Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
File: PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft (raw, json)
Hash identifier: iP/oA1KiJg5ImDzyfbeZ2U9jMtTwzDcrQFSSp9kUUEk=
Subject key identifier: C0:62:EB:9E:CE:74:53:C2:70:FE:8C:FC:06:90:16:AC:38:CE:13:98
Authority key identifier: 3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
Certificate issuer: /CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Certificate serial: 01A136DA61F04F8831922BC190870943176E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
Manifest number: A3
Signing time: Tue 13 Oct 2026 20:00:43 +0000
Manifest this update: Tue 13 Oct 2026 20:00:43 +0000
Manifest next update: Wed 14 Oct 2026 20:00:43 +0000
Files and hashes: 1: PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl (hash: fHa3gphzPrjJqleQ45fS9nWFcl0sFXoxmpuT3BLzFcw=)
2: Vz7oOsxWL7210T9Fifl_kQQeDLM.asa (hash: rZ0F9/DNYOrNZBeOBRWHqVNZeI30ewKMxobqnhcmh7A=)
3: h2ZUA9TwJrpWxOXA3lTyOY9Tw_s.roa (hash: 5SLVRWOGvDLADbtyYHIxEzFzsBdemdaARz1cRFIMQYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:61:f0:4f:88:31:92:2b:c1:90:87:09:43:17:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Validity
Not Before: Oct 13 20:00:43 2026 GMT
Not After : Oct 14 20:00:43 2026 GMT
Subject: CN=c062eb9ece7453c270fe8cfc069016ac38ce1398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:19:2e:98:aa:23:05:cc:79:87:65:6b:22:
bf:bb:d7:93:0f:ea:23:0b:ac:59:ca:16:a3:69:56:
52:4c:3d:d9:2d:2d:f5:c9:ac:b6:d9:b5:56:24:f7:
51:f2:ab:29:a5:73:ab:a8:e3:4b:bf:a1:e3:a4:36:
c9:06:fc:f6:37:65:a0:10:bd:e7:ce:83:4d:69:99:
25:ad:48:b1:30:d8:44:57:f8:d0:8d:9a:9d:4d:86:
7e:7b:47:03:6c:13:20:18:cf:b8:46:3f:96:0e:2b:
c7:6a:ff:01:21:1e:1a:76:29:df:f9:25:67:78:0f:
c5:a8:30:1d:33:a5:95:bd:b0:da:d7:e5:03:a7:3d:
ff:b2:45:27:93:4b:94:67:52:a3:e9:05:d5:d5:91:
dd:c3:4c:7a:77:07:ce:43:4a:d6:67:77:99:f7:ad:
1e:1a:fe:15:c6:12:e6:d9:3c:b6:7c:47:59:ba:08:
09:91:1a:db:af:c6:74:75:88:fc:62:ee:04:a9:6f:
ca:f7:7a:2f:3a:ec:a5:46:2e:80:96:9d:ed:5d:33:
9f:dd:67:68:1e:c6:24:ac:06:82:23:62:5f:d1:12:
f4:e3:fa:91:b0:ec:ec:e2:79:90:75:88:68:a9:ae:
86:b8:88:d8:70:69:76:2f:5f:ea:93:64:84:9c:fa:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:62:EB:9E:CE:74:53:C2:70:FE:8C:FC:06:90:16:AC:38:CE:13:98
X509v3 Authority Key Identifier:
keyid:3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e5:dd:c6:3d:07:7a:6e:78:04:0a:04:a7:91:7e:1c:03:67:
df:d3:e6:a8:60:f0:88:71:bf:51:e8:a2:34:67:0c:65:1d:dd:
c8:b0:b3:50:0c:e7:09:e0:0d:a4:84:c3:3a:44:65:7d:7c:49:
5d:55:ca:c3:73:5c:bd:c1:ed:68:61:e8:3e:33:19:94:e9:e3:
34:a9:c5:e1:7e:59:39:6c:d8:eb:8c:fe:a9:fb:31:61:a5:8c:
3e:1f:4c:7d:7f:b1:02:97:d4:fc:3c:2c:22:51:5e:82:5e:1e:
2d:c4:49:61:70:5c:8b:06:af:d1:4f:a3:51:6f:db:e1:10:98:
f5:db:07:43:e1:fd:03:57:d0:27:ee:03:02:23:06:67:30:98:
8f:7f:08:75:01:d3:32:e1:60:fa:f7:86:92:c4:02:bb:30:21:
2c:88:ce:ab:cd:a9:97:13:4d:bd:7f:08:c7:93:ea:f5:c3:c8:
d8:b8:17:1c:01:2f:09:b0:33:d0:81:b2:ef:78:3f:b1:91:7a:
bd:f3:f6:a7:74:e8:ce:73:b0:01:b3:c4:00:a2:41:06:b7:5d:
c3:92:b8:6c:a5:47:f7:16:9f:25:44:c4:91:7b:40:a7:b0:d5:
83:34:38:86:ca:6e:ce:0b:90:3e:99:f5:19:b8:ec:82:90:8b:
81:b9:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:15:28 2026 by rpki-client