Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: 2yx/jAB36DnlnPCJsXSVoNWkeco9B720lr8gKaDA2dg=
Subject key identifier: B7:5D:5F:1D:6F:91:64:60:D8:5C:A3:0F:2B:76:0C:E0:45:3F:6B:C8
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019FA3E0E7EF632414725BED517536712342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 14:00:53 +0000
Manifest this update: Mon 27 Jul 2026 14:00:53 +0000
Manifest next update: Tue 28 Jul 2026 14:00:53 +0000
Files and hashes: 1: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: n6xAkqu8RVTl0WRYnr5OYZIytNOS7PoIRBB7+1x494E=)
2: y5UyZn3R0XHujvT13C_kHj2w0cs.roa (hash: ZG5nlrTnagfrNNiXJY30QrIi37+GVW+aj1DQcrSdzhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:e7:ef:63:24:14:72:5b:ed:51:75:36:71:23:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jul 27 14:00:53 2026 GMT
Not After : Jul 28 14:00:53 2026 GMT
Subject: CN=b75d5f1d6f916460d85ca30f2b760ce0453f6bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:09:96:f0:3d:8e:01:a7:28:07:a3:b9:c4:
fc:e6:3f:d0:06:4e:c2:89:3e:72:f6:cf:f6:ae:2e:
c0:62:a4:96:10:d2:d7:2f:a3:47:1b:25:e8:76:94:
00:4c:75:ee:95:0d:d7:37:b5:54:01:0d:cd:e6:9b:
fd:83:74:2b:b3:da:c8:5e:25:8a:10:5e:1f:95:d7:
c5:94:65:2b:b5:10:5f:06:82:70:44:49:20:9e:56:
31:2a:2e:c6:11:50:17:74:4f:f4:08:77:2a:44:3b:
40:e5:b7:d2:55:5e:a2:74:7d:50:b3:76:4f:bf:1b:
a2:f2:e3:82:01:8a:01:a5:33:e4:ae:b9:d3:b6:1c:
3b:b3:36:27:5d:e7:c2:3c:08:c2:02:61:d6:bd:a6:
15:46:f9:32:88:b2:25:b3:3f:da:24:53:e5:ca:f5:
81:5f:4c:55:d5:23:02:6b:ca:87:5a:0c:51:4e:3b:
a5:ed:24:c3:e1:5c:76:a6:2a:47:02:03:4e:32:70:
7f:00:49:2e:56:24:88:f0:4d:de:3f:d7:bc:be:6d:
3a:3d:4a:d3:6b:98:32:80:99:90:49:4f:97:81:76:
df:14:18:e3:3b:d6:64:c4:cf:cc:68:15:88:33:49:
32:be:f7:05:b1:c9:2a:05:3c:30:2c:86:07:05:1b:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:5F:1D:6F:91:64:60:D8:5C:A3:0F:2B:76:0C:E0:45:3F:6B:C8
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:24:ee:d1:e0:ca:2c:8b:e2:6e:e6:aa:6f:0f:6c:12:22:c3:
0d:43:70:c2:7b:cd:bf:b6:d7:f2:22:20:9b:75:a6:17:b8:c1:
2a:ef:a7:6b:74:85:53:ff:66:55:b2:64:3b:17:cc:68:f4:68:
12:1d:76:8a:34:ca:57:5d:8e:91:12:a6:ec:c7:e6:ae:ff:b8:
7c:fd:1f:79:f6:cb:15:26:51:c2:33:99:29:94:f8:29:d8:ab:
1a:16:67:66:61:8e:89:f4:ba:3f:42:32:a0:77:15:15:3f:48:
7d:fc:2e:10:94:35:d4:0b:0e:33:a1:e6:46:95:dc:51:4e:9b:
2f:83:69:a5:58:d3:f4:f5:9a:f2:8b:49:23:99:d8:c1:2e:77:
7f:81:0b:06:73:bd:cd:99:7b:c2:8c:33:a5:68:b2:01:0d:62:
fe:30:65:c1:d2:cb:6f:02:5b:36:fb:d4:bd:c2:8b:6d:f5:af:
40:15:2a:22:b7:94:59:8e:78:90:02:ae:2d:f6:41:bf:79:d7:
72:c6:ed:53:ee:89:66:0a:1b:2b:00:2c:b7:af:cc:f7:8b:18:
5a:55:b4:bb:1f:f9:ec:38:6b:85:43:34:ca:f9:9b:36:59:7f:
4d:79:e6:f0:fa:ea:8b:cd:2a:19:90:66:c1:87:60:25:85:84:
f9:ed:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:27:47 2026 by rpki-client