Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
File: PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft (raw, json)
Hash identifier: dC45iDx5q2VdSrJDs7FW4vGD8s1zBY+jtpVkxBFWwTg=
Subject key identifier: 5E:8A:25:3B:C5:69:7F:FD:F5:AF:5A:53:39:C1:1D:5D:70:D1:3D:56
Authority key identifier: 3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
Certificate issuer: /CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Certificate serial: 01A134EBFA6F7E90A15C963E8000F19E1AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
Manifest number: A2
Signing time: Tue 13 Oct 2026 11:00:42 +0000
Manifest this update: Tue 13 Oct 2026 11:00:42 +0000
Manifest next update: Wed 14 Oct 2026 11:00:42 +0000
Files and hashes: 1: PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl (hash: jfalFOFpZS5oZLbJHu08ioRX+ec3CehpLr5fcjTo2mc=)
2: Vz7oOsxWL7210T9Fifl_kQQeDLM.asa (hash: rZ0F9/DNYOrNZBeOBRWHqVNZeI30ewKMxobqnhcmh7A=)
3: h2ZUA9TwJrpWxOXA3lTyOY9Tw_s.roa (hash: 5SLVRWOGvDLADbtyYHIxEzFzsBdemdaARz1cRFIMQYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:eb:fa:6f:7e:90:a1:5c:96:3e:80:00:f1:9e:1a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Validity
Not Before: Oct 13 11:00:42 2026 GMT
Not After : Oct 14 11:00:42 2026 GMT
Subject: CN=5e8a253bc5697ffdf5af5a5339c11d5d70d13d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:99:44:b9:68:b4:fa:b6:40:c2:05:a1:7a:b3:
6f:a8:08:8e:18:88:a8:a7:57:9a:76:52:56:b1:f5:
74:19:c0:d1:46:59:39:0f:9f:3a:73:42:28:bd:61:
1a:9b:c6:af:58:10:24:b6:b1:f8:dc:11:01:82:83:
e3:e2:6e:b2:00:11:d5:e6:43:ae:a6:2a:53:c5:ec:
e1:fb:95:f3:b0:39:fe:59:04:a6:f1:71:a8:a3:bf:
66:1f:24:a3:55:10:8b:ab:97:64:4e:d2:c6:9e:6a:
09:21:a2:a1:04:51:96:19:f1:c1:b9:1f:aa:a8:b5:
aa:a5:52:f9:8e:1f:c9:0a:14:f2:6f:f8:74:63:88:
27:4f:fa:c4:29:0f:b4:3c:1d:eb:56:8d:dc:53:85:
e4:90:7d:d2:45:4d:16:c5:48:9d:f3:0a:a0:57:63:
82:99:26:e5:bf:6d:7e:39:d7:a3:9b:aa:fb:a9:e2:
47:04:85:17:57:ca:69:89:aa:df:81:c3:d3:6c:eb:
54:46:b4:3f:7e:a8:6e:9d:84:aa:a1:a0:90:b0:cf:
78:0b:27:5b:b7:96:c8:11:29:c6:78:98:00:73:7a:
92:a5:73:03:06:4f:7e:8c:46:4c:1e:08:01:b7:00:
5c:32:61:83:d4:da:18:eb:f6:37:7d:59:83:18:58:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8A:25:3B:C5:69:7F:FD:F5:AF:5A:53:39:C1:1D:5D:70:D1:3D:56
X509v3 Authority Key Identifier:
keyid:3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:46:8f:37:5f:00:11:5c:19:ad:c3:4b:ed:a0:65:9f:2c:21:
e8:07:33:65:ef:e1:aa:1d:94:6d:09:b6:08:e3:04:a8:ba:f4:
6f:b0:c3:31:9b:7c:16:46:d8:a7:1c:73:e9:07:20:f7:8c:40:
0b:4f:c7:02:08:d0:b7:37:25:2c:c1:e4:4b:ad:71:1e:0b:58:
48:18:f8:ed:9a:16:8d:47:00:66:63:82:a2:ee:5f:0c:19:c8:
be:42:eb:4e:7a:fe:be:be:e8:9e:b0:a5:8e:3f:00:b6:8d:1e:
e8:a8:34:ea:88:14:36:1f:08:e4:4a:05:93:23:30:26:4c:59:
a4:c7:f3:78:ad:ad:67:60:a5:e1:e1:35:a1:8b:dd:77:a4:fe:
d5:75:27:72:68:15:b6:aa:f2:11:ea:61:e9:d9:ef:2a:35:43:
76:56:df:38:ec:4d:0c:5a:96:a9:fa:93:c7:83:34:9b:30:eb:
5a:8a:e4:01:04:b5:e1:79:7b:ba:b0:e9:f3:51:af:1c:79:04:
2a:2e:19:f4:01:5b:bb:c8:be:fa:b9:ae:68:19:56:97:65:2d:
bc:29:97:cd:7a:24:fc:86:a4:1b:1c:eb:4d:c2:e7:7f:51:bd:
df:15:55:4c:54:29:80:56:18:0e:68:f4:5e:80:b8:29:5f:ae:
9e:a6:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:44:27 2026 by rpki-client