Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: brHx5cfwer7mJvZOBMCgRWkXvLdWf3IOxjKBHDQ0swo=
Subject key identifier: 6A:57:D5:19:92:43:75:24:34:37:B5:97:A1:6A:2E:4A:51:87:40:24
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 019D394110E14B79173ED626C7DF25B03AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 11:00:58 +0000
Manifest this update: Sun 29 Mar 2026 11:00:58 +0000
Manifest next update: Mon 30 Mar 2026 11:00:58 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: 8gZi2Os6kzCjeBOYNjpUEYegGypByiAeY6Tvlgr5qp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:10:e1:4b:79:17:3e:d6:26:c7:df:25:b0:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Mar 29 11:00:58 2026 GMT
Not After : Mar 30 11:00:58 2026 GMT
Subject: CN=6a57d519924375243437b597a16a2e4a51874024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:fd:15:3a:49:76:19:ba:39:6b:f7:8e:ce:
76:7f:1c:6d:c6:c9:87:d6:10:d2:75:62:f9:c1:4c:
8d:12:7b:26:b7:b2:6a:fc:87:f8:6d:55:fc:19:d2:
ce:91:eb:80:11:78:88:7f:9c:d3:b6:8f:e5:7b:e9:
44:b8:c7:b3:ea:b5:fb:3b:29:80:e0:c3:4a:45:33:
94:5b:83:52:a6:77:90:92:75:8c:c4:7b:af:95:15:
d2:1e:c1:b2:d2:1e:22:71:ae:af:aa:01:4a:a9:71:
06:aa:c2:31:44:b8:3b:df:b2:e2:1c:e1:68:29:5e:
a4:dc:08:bd:3a:ce:05:af:67:77:33:62:5d:de:5c:
72:a0:e8:89:26:16:29:31:0b:8d:27:0b:46:cf:36:
9a:23:46:5b:48:ec:62:6a:83:dd:7f:dd:98:a9:fa:
3f:12:e7:48:bf:b4:08:ad:25:9a:4d:15:7b:05:77:
2c:9d:f7:66:73:21:4c:c5:03:96:fd:7e:aa:d9:3e:
0d:b3:6f:65:0d:86:40:ce:ea:9f:7e:fc:3a:2d:ca:
4e:1b:a3:e0:9a:05:30:c3:40:b6:64:3c:4a:47:36:
36:c2:84:8d:99:d0:73:b8:63:8a:98:08:a5:39:fc:
6c:8e:b8:81:29:46:98:46:43:ed:d8:20:98:60:0d:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:D5:19:92:43:75:24:34:37:B5:97:A1:6A:2E:4A:51:87:40:24
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a8:5a:ab:ea:ac:86:86:b6:c7:88:b9:1b:3c:1c:a8:ac:94:
02:30:6e:16:83:8b:81:1b:4a:3a:53:2a:16:6b:9b:1b:29:9b:
02:f5:f5:3a:5a:d4:57:fc:fa:25:45:6c:4c:8a:74:aa:59:30:
af:2d:1b:f3:00:36:eb:1e:51:db:77:2d:2f:5b:43:a3:a9:36:
78:9a:8f:f3:36:20:c1:71:a4:be:78:bd:dc:be:c1:af:23:bc:
8a:13:c4:b4:f8:60:84:fd:bd:95:64:93:2e:e2:11:7a:4f:51:
c1:70:62:56:60:d9:80:11:6d:e9:de:56:ab:db:a1:23:b2:0e:
d7:c5:62:d2:3f:5c:d3:08:8a:c5:a4:a5:68:7c:af:5f:79:f5:
49:0d:8f:69:6c:db:b3:07:b1:c7:4f:c5:5b:d2:eb:e2:76:2e:
20:04:72:69:a2:72:75:1a:2f:06:4a:0d:0d:c9:6b:28:6c:35:
08:71:b9:c3:76:1c:23:3b:fc:05:df:5a:0d:60:75:01:15:c6:
c6:7e:c5:6b:01:3b:47:0f:24:f9:ef:12:37:9d:00:37:c4:09:
aa:34:81:ef:30:4a:c6:d2:a7:63:18:13:a2:dd:46:76:b8:e9:
5b:d8:09:9c:d1:1f:d8:d0:ac:0f:4e:58:20:b4:89:e3:14:fa:
a2:78:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:09 2026 by rpki-client