Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: 3Dml3BJRcqZ2Nuhvd7TBk3ig3kv5K6+Qpk859EvoQVE=
Subject key identifier: 18:34:05:18:F7:FE:83:90:E4:66:61:6F:60:8B:56:2A:9F:56:D8:14
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 01A08D8DFAA37ED81B555BC0D31E9FD3FC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 23:01:27 +0000
Manifest this update: Thu 10 Sep 2026 23:01:27 +0000
Manifest next update: Fri 11 Sep 2026 23:01:27 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: lo/eX5b8o1GvtwCJmUwtRhh3e+QppopWSB4GkgXqlac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:fa:a3:7e:d8:1b:55:5b:c0:d3:1e:9f:d3:fc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Sep 10 23:01:27 2026 GMT
Not After : Sep 11 23:01:27 2026 GMT
Subject: CN=18340518f7fe8390e466616f608b562a9f56d814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:45:0f:88:6d:88:db:e6:13:30:82:41:86:
9f:d3:b0:5f:3f:17:ff:f9:d0:c0:3c:01:ad:34:57:
68:e4:2f:0e:38:5c:c3:d5:e5:fd:86:70:91:55:5a:
3a:2a:5a:34:f1:48:e9:a6:3e:38:37:3b:f5:30:ce:
ce:ef:9a:26:dc:32:5a:76:d2:3c:4a:f1:44:97:1f:
f2:09:29:50:9e:89:16:a8:dc:e8:90:85:73:b2:78:
ca:cd:a5:d0:e1:cf:92:68:2d:07:f4:d5:ca:2c:84:
17:27:f7:32:9d:c5:f8:d1:68:e8:19:7b:48:b9:5d:
1d:b3:f9:5c:7e:e8:78:0c:f6:2b:8c:c0:95:f7:ae:
f4:05:a2:4e:72:01:d3:83:28:af:dc:dd:a8:13:92:
19:6b:08:c6:79:31:81:10:26:ec:9b:07:12:0a:0c:
3e:95:db:9b:58:06:fe:53:3d:d2:8d:11:12:fe:53:
37:1b:a5:d2:7c:31:7c:08:e0:11:96:0f:c1:29:99:
ef:03:4f:21:64:cf:74:a8:11:cc:cc:39:94:4a:f3:
2a:3e:7e:17:0b:11:d6:81:39:19:37:a5:ea:04:0b:
a1:81:3f:0b:61:81:41:43:b7:d3:2b:d4:57:11:ec:
94:d6:1f:d8:5c:69:d8:f4:11:36:81:88:74:bc:bc:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:05:18:F7:FE:83:90:E4:66:61:6F:60:8B:56:2A:9F:56:D8:14
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fd:ae:63:85:ec:31:51:e2:01:db:5c:cf:11:72:0d:65:06:
79:e0:d8:cb:5f:81:a2:01:a4:c2:e1:cc:8d:53:a8:22:d6:05:
0b:79:f5:d9:1c:1d:68:4f:18:1f:ab:2e:62:a0:6e:78:d8:3f:
31:28:5b:86:7b:ed:a7:a4:f2:1a:25:0e:28:d9:04:5a:9d:24:
7c:e4:86:22:cb:25:a6:6b:c1:19:63:1a:1b:08:16:2b:2c:87:
ce:bd:de:42:2a:a8:a0:a5:fd:8e:8c:57:a5:80:4a:c3:91:e2:
06:90:9e:f3:f1:28:ef:76:db:e2:52:fb:d9:fd:e7:32:72:e7:
65:7a:a3:7d:01:d7:37:28:56:8e:53:e1:da:55:8d:9e:c0:49:
8f:88:3d:73:e8:21:0e:e1:d9:05:59:a1:d7:ae:70:5d:7a:fa:
73:a1:2d:9e:39:15:2e:2d:68:8a:02:17:26:aa:07:ac:e8:21:
bd:8d:29:9f:45:c3:69:fa:d2:ae:a4:77:bc:32:85:23:83:c2:
79:8c:2f:da:64:90:71:a3:df:30:76:4a:f0:da:5e:cc:79:21:
ad:db:30:4a:2e:39:a6:82:76:f4:03:71:fd:f6:05:fc:58:c5:
2f:b2:3e:43:9f:1f:10:bd:af:1d:60:ec:79:2c:df:0d:af:7d:
1e:57:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:53 2026 by rpki-client