Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: n4U1tm3eZ4abdYSLDQ9xtQARFgcQ6e4cCAJsc1Mv7wY=
Subject key identifier: EF:F3:88:5C:CC:C5:8B:20:E7:8A:13:8A:F6:F5:01:89:1D:AD:5A:72
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 019CE47F0E74150243748FAEB16B0315252F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: E8
Signing time: Fri 13 Mar 2026 00:00:57 +0000
Manifest this update: Fri 13 Mar 2026 00:00:57 +0000
Manifest next update: Sat 14 Mar 2026 00:00:57 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: 3OwIMj53pDrRsNh8nK795MceGynLoakbeWliSFAaTM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:0e:74:15:02:43:74:8f:ae:b1:6b:03:15:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: Mar 13 00:00:57 2026 GMT
Not After : Mar 14 00:00:57 2026 GMT
Subject: CN=eff3885cccc58b20e78a138af6f501891dad5a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:87:cf:93:dd:e6:f8:75:31:2e:24:d4:48:
ad:90:61:b6:bc:bc:bf:25:06:78:43:e9:c1:49:ca:
08:b6:f1:2c:8e:77:25:d9:86:86:de:2d:37:b6:56:
d0:f0:2f:18:e3:a9:94:64:81:2c:38:59:f4:0e:3d:
c1:96:6c:72:ad:25:5e:6c:c6:e1:eb:0b:4d:cf:0d:
7f:fa:ff:2c:a9:70:ab:06:cd:cc:e1:b4:81:38:3d:
7f:0d:3e:48:a5:86:1c:17:c7:70:27:37:c8:d3:67:
05:93:5d:6e:b6:d6:53:57:e9:72:12:54:17:b6:fe:
81:16:5c:09:12:a7:68:ee:e6:eb:7c:d7:64:d1:95:
29:24:0f:79:f1:fa:58:6e:4f:95:fb:5f:19:4f:1d:
4e:09:91:3b:c5:96:7c:c8:0a:2a:af:0e:cc:9b:57:
cd:34:aa:87:22:0e:a7:7c:ef:e7:1e:b1:c1:70:05:
a9:31:3f:b9:49:22:a8:33:2a:e7:63:b2:d7:ca:a4:
6d:47:3a:d9:31:01:80:e5:45:aa:b8:99:a0:aa:08:
7f:7d:28:95:ee:a3:63:53:1b:4a:f1:57:e4:10:39:
f1:44:2b:7e:46:17:c6:b2:fe:b0:d3:8a:51:bb:b0:
d9:ca:5e:af:17:d2:c5:8d:00:2f:86:cd:00:9a:ea:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F3:88:5C:CC:C5:8B:20:E7:8A:13:8A:F6:F5:01:89:1D:AD:5A:72
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2f:46:7e:f0:91:70:be:81:ed:25:7c:eb:ff:27:8d:1a:cd:
a0:f2:d9:c5:ef:7f:39:75:ce:b3:0c:8c:7a:83:c9:fb:17:e7:
4b:f4:3e:62:a3:3e:1c:22:b2:88:f4:cf:11:51:3b:f7:ae:fd:
d4:85:af:ba:18:f9:de:ff:2c:27:67:bb:cc:10:db:34:fb:51:
8c:3a:59:c5:2a:2e:6a:15:25:cf:2d:34:89:71:59:26:79:e3:
67:e9:f7:a2:38:81:44:6a:97:7d:cb:ba:75:8a:c7:f8:be:c2:
01:ea:55:3f:30:47:c1:47:08:30:2d:ae:f7:6e:43:4d:b4:00:
73:19:3f:0a:fc:59:a6:ab:78:23:24:54:51:76:3d:f8:8d:ab:
00:d7:16:96:41:d0:f3:0b:e9:75:3e:69:b8:80:97:ef:95:48:
6a:29:5d:3e:d7:f9:44:40:6a:07:ec:b3:97:6a:dd:c1:d3:9c:
64:5f:91:29:0b:6f:1a:8b:94:c2:01:55:58:c0:6a:e4:ce:53:
41:77:c0:54:4c:5d:5b:1c:07:6e:c9:43:88:cf:72:b0:52:e5:
f2:43:f0:ef:29:b1:8f:f5:21:16:4e:da:09:91:06:b5:29:57:
5c:74:53:99:24:9e:b9:38:ac:d2:2e:58:6c:5c:7e:6b:f2:ec:
85:54:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:36 2026 by rpki-client