Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: HsVpjVy5SLhybDLsdsjqfVKy6CZJm7cIBDjdy6Uaotw=
Subject key identifier: 01:C9:9E:5B:2C:71:5B:5F:C2:65:24:C2:2B:D4:75:D2:4F:90:3C:6A
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 01A184BEFBDC150E23214346F1B2E97DB8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 23:01:11 +0000
Manifest this update: Wed 28 Oct 2026 23:01:11 +0000
Manifest next update: Thu 29 Oct 2026 23:01:11 +0000
Files and hashes: 1: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (hash: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs=)
2: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 6Q1xlM6ahvEwmWS+mnk8kEQY6L8brSiZ9SB3gn2UkIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:be:fb:dc:15:0e:23:21:43:46:f1:b2:e9:7d:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Oct 28 23:01:11 2026 GMT
Not After : Oct 29 23:01:11 2026 GMT
Subject: CN=01c99e5b2c715b5fc26524c22bd475d24f903c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:3e:ae:5d:48:ab:a2:80:57:84:37:43:70:
e7:f1:ec:e7:09:71:a1:5b:84:0b:a5:77:0d:2b:1b:
56:05:85:8b:d9:aa:8a:cc:50:30:6e:24:e1:82:e2:
d5:15:de:9f:a8:e2:18:93:e8:9d:bc:26:3e:de:d9:
05:a1:89:af:3a:bf:c8:5d:0d:0a:7a:73:f6:37:9a:
2c:da:97:12:0b:bf:df:9a:cb:af:02:90:ec:16:e3:
8b:a2:ef:84:64:92:6b:dd:4d:d9:d0:64:87:d1:80:
fc:4a:71:15:48:9c:34:c7:d9:17:f3:51:bb:5c:20:
cf:53:23:09:7c:37:eb:a9:00:3e:c5:d9:9d:cd:67:
4b:68:61:4b:dd:6d:68:1c:e4:9e:8d:a8:e1:c1:05:
ee:45:b1:4c:30:28:f7:9b:52:e2:52:4f:63:b7:bb:
43:a3:c9:a8:89:83:ad:3c:e7:07:07:d3:ce:6b:88:
ce:9b:87:6e:79:54:46:fd:98:7e:cc:ce:68:ce:0d:
39:fc:99:8e:83:30:ce:dc:58:a3:9f:e3:88:75:85:
2b:5f:3e:a0:dd:15:e8:7e:8f:86:2d:6f:60:8b:59:
ad:4a:67:1e:24:7a:87:df:54:6a:b9:20:76:a0:01:
13:14:b3:ef:d6:9d:79:d6:68:ca:4b:6a:20:fc:70:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:9E:5B:2C:71:5B:5F:C2:65:24:C2:2B:D4:75:D2:4F:90:3C:6A
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:a6:4b:ef:a2:aa:3b:ee:bf:f0:85:43:11:c8:18:bd:fc:
c8:05:18:77:1b:97:8d:c6:8d:9f:02:f2:5c:51:4c:3e:9a:e6:
66:a7:fe:67:18:c2:4d:3e:80:14:6c:50:2c:0e:c4:4c:74:b2:
8f:7e:d4:7e:5d:d7:d1:28:86:2b:b0:b2:5e:3b:c5:a2:ba:9b:
7f:59:97:ba:b0:90:b3:0a:f8:51:e2:ed:91:95:bd:5c:3b:62:
08:2e:2d:4e:8f:a1:b0:dd:6b:b8:3e:7a:70:d0:bb:e2:3d:22:
6d:9c:4e:38:3f:de:aa:1d:df:68:2f:cd:db:83:4d:ca:ca:48:
82:2e:13:38:ac:11:5a:a1:c7:cc:a3:aa:dd:b2:3e:e4:36:3a:
0c:50:78:8c:64:8d:dd:db:9d:63:c5:fe:00:72:b6:2b:95:94:
d2:cf:5a:44:ff:d5:c5:75:85:17:cd:20:98:05:6e:3e:d2:de:
38:8d:96:58:81:c8:11:23:31:ed:e7:f3:0c:ec:8c:31:3d:93:
b2:c7:13:15:36:0b:03:cc:34:4f:6d:9e:e0:b4:8e:84:cb:5e:
e8:58:10:38:60:87:42:e9:09:19:ea:9a:c3:9a:f5:67:b6:1a:
1e:4f:7f:28:f5:88:29:57:ab:ae:f1:e3:a3:fd:00:9c:cb:d3:
40:f6:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:36:47 2026 by rpki-client