Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: sOkqHiSbF9krKvMYeeMm21ojdpxdOdD03axznekkEWE=
Subject key identifier: 50:31:AC:DD:DB:71:87:54:D2:2D:99:67:A9:5C:41:CB:AD:69:BD:2F
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 01A090FC52F35EB15FB6A3149F7FF60CA3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: 02CF
Signing time: Fri 11 Sep 2026 15:00:50 +0000
Manifest this update: Fri 11 Sep 2026 15:00:50 +0000
Manifest next update: Sat 12 Sep 2026 15:00:50 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: Fp+ksmeDZBh80SaGP5SGPnciYh+l0g5sHOkdXrBtDT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:fc:52:f3:5e:b1:5f:b6:a3:14:9f:7f:f6:0c:a3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: Sep 11 15:00:50 2026 GMT
Not After : Sep 12 15:00:50 2026 GMT
Subject: CN=5031acdddb718754d22d9967a95c41cbad69bd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:b5:27:12:4f:6b:18:36:3a:b9:c3:20:d4:
a3:24:64:b7:61:80:87:db:22:41:fb:ca:71:84:90:
90:9a:9b:60:8e:85:a4:d3:ff:5b:26:bd:db:1c:0e:
f4:0b:6e:3e:c3:a1:b7:35:e0:0d:7d:f8:ad:84:e3:
d7:96:72:00:3a:d8:21:94:78:86:60:53:f7:6b:06:
85:95:a1:b0:b0:6d:28:c2:c3:76:a1:37:61:96:04:
d5:c7:dd:0f:2c:48:6d:5d:b4:44:71:5e:d0:36:49:
b7:19:d7:e7:c9:2e:6e:4c:86:60:f7:14:f0:6a:ef:
24:76:90:87:d1:a8:b9:7f:64:c8:f6:c6:0f:45:3b:
7a:45:e6:2c:44:52:41:af:a4:cd:a7:72:54:d6:ba:
16:fc:6f:3d:47:ea:4b:57:32:ae:72:fb:dc:22:2d:
60:34:5d:86:42:4f:08:62:8f:59:b6:b8:76:61:50:
63:6a:42:b7:eb:2c:f5:2b:27:26:5d:e4:15:82:f1:
72:a7:1b:09:b3:3a:8c:bc:27:9a:6e:4d:4f:7c:a3:
f7:c5:3a:d2:71:59:43:9c:bf:3e:70:3f:ac:ae:b6:
52:79:61:ce:6e:fe:c1:98:c4:39:74:d0:af:c4:a1:
25:eb:3c:d7:54:9d:d2:1f:72:9f:d3:f5:a9:e3:d4:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:AC:DD:DB:71:87:54:D2:2D:99:67:A9:5C:41:CB:AD:69:BD:2F
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e4:07:10:1e:d2:b0:16:53:6d:45:98:06:5e:b2:8a:a1:dc:
e7:43:4f:ce:09:51:ca:45:5a:cb:53:45:16:76:80:86:bf:38:
d0:02:aa:ff:8a:a8:38:c2:d1:71:13:76:80:36:cd:90:16:be:
68:44:94:e6:ed:de:a9:90:8b:5a:1c:be:63:3e:b3:3e:2a:8b:
88:90:62:3f:55:4a:15:5d:c7:62:bc:fb:2a:f9:3d:e7:94:54:
5e:e5:19:f2:08:dd:38:4c:77:a6:0e:6e:23:85:f0:fb:0d:15:
1e:2b:c0:1f:7a:0e:40:6d:fd:96:3f:b3:09:db:08:2d:b9:82:
68:8a:14:80:1a:fa:a7:32:75:85:e0:31:7b:44:e3:3e:23:93:
26:67:92:11:76:93:37:95:4d:85:cc:a8:f9:0b:cc:1e:a7:59:
06:cf:1d:25:30:6e:66:81:60:f5:a4:1b:e9:fe:ed:d5:17:c4:
f2:2c:1c:04:89:81:01:f5:e5:e0:7d:da:1e:3f:0f:a9:9c:ee:
d4:15:57:7e:7c:52:86:7a:51:74:3d:32:95:4e:6a:98:9c:d8:
3a:12:18:3b:76:46:6a:d1:eb:c7:d0:10:a8:ac:b6:a5:af:a1:
78:08:09:10:08:a6:6e:b1:3d:df:46:9f:dd:fe:b5:b7:43:ee:
c1:a1:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:55:51 2026 by rpki-client