Subject key identifier: A2:4F:FB:C0:92:14:B8:16:91:44:33:81:D7:D3:C2:4D:34:DE:90:90
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019EB6573D455974F67DEA2BCF2F1B571800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 11:00:30 +0000
Manifest this update: Thu 11 Jun 2026 11:00:30 +0000
Manifest next update: Fri 12 Jun 2026 11:00:30 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: jYFxcORp2dF15LGXhyOXtvSCGIgPDgeToZ4CWxQv0n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:3d:45:59:74:f6:7d:ea:2b:cf:2f:1b:57:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jun 11 11:00:30 2026 GMT
Not After : Jun 12 11:00:30 2026 GMT
Subject: CN=a24ffbc09214b81691443381d7d3c24d34de9090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:42:a6:43:3a:95:5e:a5:60:5f:a2:49:a5:
9e:79:e3:fe:79:41:3e:10:6c:d2:3a:05:d9:1d:be:
20:ce:5e:45:79:0b:ed:fb:b8:86:1a:75:ac:d0:84:
ae:a6:96:f8:fd:b7:2a:62:46:54:44:77:1c:64:05:
ac:0b:6c:27:d9:6f:a4:6c:ce:62:bf:d1:98:5f:cb:
c5:c8:03:bb:0d:4b:ce:15:c9:99:f7:62:f8:c9:bf:
2a:5e:2f:d0:64:61:b6:9e:e5:20:a5:c8:31:cb:42:
5d:4f:02:d3:97:9f:39:82:85:58:8b:8d:35:d9:3e:
25:cc:5e:92:a9:83:09:69:50:1f:31:ce:79:fe:d1:
92:0b:b4:ed:17:4f:f3:b3:8c:95:35:32:45:01:49:
b3:de:e4:ec:97:2b:25:b6:04:ce:fc:76:33:75:95:
d6:84:16:93:c1:01:15:b2:92:a6:3f:c5:05:92:c2:
9f:93:08:cf:5f:44:25:ab:9c:59:79:a4:3d:d9:b9:
d1:b0:a5:75:d9:f6:ca:fe:2e:7c:b6:be:0c:cc:32:
1c:26:4d:24:13:de:8c:7f:d9:bd:d6:3a:5d:3d:d1:
d7:b9:59:65:2b:43:c8:81:7c:e0:0e:af:87:14:31:
26:d6:5a:72:dc:29:d3:d9:e3:99:c9:6e:65:68:4a:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:FB:C0:92:14:B8:16:91:44:33:81:D7:D3:C2:4D:34:DE:90:90
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e4:23:31:eb:a5:57:85:ea:c8:d4:14:53:b5:31:d4:53:18:
4f:82:42:ea:76:2a:e9:4d:91:5d:2e:e8:24:13:84:d7:fc:6a:
a0:3c:4f:ff:98:3f:ec:fd:bf:a8:f6:65:a9:a6:5c:c2:ca:9c:
0b:20:a0:ed:36:9f:d1:61:bc:10:35:5e:a8:10:e6:4d:2d:98:
59:a8:94:11:a2:72:3d:a7:ac:50:d7:95:e8:fc:5b:d4:0e:77:
cb:74:8b:22:fb:f3:7e:a0:8c:67:8e:65:f8:69:71:30:45:ab:
f6:ef:ba:1a:3b:1d:ae:dd:1a:a6:78:13:ad:c8:c4:e9:41:3a:
c3:d3:49:d6:7a:ff:bb:42:ad:e6:11:3f:2e:73:17:b7:d9:b0:
b6:25:48:8a:48:5a:32:07:49:0c:fc:ca:0e:fc:1d:85:e7:67:
21:15:dd:7c:c7:8a:98:2d:f6:ce:ef:1c:47:72:f0:32:94:1b:
2a:11:e2:12:7e:c2:d1:62:c4:d9:90:82:92:42:31:9a:e2:c8:
eb:58:21:72:09:29:51:3b:2c:ed:8a:c8:9b:41:e1:c7:f4:39:
35:6f:64:cb:9f:f3:94:b0:fb:16:34:20:dc:01:5e:70:c3:27:
6c:7a:a8:91:46:fd:c6:13:68:6c:03:64:07:75:6b:e8:d5:4b:
34:98:49:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62Vz1FWXT2feorzy8bVxgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5
MzhiYjEwHhcNMjYwNjExMTEwMDMwWhcNMjYwNjEyMTEwMDMwWjAzMTEwLwYDVQQD
EyhhMjRmZmJjMDkyMTRiODE2OTE0NDMzODFkN2QzYzI0ZDM0ZGU5MDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR9CpkM6lV6lYF+iSaWeeeP+eUE+
EGzSOgXZHb4gzl5FeQvt+7iGGnWs0ISuppb4/bcqYkZURHccZAWsC2wn2W+kbM5i
v9GYX8vFyAO7DUvOFcmZ92L4yb8qXi/QZGG2nuUgpcgxy0JdTwLTl585goVYi401
2T4lzF6SqYMJaVAfMc55/tGSC7TtF0/zs4yVNTJFAUmz3uTslysltgTO/HYzdZXW
hBaTwQEVspKmP8UFksKfkwjPX0Qlq5xZeaQ92bnRsKV12fbK/i58tr4MzDIcJk0k
E96Mf9m91jpdPdHXuVllK0PIgXzgDq+HFDEm1lpy3CnT2eOZyW5laEqmswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJP+8CSFLgWkUQzgdfTwk003pCQMB8GA1UdIwQY
MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt
YTA4ODNjMGIwOTViLzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi
LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieQjMeul
V4XqyNQUU7Ux1FMYT4JC6nYq6U2RXS7oJBOE1/xqoDxP/5g/7P2/qPZlqaZcwsqc
CyCg7Taf0WG8EDVeqBDmTS2YWaiUEaJyPaesUNeV6Pxb1A53y3SLIvvzfqCMZ45l
+GlxMEWr9u+6Gjsdrt0apngTrcjE6UE6w9NJ1nr/u0Kt5hE/LnMXt9mwtiVIikha
MgdJDPzKDvwdhednIRXdfMeKmC32zu8cR3LwMpQbKhHiEn7C0WLE2ZCCkkIxmuLI
61ghcgkpUTss7YrIm0Hhx/Q5NW9ky5/zlLD7FjQg3AFecMMnbHqokUb9xhNobANk
B3Vr6NVLNJhJcg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:59:39 2026 by rpki-client