Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: p3w81/rcPDdSjOW/bWB1zFUao8Qmjq1Ei/KUGZbtQaY=
Subject key identifier: F4:68:B2:C4:5E:2D:BF:79:19:8E:9F:AB:2B:87:90:1C:9C:C3:F4:90
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 01A08D8D9E751D7B9E5B90DC44050F14331C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 23:01:03 +0000
Manifest this update: Thu 10 Sep 2026 23:01:03 +0000
Manifest next update: Fri 11 Sep 2026 23:01:03 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: mJ93m1i+Dw/ISOPDvBXhbQDeLWM1Q6UDClsy8N00U3g=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:9e:75:1d:7b:9e:5b:90:dc:44:05:0f:14:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Sep 10 23:01:03 2026 GMT
Not After : Sep 11 23:01:03 2026 GMT
Subject: CN=f468b2c45e2dbf79198e9fab2b87901c9cc3f490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:a6:17:d0:09:a8:c3:ed:3d:1e:79:98:f2:
62:c3:a2:95:d5:44:2a:cc:50:5e:ca:9f:83:36:55:
39:d9:17:1f:09:3c:92:39:02:48:ca:74:04:b4:9a:
a7:e2:2d:25:80:44:d4:8f:b6:67:96:1f:14:aa:b6:
19:08:d2:a3:9c:e8:c2:a1:c9:54:d8:36:ad:96:a5:
a1:77:bc:9a:2c:93:70:b5:9d:d8:97:85:1d:d1:db:
d7:1e:6d:8a:2e:64:18:84:74:97:4c:b4:0c:71:13:
98:01:f3:6b:c2:72:4e:bd:48:02:79:7e:d3:d2:01:
4e:34:6d:36:f5:7a:3b:41:9c:55:db:eb:06:4c:5e:
c4:70:48:a2:ce:ad:ce:7f:3a:09:1e:7e:af:d6:b5:
7d:b6:76:31:14:d2:a9:36:6d:96:b6:f4:81:b4:b3:
e1:bc:bc:0a:ca:94:4a:b4:e6:0d:00:9b:0f:47:df:
b8:a0:8a:3d:cd:8a:26:59:39:93:4b:94:e5:24:4f:
ef:49:c9:bc:aa:82:9b:d3:8d:89:9f:82:3e:0c:14:
65:2e:6e:58:93:96:11:7d:94:12:01:45:0f:53:b8:
ab:89:f6:dc:9b:d3:3e:f1:cb:a3:08:11:f0:62:47:
ee:9b:69:bb:70:b2:6e:8e:21:22:a7:d4:23:e3:7c:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:B2:C4:5E:2D:BF:79:19:8E:9F:AB:2B:87:90:1C:9C:C3:F4:90
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:0b:41:c6:ed:ce:3f:14:f9:3e:de:aa:01:48:36:7d:c4:
c9:40:30:85:58:97:6e:e0:4d:62:28:7d:c4:af:f8:00:67:0c:
76:11:7b:c3:ec:b9:27:00:c0:cd:b7:4a:00:58:47:aa:6c:d9:
06:72:c5:a8:98:28:c1:4a:13:e1:2d:6c:66:40:f0:1c:b5:39:
d5:a3:aa:70:c5:77:74:bc:30:f0:42:ac:c5:f3:9c:36:12:a6:
00:50:a8:51:67:1b:6e:6f:aa:57:3a:9b:96:72:96:6d:ba:15:
76:49:56:6d:97:50:4e:af:10:18:ee:50:73:4c:46:c1:78:0b:
d8:37:29:d8:aa:cd:be:7b:85:00:20:67:37:fd:c7:9c:00:32:
06:47:38:1f:7f:ad:d1:05:0f:50:12:06:ed:01:3d:20:74:06:
58:b8:b5:b8:19:7e:a1:1e:49:b8:d6:fd:31:d8:a6:02:e1:89:
ae:b1:7d:6b:35:20:75:96:af:19:02:d1:c6:ed:02:3a:2f:27:
be:9a:af:02:9d:5d:05:e1:b4:71:00:65:7f:2e:c9:56:42:f0:
5f:26:0a:b9:bd:08:28:4a:fd:61:2b:39:76:93:3e:fb:8d:b0:
e0:90:df:d7:1d:a9:14:e5:af:61:3f:19:da:d1:8b:88:76:5a:
ba:e7:95:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjZ51HXueW5DcRAUPFDMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0
YWQyN2EwHhcNMjYwOTEwMjMwMTAzWhcNMjYwOTExMjMwMTAzWjAzMTEwLwYDVQQD
EyhmNDY4YjJjNDVlMmRiZjc5MTk4ZTlmYWIyYjg3OTAxYzljYzNmNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3+mF9AJqMPtPR55mPJiw6KV1UQq
zFBeyp+DNlU52RcfCTySOQJIynQEtJqn4i0lgETUj7Znlh8UqrYZCNKjnOjCoclU
2DatlqWhd7yaLJNwtZ3Yl4Ud0dvXHm2KLmQYhHSXTLQMcROYAfNrwnJOvUgCeX7T
0gFONG029Xo7QZxV2+sGTF7EcEiizq3OfzoJHn6v1rV9tnYxFNKpNm2WtvSBtLPh
vLwKypRKtOYNAJsPR9+4oIo9zYomWTmTS5TlJE/vScm8qoKb042Jn4I+DBRlLm5Y
k5YRfZQSAUUPU7irifbcm9M+8cujCBHwYkfum2m7cLJujiEip9Qj43y1nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRossReLb95GY6fqyuHkBycw/SQMB8GA1UdIwQY
MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt
N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0
LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEa0LQcbt
zj8U+T7eqgFINn3EyUAwhViXbuBNYih9xK/4AGcMdhF7w+y5JwDAzbdKAFhHqmzZ
BnLFqJgowUoT4S1sZkDwHLU51aOqcMV3dLww8EKsxfOcNhKmAFCoUWcbbm+qVzqb
lnKWbboVdklWbZdQTq8QGO5Qc0xGwXgL2Dcp2KrNvnuFACBnN/3HnAAyBkc4H3+t
0QUPUBIG7QE9IHQGWLi1uBl+oR5JuNb9MdimAuGJrrF9azUgdZavGQLRxu0COi8n
vpqvAp1dBeG0cQBlfy7JVkLwXyYKub0IKEr9YSs5dpM++42w4JDf1x2pFOWvYT8Z
2tGLiHZauueVew==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:53:14 2026 by rpki-client