Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: Qxl9BjB4lsL3yiDfdVDBN7vpEm1MSQW/pwvvQ7RPniM=
Subject key identifier: 6F:D4:00:45:B5:FC:0B:3D:15:1E:D3:62:8C:12:F2:3B:AD:6D:9F:8D
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019EBA6B9DD4AD9DA5400C59EF638549A0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 048E
Signing time: Fri 12 Jun 2026 06:01:15 +0000
Manifest this update: Fri 12 Jun 2026 06:01:15 +0000
Manifest next update: Sat 13 Jun 2026 06:01:15 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: dCwQ4lUVOol9La+hWcLsk4bYv7Tm4Jcr13V4W5qyX+w=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6b:9d:d4:ad:9d:a5:40:0c:59:ef:63:85:49:a0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Jun 12 06:01:15 2026 GMT
Not After : Jun 13 06:01:15 2026 GMT
Subject: CN=6fd40045b5fc0b3d151ed3628c12f23bad6d9f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:3d:ad:e0:82:3d:3e:04:a2:3b:cd:2e:d9:
b9:0e:9a:58:49:56:02:7d:6f:1b:02:1e:88:7d:79:
7f:47:58:c5:dd:dc:de:c5:c3:72:27:93:12:33:7e:
8b:72:f8:7f:34:87:98:ec:8f:30:03:59:b1:bb:77:
f3:a4:35:89:28:26:37:c1:c3:21:4e:8b:f9:27:33:
25:38:23:df:86:54:68:b0:56:86:53:5a:c1:11:b1:
cc:e7:37:ba:80:56:1e:24:36:d4:6c:bd:6c:c7:f8:
e2:c0:87:47:94:c4:8e:d6:86:61:84:88:e5:83:9d:
40:da:a3:ed:e0:24:bc:fe:2b:13:8d:39:6d:06:85:
33:ea:03:6f:c0:eb:38:d2:36:d0:74:be:9c:23:56:
cf:40:3e:0d:97:7a:df:7b:7e:3f:9c:c0:b8:8a:33:
17:15:a5:31:0f:ee:7a:8f:0c:c3:ea:c0:47:c7:2d:
db:27:6d:26:42:a0:36:5b:c5:df:be:35:e7:7f:e6:
b5:49:87:9f:9c:11:69:7c:45:c6:db:0b:9d:8b:d3:
43:8b:5f:bf:66:65:71:13:f1:65:0c:33:d1:10:fe:
ae:c5:2a:17:55:16:ed:6f:af:cf:0e:76:8b:2a:09:
9d:cd:26:14:84:08:34:45:7f:81:c0:cf:4c:23:01:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:00:45:B5:FC:0B:3D:15:1E:D3:62:8C:12:F2:3B:AD:6D:9F:8D
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6b:67:e6:4d:a5:1b:2a:4c:ae:9f:82:a7:38:cc:d5:fc:99:
70:74:53:ff:9f:a4:a5:d7:57:b8:4f:2b:6a:16:f3:53:47:6d:
f8:63:fb:d7:40:8e:37:11:bb:8e:06:2e:1c:27:f2:c9:bb:7d:
dc:da:51:5a:65:71:95:32:f9:11:ad:19:79:c4:8f:7c:28:ad:
89:8e:b1:22:bc:46:60:ac:12:b1:5b:f5:1e:d8:20:1b:b8:26:
3a:ad:78:c4:83:4a:dd:00:86:c2:f3:d2:4c:b3:d2:93:52:71:
20:4d:51:2e:9e:b7:9a:0a:b7:5c:27:d8:4a:6e:be:c3:c8:93:
07:c1:a4:fa:2d:94:06:1b:ed:c4:6d:ed:f6:01:3c:af:2c:bd:
9f:87:02:18:c8:d3:48:44:6b:70:34:2d:44:2f:89:06:86:e0:
62:71:8a:0a:90:8c:4e:7c:24:84:2d:51:39:62:79:cd:57:53:
66:4c:8f:77:50:05:86:56:a8:a8:1e:d0:1d:83:97:2d:7c:92:
10:f1:5f:6e:5c:b2:a3:9b:e3:30:2f:83:de:d6:40:93:31:8e:
04:39:2a:51:a6:48:ad:ce:35:b6:85:69:77:68:d9:78:a1:d1:
d4:7f:06:c9:3b:b1:88:ad:86:d2:2c:20:61:04:4f:28:6a:f3:
5a:8b:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:17 2026 by rpki-client