Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: yiLWK8zTPEmgEwOXjfbckFVQzxmvAYHhgEF+F0GTptA=
Subject key identifier: D0:0F:E3:E4:F1:1B:A6:A7:A9:89:7A:0D:01:9C:9D:BF:DC:C3:B5:62
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 019DCE2BF6121134497DB14A07CBD49ACB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: 0161
Signing time: Mon 27 Apr 2026 09:01:20 +0000
Manifest this update: Mon 27 Apr 2026 09:01:20 +0000
Manifest next update: Tue 28 Apr 2026 09:01:20 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: oC36saVJnz74sHMpuuaiv6FgsJX9SGfv2rhoG2VPhfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:f6:12:11:34:49:7d:b1:4a:07:cb:d4:9a:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: Apr 27 09:01:20 2026 GMT
Not After : Apr 28 09:01:20 2026 GMT
Subject: CN=d00fe3e4f11ba6a7a9897a0d019c9dbfdcc3b562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:88:32:95:ce:d8:ea:f3:12:af:75:62:71:
84:db:18:d8:26:3a:a6:fa:ce:00:d2:64:99:52:f3:
53:23:46:2f:69:01:46:ef:87:53:02:68:d9:82:a3:
7c:2d:16:f7:83:f4:44:ba:48:66:f7:8f:e6:eb:04:
08:58:7c:8a:65:9a:09:92:10:c6:13:96:8c:14:aa:
9a:11:c7:a3:09:6d:e8:ec:f3:eb:2c:3e:ed:8f:2a:
fa:da:4f:f1:24:cb:a9:9d:2f:86:45:bf:41:be:a2:
ef:94:bf:b8:c8:9e:6b:27:12:d8:36:95:54:99:e1:
07:cd:05:27:6a:52:bf:7f:fb:e6:67:41:85:c9:05:
c9:08:08:25:c9:30:3b:b0:ec:d4:a8:22:e2:2a:99:
c9:09:b9:23:aa:f7:06:e9:41:32:78:44:e4:96:9c:
ea:33:3d:2f:d4:21:95:cd:b3:f2:a1:d7:6f:f0:02:
45:8e:fc:e7:90:49:f8:e6:08:2a:2b:67:b4:a2:0b:
88:a6:de:56:85:25:a1:6d:16:d8:88:b9:61:d2:18:
c3:42:3b:66:3e:d3:e3:cb:25:03:e6:b7:ae:a6:42:
d2:8a:ad:68:f6:94:1b:14:b1:03:56:d8:42:e2:b6:
49:92:3f:ca:31:ed:f5:8e:90:94:8e:9a:6e:29:e7:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:E3:E4:F1:1B:A6:A7:A9:89:7A:0D:01:9C:9D:BF:DC:C3:B5:62
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:34:51:72:ad:ea:57:59:c4:16:23:b5:a9:45:16:b4:a2:
8a:31:b7:28:75:b0:77:b7:b6:5d:e3:dd:17:24:06:d6:b3:9c:
98:cd:87:03:51:e9:55:08:54:4b:77:5e:e0:f9:6f:ff:73:29:
ca:74:ad:51:6b:96:09:94:31:4c:ee:cb:71:3a:65:3a:5b:42:
cf:17:1c:05:5a:01:ca:04:a2:67:23:24:c3:75:c7:46:68:52:
38:ec:f9:90:96:aa:3e:37:c8:c4:c2:6a:d6:4a:fb:e5:d8:97:
5d:9a:fd:f8:89:f1:c3:e5:b9:7c:8b:94:c4:a5:e7:4e:9c:66:
b4:d8:94:44:a4:c6:53:cf:9d:b7:7b:fe:f5:bc:bd:2d:0a:fd:
f8:45:94:9b:24:d6:cf:f3:df:3d:32:e9:f4:36:89:df:8a:61:
92:63:16:e6:9c:15:37:03:b7:5f:82:ac:e5:94:3b:c8:28:d3:
b5:fa:c6:24:88:ee:10:e1:40:e9:94:34:87:24:88:6a:21:9e:
30:ee:08:1c:89:98:1a:03:a1:b0:38:e6:58:86:33:c0:09:c6:
a1:c2:c1:b4:52:75:bb:8f:39:6f:a6:1b:8a:29:af:48:40:87:
0d:e9:64:40:a9:df:d3:c7:bc:22:61:91:5a:da:2c:2a:fe:04:
f8:41:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:26 2026 by rpki-client