Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: 0w5B/yyoHgP1acVpbXs2hEvHdgZgXp6YD8MI5VtRRyA=
Subject key identifier: 4A:33:B7:20:00:63:1C:A8:22:BA:4A:4C:7D:15:50:B2:1D:F2:13:8A
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 01A1A9705FE2F3DF1ADFAEDF4529ECBE8B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 036F
Signing time: Thu 05 Nov 2026 02:01:16 +0000
Manifest this update: Thu 05 Nov 2026 02:01:16 +0000
Manifest next update: Fri 06 Nov 2026 02:01:16 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: uzgNUvUcN1hZJeRAeHbfCW5tRw1LMu1BKblPXijwMtk=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:5f:e2:f3:df:1a:df:ae:df:45:29:ec:be:8b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Nov 5 02:01:16 2026 GMT
Not After : Nov 6 02:01:16 2026 GMT
Subject: CN=4a33b72000631ca822ba4a4c7d1550b21df2138a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:46:9f:6a:d9:cc:79:38:19:af:56:ab:7a:
c6:aa:7c:ec:29:a6:c4:7a:f0:a5:71:b1:83:35:12:
82:71:83:ac:7e:bb:e9:5a:ac:a6:08:ea:df:e9:cd:
d0:45:b6:d9:b3:ec:cc:80:64:2d:7b:8b:30:27:a9:
fe:4e:44:b0:25:12:b4:b5:87:ad:e0:27:98:44:ed:
9c:15:79:e3:7b:c3:e7:c9:2b:72:8d:a7:7b:6a:3e:
cd:c0:ae:ff:70:cd:6c:9e:54:01:bd:ad:c0:53:fc:
f3:21:5e:cb:4e:d1:36:53:4c:9b:27:0c:61:3b:9c:
b8:36:fc:29:40:bc:ad:ee:81:95:3d:6d:3a:50:b9:
dd:d6:42:1e:3e:13:8e:e8:5d:be:3e:95:01:a6:7e:
0e:54:10:38:89:06:5c:e5:b7:2d:1e:4d:aa:27:da:
13:4a:a1:91:bc:bd:09:ec:ad:d0:6d:29:8f:39:ac:
2d:c3:61:8b:cc:e5:cd:50:8a:28:d1:61:4c:6e:a0:
42:74:23:8a:9d:a7:fd:83:45:97:07:1e:d2:8b:67:
0d:88:2d:2d:1f:4c:9c:cc:5d:c9:9d:90:b9:e9:10:
a8:58:d1:c4:49:0d:96:fe:5e:42:08:ab:59:55:55:
9f:b9:e5:29:d1:a6:69:97:96:29:e9:bd:c6:a7:fa:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:B7:20:00:63:1C:A8:22:BA:4A:4C:7D:15:50:B2:1D:F2:13:8A
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:ef:c2:f4:a7:f4:63:a3:70:8b:84:56:29:eb:87:ac:fc:
e0:c5:04:0b:af:15:b6:ae:d0:ad:ae:16:11:eb:2c:62:a4:1a:
4c:49:7b:1b:3e:6a:7b:2d:a3:e4:55:36:0a:73:ef:d2:43:27:
3e:66:c0:33:94:c9:f5:45:e2:ae:ea:34:eb:bb:27:24:b9:2d:
33:00:cb:66:d0:06:90:ed:72:27:ba:0a:6e:b7:ba:6e:d4:a5:
e0:6b:6c:91:86:91:20:4e:0a:da:55:f3:6b:42:9d:c4:b2:18:
a6:15:fc:4b:b4:8f:8f:99:78:28:a2:0b:14:a0:64:f4:35:8f:
66:b4:88:6e:22:0a:f1:d7:38:71:04:5f:69:85:96:4a:28:71:
03:87:11:84:89:6c:c2:f1:34:80:1b:cf:82:0f:c9:31:96:8d:
bc:90:a7:bf:10:b3:4b:80:04:9b:d6:72:71:0f:25:5f:68:97:
69:45:d9:9c:d0:08:6d:e4:e8:4f:30:70:b3:b3:62:84:9a:5b:
99:e8:37:93:8c:82:35:d3:83:ca:96:ee:ce:09:a5:3f:11:b3:
d8:b4:de:47:3e:6c:64:dd:67:74:a6:fc:39:c3:64:e8:65:26:
83:cb:da:d3:88:b1:d6:5c:78:8e:c4:3a:a5:6a:e8:e0:a4:09:
4d:f6:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:36:58 2026 by rpki-client