Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: 6XgfC8m0uyhMo0LDvBaQKYMzlSXrE0+SocCDdhFrHo0=
Subject key identifier: AA:4E:68:B8:FF:4B:90:9A:C1:EB:B1:30:A7:A4:EA:70:53:6E:DF:75
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019CE7127F4AC2FFC1899E330A05E251720D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 039C
Signing time: Fri 13 Mar 2026 12:01:14 +0000
Manifest this update: Fri 13 Mar 2026 12:01:14 +0000
Manifest next update: Sat 14 Mar 2026 12:01:14 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: RB3wf9U2DlWSvJUzdzUZUcoDqmpFohoESM3IrEh1R18=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:7f:4a:c2:ff:c1:89:9e:33:0a:05:e2:51:72:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Mar 13 12:01:14 2026 GMT
Not After : Mar 14 12:01:14 2026 GMT
Subject: CN=aa4e68b8ff4b909ac1ebb130a7a4ea70536edf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:8b:66:af:03:1e:ea:aa:da:01:44:42:45:
21:a9:22:32:d2:5e:5c:94:39:3d:a3:35:7c:72:c3:
d3:06:62:8d:5f:0a:4f:89:0c:68:fb:81:cb:da:8b:
ae:f9:db:91:77:fc:b0:a9:d4:af:60:6f:64:39:d8:
a3:3c:8a:18:5f:06:13:b0:84:9e:c2:7b:ff:b0:0f:
3f:cc:dc:af:b1:71:90:e2:f1:64:ff:a6:71:20:70:
cf:ea:56:30:5b:a3:4a:f3:30:70:48:72:30:53:48:
4f:50:fe:e8:29:0a:4f:9a:87:a4:e5:54:18:67:a4:
02:09:64:a2:c7:a9:f7:76:16:a8:4a:cc:9f:5f:e3:
f1:47:2a:b6:ea:85:a7:31:57:f3:3e:56:86:78:7c:
55:4f:34:ad:54:e6:ad:48:7e:a1:96:25:c6:25:1b:
ad:90:3a:2a:f6:22:a4:e6:f5:16:f4:17:d3:dc:49:
0f:7f:3f:d8:7b:5f:07:0f:90:42:9e:f5:44:4e:4d:
12:28:2f:44:9c:32:b6:8b:40:45:3e:9f:b7:85:97:
db:e9:5f:82:8a:52:00:5b:58:55:a6:4c:6e:54:ee:
27:ef:71:64:ee:61:c9:61:22:b2:5f:8e:90:ff:02:
7a:18:cb:93:82:29:f4:4b:7d:cf:e3:6b:aa:17:c9:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:68:B8:FF:4B:90:9A:C1:EB:B1:30:A7:A4:EA:70:53:6E:DF:75
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:2d:3e:f6:9a:4b:51:78:20:2d:98:4a:3b:e6:c0:8f:61:
8b:3b:b4:4a:8f:2c:dd:1c:5b:e3:92:2b:7c:14:ef:ab:00:d8:
db:63:1f:f5:63:96:f6:76:8f:ec:d4:43:46:44:4b:48:50:89:
1b:01:d6:c9:f8:0e:72:9e:31:5a:d2:cb:be:41:26:7d:ed:9d:
93:26:1e:56:96:3e:72:50:2d:57:89:63:a4:93:a1:58:bb:59:
2b:57:0e:5d:88:12:25:38:8b:f6:3e:bd:54:4c:e0:7f:c7:5f:
0c:e1:99:b7:cd:49:c1:3d:aa:93:af:84:1a:cf:3b:7d:81:ca:
ec:1b:81:ce:2a:30:6e:f1:a2:a5:4e:c4:65:7c:b7:27:ec:9b:
b0:b2:5d:77:4a:ac:97:79:88:ea:a3:59:24:ae:2b:05:aa:9e:
de:2d:72:82:75:3f:a2:d3:98:08:49:53:02:b7:b5:74:43:2b:
88:83:9a:d6:24:28:2e:bd:54:03:9b:96:6c:cd:d3:de:da:fd:
07:a9:4e:c5:32:4c:31:41:9b:7b:64:ba:35:a2:58:61:06:22:
58:c6:62:d2:0e:5b:f5:fb:7d:a8:79:fd:03:03:39:7a:f4:1c:
4f:0e:b9:57:ed:fd:bb:73:a1:15:9f:1c:84:1d:fc:1c:5c:d6:
64:c3:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:50:04 2026 by rpki-client