Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: m1Q3ycDHpo3DXjS5vcYIa3c/LcjbGsclvqY8vih0Be0=
Subject key identifier: C8:D3:C0:12:59:66:0A:DE:00:4B:0F:6C:56:CC:F2:E5:50:6E:C5:59
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019DCED09EAB04031943DD1B9E1B97A0B1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 0414
Signing time: Mon 27 Apr 2026 12:01:11 +0000
Manifest this update: Mon 27 Apr 2026 12:01:11 +0000
Manifest next update: Tue 28 Apr 2026 12:01:11 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: MAb9bDH7Q0EDZtlJa32G8K2puGn+WJBvI7qj9gxBh8A=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:9e:ab:04:03:19:43:dd:1b:9e:1b:97:a0:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Apr 27 12:01:11 2026 GMT
Not After : Apr 28 12:01:11 2026 GMT
Subject: CN=c8d3c01259660ade004b0f6c56ccf2e5506ec559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:71:2d:86:46:5e:3d:8f:dd:ae:6e:c2:d4:
e0:b9:58:8c:e5:b8:f4:d6:7e:b1:de:af:78:15:db:
e8:54:d5:a9:ea:1a:3c:f6:11:4f:be:42:a8:c0:59:
b1:e8:64:de:c3:c0:1d:60:61:19:0a:46:dc:c8:a2:
ce:91:9c:e3:4b:84:bc:46:8d:b2:09:05:79:b5:f0:
2f:20:1b:31:13:ec:ac:df:b7:6c:ea:53:8f:61:d9:
5b:b4:75:c7:05:b3:ed:51:e9:07:a5:a3:27:3e:ec:
1e:8f:78:ab:24:dc:33:12:8b:47:5b:1c:a5:18:33:
43:b1:0e:e3:44:31:64:90:2f:37:36:ec:82:c8:16:
d5:d3:66:88:aa:37:2e:e5:a8:8d:c5:ef:b8:36:73:
cb:e1:ac:ed:68:b8:26:51:6b:09:bb:ae:e8:1f:df:
de:dc:24:22:fd:04:16:61:88:45:a5:a8:42:f6:be:
4e:8d:9c:5d:09:47:d2:11:a4:01:9b:96:73:03:8d:
5c:d1:69:9b:df:3c:a6:d3:43:92:22:3d:91:af:c7:
71:93:8e:3f:a0:d1:cc:28:50:06:03:f6:a8:d0:3c:
23:99:67:0c:be:4e:15:d2:f9:32:2f:70:d9:c5:09:
c4:b8:eb:f0:66:b0:65:23:ca:f4:48:a5:f2:75:3d:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D3:C0:12:59:66:0A:DE:00:4B:0F:6C:56:CC:F2:E5:50:6E:C5:59
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:cf:0a:ff:8c:ee:fe:5a:37:6f:26:eb:08:b2:38:0c:cf:dd:
9e:54:0d:1c:c0:f9:79:36:9e:f1:d7:de:75:2b:91:4b:34:6e:
26:23:d4:45:1e:00:13:1b:6e:08:4c:b6:54:a8:4b:35:6a:8d:
e4:ff:a4:ed:b1:6a:3a:48:9a:a3:b3:a9:a8:b0:12:8f:01:c9:
e4:3c:1f:b9:89:9d:79:8f:05:1b:17:fe:28:0b:b6:b0:16:31:
15:71:63:15:99:b0:81:65:2e:26:05:69:3c:34:3e:e7:da:07:
ab:74:3c:a3:81:3d:9d:2d:3f:03:e6:d9:01:30:b0:4d:56:db:
07:cc:35:19:3c:b8:5e:76:fc:17:5b:e6:53:6a:1d:c6:06:16:
3a:e9:5d:6c:23:e8:6f:94:3d:27:8b:1e:db:ce:44:19:e0:65:
d0:1d:ba:93:4c:d8:a4:96:c5:d7:a7:b3:b0:be:49:4f:e5:63:
4e:9b:af:48:a7:40:ec:b1:f7:46:92:e4:87:69:7f:cc:a1:e0:
d8:0e:48:16:41:d4:f2:8f:c1:e5:45:af:78:9e:da:39:46:df:
31:ed:58:37:6f:d3:38:ec:38:0d:e2:96:47:c6:83:cc:da:47:
ca:f4:85:e8:e9:6d:c7:cc:f8:5b:43:0e:28:8a:a7:cd:e7:1e:
bf:0e:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:10 2026 by rpki-client