Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: L39hYZSWqhrR6Buhl1ZjTzIwDec4d8LpUpW2+W+otKk=
Subject key identifier: FA:0F:5F:AD:7C:8E:DE:FA:C4:D1:C6:69:7F:B9:E6:37:34:CE:B4:8F
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 01A08DC48B3BB79A1E244AB013F2B06DFA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 0580
Signing time: Fri 11 Sep 2026 00:01:03 +0000
Manifest this update: Fri 11 Sep 2026 00:01:03 +0000
Manifest next update: Sat 12 Sep 2026 00:01:03 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: 7wsCBegsuuv7FTPTaWVtvjB4imFF+HKOWrC7/4Yd0Iw=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:8b:3b:b7:9a:1e:24:4a:b0:13:f2:b0:6d:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Sep 11 00:01:03 2026 GMT
Not After : Sep 12 00:01:03 2026 GMT
Subject: CN=fa0f5fad7c8edefac4d1c6697fb9e63734ceb48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:a7:c6:d9:9c:4e:77:80:c2:b5:c7:87:25:
36:b8:4c:fb:42:f5:0e:b4:da:3a:6f:f9:ef:2b:ba:
d5:d9:62:fe:85:d3:19:57:6e:ea:cf:98:8c:a8:e7:
5f:cd:05:bf:90:82:85:f9:45:9f:a2:ff:fc:17:9e:
15:96:ca:2c:3d:f7:dd:db:3b:74:e8:ea:3f:55:55:
28:87:31:da:94:76:c9:56:a1:2f:be:52:73:48:7e:
a8:49:31:83:3b:d3:a6:a0:24:a4:01:0f:1f:1d:c8:
a8:07:e6:34:f2:6b:84:10:42:5a:07:44:79:e5:25:
44:3e:c4:f0:19:c3:2d:cc:b0:13:14:f0:aa:9f:56:
2a:32:04:aa:ae:fb:bf:d1:67:f4:22:c2:dd:37:80:
73:c9:e1:b7:ea:3b:da:ab:35:12:8c:c0:69:06:54:
19:d0:da:db:20:e7:c1:7c:4a:bd:8a:b5:ce:01:db:
c3:30:2b:33:c9:29:65:47:88:17:f3:fe:14:ac:7c:
9c:d0:24:3f:25:db:a2:63:b4:54:6d:55:dd:a2:c2:
54:35:29:ad:c8:57:de:92:f6:94:5b:ff:2a:02:cd:
63:4a:3b:68:2c:f3:cc:bb:75:a2:5d:91:86:1d:e3:
32:62:6f:30:82:43:4b:71:7b:d8:79:a9:d6:d9:7e:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:5F:AD:7C:8E:DE:FA:C4:D1:C6:69:7F:B9:E6:37:34:CE:B4:8F
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8b:47:b3:8a:7f:75:45:35:bc:bd:1a:4d:af:34:5a:7d:47:
9f:50:55:20:91:89:a3:c0:75:e3:ba:79:ca:0f:82:f2:7f:fa:
c6:cd:f2:15:bd:48:a4:df:1d:8f:ce:60:1a:52:2b:30:41:9e:
11:dd:3b:6a:c0:f5:85:ff:e3:4e:ed:e2:cb:47:b3:69:d5:b6:
3a:ad:07:5e:fc:a0:4a:36:fb:8e:32:00:7a:0f:9d:ba:d5:4b:
14:5f:f4:d5:85:1c:1b:a7:ab:f4:38:bf:24:a0:5d:41:5c:5d:
74:1a:5c:d7:98:64:11:bb:7d:1b:c7:c4:bf:32:80:72:f9:b9:
ee:ba:57:43:14:7c:22:28:9a:c0:bd:11:14:4a:57:ac:f8:2a:
00:09:c0:b1:38:e5:23:4f:6d:93:45:b3:bd:bc:91:c3:80:2e:
16:fb:bb:3a:9d:f7:82:41:9e:0f:1f:f6:76:12:c5:4f:f5:0e:
3a:e6:0a:18:87:83:89:95:3c:18:4d:dd:65:b0:b7:cd:6a:02:
6b:82:62:42:ba:05:ba:b4:de:87:1a:9d:b2:f5:cb:87:e2:c3:
87:f3:97:46:73:39:d2:ae:9b:38:5d:d2:3d:2a:d0:19:db:75:
7d:bf:b3:8a:04:1c:7d:f5:60:06:45:db:61:39:f3:d5:1c:d5:
da:b8:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:04:56 2026 by rpki-client