Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: t0H+MafbPtNqdpARvyTlP9ihvzqz1IUtQ8yfsEo9M1Y=
Subject key identifier: E5:B8:56:A4:A4:FF:97:05:F5:DE:94:90:4B:E2:2C:39:08:39:3B:12
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019FA2294DF5536CBD25C08AB0E45D6BC4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 0506
Signing time: Mon 27 Jul 2026 06:00:43 +0000
Manifest this update: Mon 27 Jul 2026 06:00:43 +0000
Manifest next update: Tue 28 Jul 2026 06:00:43 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: somq9azUTDerMZRXDtPfKcmXqWgdOqmGB/egpzE9uz8=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:4d:f5:53:6c:bd:25:c0:8a:b0:e4:5d:6b:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Jul 27 06:00:43 2026 GMT
Not After : Jul 28 06:00:43 2026 GMT
Subject: CN=e5b856a4a4ff9705f5de94904be22c3908393b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:40:54:3c:d1:b9:4c:f8:fa:59:16:73:ff:
80:49:46:54:ab:10:96:c3:97:db:3d:8a:f1:4e:5f:
a8:82:14:98:8c:30:c1:5b:42:13:01:d9:a9:42:2e:
25:b6:a2:9b:b8:ec:d3:8d:64:72:c4:e9:5a:ec:08:
d5:f5:a1:e9:67:bb:0b:0f:58:6b:8b:f0:fc:cf:14:
c2:7f:d2:70:8e:cc:2b:b9:a6:bb:5b:9a:fc:e4:39:
ad:aa:01:70:27:f8:e9:5e:a2:a6:de:44:e6:e8:3e:
09:24:58:80:0e:e2:e4:81:71:04:28:38:9a:93:c5:
0e:93:44:2e:58:c6:d3:b8:74:9b:92:c5:27:97:49:
9d:85:b6:50:64:5a:be:97:ca:49:c9:ac:72:1f:a5:
4e:f6:a0:a9:40:05:cb:e8:56:32:86:58:65:23:29:
dc:64:ba:cb:c9:5b:4e:50:ba:fe:c6:4e:89:bf:11:
4c:50:ac:a1:62:3c:6f:4e:8d:f4:19:7a:12:89:c8:
b2:db:95:10:89:c0:b6:76:63:15:6b:b0:4d:4a:1b:
e0:e7:6f:53:8e:20:3d:75:8b:5a:cf:c8:f8:da:91:
52:97:36:d1:03:60:2f:f5:9b:04:4f:f4:65:33:da:
3f:e2:b8:40:25:5f:e6:d9:f1:6a:42:da:20:52:73:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B8:56:A4:A4:FF:97:05:F5:DE:94:90:4B:E2:2C:39:08:39:3B:12
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:95:be:b5:f3:5a:13:55:18:f3:d3:59:17:93:3c:10:ce:81:
95:0f:a1:5e:c8:13:2a:71:1c:2e:84:83:21:88:69:aa:0e:91:
62:ff:9a:92:2d:76:90:dd:4b:67:3f:96:c7:c9:73:42:40:ca:
1f:6c:c6:24:d4:9a:3b:d7:ca:40:78:05:29:d2:42:1b:26:f5:
b3:ec:e6:2d:88:45:51:9f:bc:ee:3e:17:7d:12:0b:fb:cf:12:
ee:ec:c6:59:50:47:9b:ca:9f:05:d4:21:aa:7c:67:c5:a9:26:
ab:20:62:65:2b:dc:fd:a5:88:3f:65:c4:6c:11:6c:ac:86:ec:
15:33:73:ca:f2:76:f4:af:c6:f9:d7:98:9d:d6:dd:c0:d0:99:
f3:8f:ba:3f:96:01:30:77:ca:16:fd:cc:d8:ab:f4:91:78:d6:
79:b2:ed:c3:a5:e6:6f:f4:b4:a6:d8:59:9d:22:9a:da:86:00:
fd:47:a9:93:fa:77:04:ad:4f:e4:c0:98:df:95:a9:39:92:d1:
4e:23:8f:de:0a:e4:be:95:ca:15:e5:52:36:5e:12:b9:ac:69:
25:4f:70:47:ff:d1:7f:7c:af:5e:aa:69:5e:45:be:ef:c6:ed:
2b:a7:3c:40:12:06:36:56:44:d9:a7:a8:19:9b:e2:43:86:cd:
86:f6:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:35:22 2026 by rpki-client