Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: 3913raUAKmFYdO25JEB1gdTQqQpMQrQlOPcMtUl+wsk=
Subject key identifier: 77:EA:72:97:35:3A:B7:30:5A:19:63:52:EC:88:92:F2:16:04:12:8D
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019D389C465B0A8190B8FD189E6684FC81D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0C89
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: PVUQHWWPK2bap6jQUtxa3F1e4nd8q7UaQuSuJUv+Oto=)
2: c6e2woPNB04ZsyBinFv698qVT4o.roa (hash: +z15BNM7prrFn2O9ay18qeSx+nY/lsQt2tceRY1CHk4=)
3: kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa (hash: woEwD4aK5vmEAsvtUFsMtH0Vvs264WAeMxmjqmjfCh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:46:5b:0a:81:90:b8:fd:18:9e:66:84:fc:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=77ea7297353ab7305a196352ec8892f21604128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d7:76:5c:3e:d4:a8:e6:69:9d:cd:14:77:3f:
ea:85:5b:c0:f2:bc:3b:5b:8b:5d:c6:eb:0a:5d:b2:
44:7a:37:a8:c8:c0:9e:69:ae:78:9c:25:e8:9d:2c:
87:d2:dd:f7:9b:23:84:f6:ca:ed:04:60:db:d3:f3:
a1:aa:07:98:d5:87:a1:c0:31:78:79:3b:bf:8c:6f:
3d:3c:b3:d6:be:f9:7c:ba:ac:77:6c:17:29:74:70:
f9:b1:82:34:43:df:f3:10:fc:6a:ac:68:a1:6c:fc:
51:49:c8:24:62:e8:f6:be:b6:d6:8d:3f:1b:6e:1e:
a1:b3:ed:79:51:f0:29:cb:11:d3:5a:e0:0f:9c:00:
b6:b1:09:9f:81:bc:50:ee:b3:19:a1:2e:0b:88:f8:
94:b0:a7:71:c7:ec:83:bf:a1:e2:2a:0b:d0:da:66:
71:ab:f6:3c:11:8e:85:ba:58:a1:23:df:92:a7:ad:
e6:67:c0:e8:3d:fd:5b:7d:32:e3:b8:35:6a:ea:1d:
b5:77:ce:ed:ad:e8:e4:f8:42:93:e1:e0:be:5f:fa:
66:db:b5:7d:0d:35:23:87:0b:a9:95:8b:55:15:bf:
f7:50:b5:54:8e:de:45:25:18:4d:ff:2a:7d:8c:e6:
38:ff:11:f3:78:be:e0:ef:24:b0:42:30:30:df:64:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:72:97:35:3A:B7:30:5A:19:63:52:EC:88:92:F2:16:04:12:8D
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:b5:a3:cb:47:ac:0b:30:6d:80:fa:00:ac:09:dd:83:bb:
6f:19:d9:77:76:cc:2a:c8:1e:72:e9:c3:ca:8e:88:75:06:c4:
fe:d3:21:c4:c4:ef:3b:c3:1a:60:48:54:6e:4e:10:4a:93:d3:
13:48:4d:9b:51:ba:1d:68:15:43:0f:2a:75:d8:49:8e:dd:ba:
d8:82:91:8c:12:93:eb:0a:af:b0:4c:16:d5:44:6e:92:fc:3c:
0a:26:b3:7b:40:7c:cb:4d:ba:79:28:7a:ba:e4:54:65:b2:23:
8d:f0:bd:03:ab:da:c4:83:40:ed:bb:39:39:93:94:42:b5:70:
2e:52:66:7b:cb:2a:ff:c3:e8:d4:5f:4c:d7:b3:5e:c0:5d:4c:
3a:71:a3:b0:52:6c:7b:68:b4:eb:d6:bb:35:fc:2d:d2:1b:cc:
62:fe:fd:a4:83:70:a7:98:13:d5:d9:d9:6b:dd:f5:c0:60:0b:
d0:26:b6:e7:9e:d7:c1:1e:2f:29:c2:32:14:e1:e9:65:aa:d0:
44:d7:3d:6b:0b:d4:12:ad:a9:98:cc:15:53:c0:57:8b:50:32:
e5:70:1d:72:35:71:4b:6b:0c:ec:a4:e1:1d:44:52:c6:96:43:
a3:68:4b:23:f3:26:15:c6:80:b9:51:cb:6c:45:8a:71:7e:44:
50:e7:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client