Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: Luvz4+T3FJf7gat84VGAqglcqbcLwfIeHatbRNO2WBs=
Subject key identifier: AA:55:82:64:70:5D:E1:A5:9D:A3:3B:A3:18:80:D8:BB:8B:D1:D9:67
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019EBA34C80327B2871D3D65E997B1B23E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 05:01:21 +0000
Manifest this update: Fri 12 Jun 2026 05:01:21 +0000
Manifest next update: Sat 13 Jun 2026 05:01:21 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: MODq+lEFh03+OW/qXSWmzxl60B6b03WW1IPbgp7YGJ4=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:c8:03:27:b2:87:1d:3d:65:e9:97:b1:b2:3e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jun 12 05:01:21 2026 GMT
Not After : Jun 13 05:01:21 2026 GMT
Subject: CN=aa558264705de1a59da33ba31880d8bb8bd1d967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:53:d8:d2:33:dc:2d:a1:4a:22:48:7e:97:
ad:46:95:c9:70:48:a0:cd:4b:65:e8:ac:66:8d:3b:
bb:94:a4:b9:09:89:13:b0:db:b3:ca:dc:6d:a3:76:
b9:39:69:6d:58:7f:c3:f9:a1:fd:d9:6c:1d:06:f0:
c7:e2:57:6d:e1:0a:03:49:48:d6:c5:ed:0b:d4:6c:
c8:88:67:d3:45:b4:a9:94:ae:83:49:d6:f9:9f:1b:
b0:81:4a:57:57:97:1b:df:3b:31:32:71:f7:1f:29:
85:61:1d:3f:d1:bf:55:9c:a4:0b:f0:1a:46:35:f9:
02:54:9e:7f:2b:58:d3:7d:04:01:b8:38:99:74:9b:
1d:f8:cb:dc:f6:05:84:46:8f:20:0a:a2:e8:5a:50:
74:b5:47:04:9f:c1:31:a0:d4:41:4a:d8:8b:eb:b3:
2d:a0:52:9a:d2:c0:6f:de:ee:97:ad:65:76:a6:f4:
6a:b3:7b:c6:7c:b3:76:c1:5d:fd:d7:eb:32:3e:78:
81:5e:a3:61:1c:c2:09:24:28:1c:36:66:8b:30:02:
bc:de:11:ec:02:0c:2e:35:01:fa:21:95:6b:66:f9:
89:25:e3:c2:2f:ff:78:94:11:fa:b4:0d:7d:ea:5b:
61:5a:e2:0d:70:a3:ed:c8:27:58:9a:ee:cf:de:69:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:82:64:70:5D:E1:A5:9D:A3:3B:A3:18:80:D8:BB:8B:D1:D9:67
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8a:4d:78:fd:9c:57:05:a2:6f:01:a7:32:ba:b8:c8:8b:d3:
86:6d:0b:8f:e1:9b:ae:43:ec:7d:95:3b:67:2d:6d:78:e5:d2:
68:8b:ed:50:5d:a8:f8:f5:44:17:66:c4:ca:49:dd:d8:60:fc:
80:49:8f:e3:10:32:3a:c1:27:19:55:fc:34:83:80:9b:07:38:
42:c2:83:1d:65:8b:b0:18:80:4b:d5:dc:f1:9b:ad:d8:65:30:
78:33:23:df:8e:89:1e:3b:b1:2b:7b:00:80:c2:bd:f8:4d:ec:
b6:fa:05:f9:f5:90:2f:f4:c5:c5:14:a7:6b:a5:a8:82:ad:b0:
81:83:b4:e4:63:75:75:a7:d4:54:d9:37:48:25:05:76:6e:d5:
c9:05:a0:fc:94:cb:91:4d:f6:e7:ef:5f:8c:e2:2c:46:9c:2a:
7d:50:19:e0:32:2e:2a:16:40:60:0c:17:f6:f9:cb:7d:c8:d3:
b3:97:13:7b:53:71:b8:47:ed:1d:38:c8:6a:63:f1:0e:0e:87:
ef:4c:a4:53:a7:f2:fc:30:9b:08:7b:f2:31:a2:09:9d:41:99:
61:a3:a0:01:4a:12:00:63:85:a2:8e:56:45:9a:88:14:75:46:
69:ec:66:16:19:5d:59:78:5c:a6:08:e3:1b:6f:8d:d5:7b:15:
b7:24:ce:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66NMgDJ7KHHT1l6Zexsj6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MTMzNTI0ZjI0YTRhOGEyMWQ0NmMwNmMxMDI1ZjQwZjM0
YWQyN2EwHhcNMjYwNjEyMDUwMTIxWhcNMjYwNjEzMDUwMTIxWjAzMTEwLwYDVQQD
EyhhYTU1ODI2NDcwNWRlMWE1OWRhMzNiYTMxODgwZDhiYjhiZDFkOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2FT2NIz3C2hSiJIfpetRpXJcEig
zUtl6KxmjTu7lKS5CYkTsNuzytxto3a5OWltWH/D+aH92WwdBvDH4ldt4QoDSUjW
xe0L1GzIiGfTRbSplK6DSdb5nxuwgUpXV5cb3zsxMnH3HymFYR0/0b9VnKQL8BpG
NfkCVJ5/K1jTfQQBuDiZdJsd+Mvc9gWERo8gCqLoWlB0tUcEn8ExoNRBStiL67Mt
oFKa0sBv3u6XrWV2pvRqs3vGfLN2wV391+syPniBXqNhHMIJJCgcNmaLMAK83hHs
AgwuNQH6IZVrZvmJJePCL/94lBH6tA196lthWuINcKPtyCdYmu7P3ml7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpVgmRwXeGlnaM7oxiA2LuL0dlnMB8GA1UdIwQY
MBaAFKQTNSTySkqKIdRsBsECX0DzStJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYt
N2Q5ZTYyYWZjNDQ0LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYzI0YmUtMjY2ZS00NTIyLTk3ZDYtN2Q5ZTYyYWZjNDQ0
LzEvcEJNMUpQSktTb29oMUd3R3dRSmZRUE5LMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgopNeP2c
VwWibwGnMrq4yIvThm0Lj+GbrkPsfZU7Zy1teOXSaIvtUF2o+PVEF2bEyknd2GD8
gEmP4xAyOsEnGVX8NIOAmwc4QsKDHWWLsBiAS9Xc8Zut2GUweDMj346JHjuxK3sA
gMK9+E3stvoF+fWQL/TFxRSna6Wogq2wgYO05GN1dafUVNk3SCUFdm7VyQWg/JTL
kU325+9fjOIsRpwqfVAZ4DIuKhZAYAwX9vnLfcjTs5cTe1NxuEftHTjIamPxDg6H
70ykU6fy/DCbCHvyMaIJnUGZYaOgAUoSAGOFoo5WRZqIFHVGaexmFhldWXhcpgjj
G2+N1XsVtyTOIQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:30:50 2026 by rpki-client