Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: EVZl8HNeNxUiT1fYCPCTGF7elHLz6PtbIEh4Tf0OYQI=
Subject key identifier: C8:B6:9E:D7:B3:49:74:4D:51:FF:2D:4A:A6:51:DB:2C:59:BD:1C:59
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019D37C075AAFA63FBA485224A7B155B429C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: MmigRRL2LyWePgn6NdPmnp-_7Fo.roa (hash: BqaSO/Kz9QyCKoZzd5EqVaPPf4EzqcDWslrygs00Jqs=)
2: PVLhPYh9NJguck7AY7uc4y9zEXc.roa (hash: K7wMgagtYa/+gA6yFcAepqwtwV8qsQ0klI3xlG+quOA=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: Fvd3B7G0fGdEtsoyxKJBs2X+5C4f0526imS7x0OhR4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:75:aa:fa:63:fb:a4:85:22:4a:7b:15:5b:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=c8b69ed7b349744d51ff2d4aa651db2c59bd1c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:65:6f:cb:6c:be:13:68:78:a6:04:50:86:
ed:5a:c2:4d:fe:2f:bb:c6:cc:ee:ee:6f:c2:80:df:
4e:2a:4a:5c:98:22:aa:ff:19:4d:47:48:63:ab:aa:
68:a5:f2:ef:1b:a6:0e:3d:d4:cc:ed:4a:11:de:7f:
d1:92:5d:5c:0e:3b:3b:91:cb:fe:e9:6a:fd:62:6a:
ec:df:fc:59:cf:82:6f:09:9a:49:7f:57:4e:ea:2b:
85:c2:12:4f:01:c9:fd:73:fa:c6:8a:64:43:14:0e:
74:0b:25:5a:a8:ff:b0:9d:ad:74:68:df:41:c7:36:
d5:3d:2f:e9:43:c7:91:5e:74:84:34:68:10:ce:d9:
d8:8d:38:2c:9c:66:58:ff:94:c4:82:cd:1f:c0:4b:
e3:b9:f3:c8:ce:a6:88:cc:00:0e:4b:d1:8b:6c:6c:
d5:31:45:82:64:ce:fa:f7:ac:58:93:72:b3:ca:0c:
6b:69:f7:ad:a5:3d:18:9a:11:b4:b3:81:92:11:fd:
ca:40:07:36:ff:1b:38:c4:cc:8a:e3:06:50:72:02:
b5:17:4b:00:19:88:f5:3a:c7:d4:3f:5a:bf:fe:aa:
d7:9f:94:cc:35:94:0f:2a:f5:13:bb:d7:7c:31:6b:
33:39:cf:64:fb:c2:2a:5a:0c:71:2c:e2:19:c4:21:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:9E:D7:B3:49:74:4D:51:FF:2D:4A:A6:51:DB:2C:59:BD:1C:59
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:77:3a:29:29:ed:f9:37:96:ee:56:5b:13:e2:d7:3a:3b:
4f:52:9c:4b:79:52:fb:d8:1a:82:18:88:4e:60:0e:77:0c:b9:
8d:df:57:94:15:95:9f:96:c6:ee:bc:01:66:70:b2:a7:03:6c:
c9:f3:dd:bc:ab:9d:42:88:ba:3c:24:b1:50:58:55:fd:fb:2b:
5a:b7:59:96:97:56:df:0d:f9:e9:a8:61:f0:cc:21:26:44:64:
6e:d2:29:97:04:b9:d1:91:fb:60:17:ef:7c:37:ae:02:71:aa:
0f:20:6a:73:c3:47:d5:fc:c4:64:6c:10:c0:97:c6:c8:9d:a4:
28:7a:f8:1d:9b:41:58:c5:87:98:a4:b7:8f:3d:80:b1:fd:bd:
9c:d9:df:38:e3:29:90:0f:88:0a:2d:87:95:cd:f4:fb:e6:bb:
e9:a7:57:0e:af:bf:3b:cf:48:b8:79:d6:25:4d:44:24:e6:93:
63:0d:8f:43:67:cb:aa:0d:87:1d:8d:cd:e0:2d:6c:96:c3:3d:
24:b4:a7:09:06:37:33:4f:47:9e:72:6f:d1:d7:37:fb:96:2a:
bb:d9:4e:86:7c:e7:27:3c:52:2f:52:ac:05:98:41:bf:6b:d3:
fa:c0:d0:fd:f9:1b:9d:2d:54:7a:92:a6:ef:1f:34:e4:bb:91:
f1:8d:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:04 2026 by rpki-client