Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: rVQAbsyIXcmOuKGajcrRQ5RCQOBKbvab77wJkbpLIPY=
Subject key identifier: 00:C8:BA:4C:9B:92:5C:40:2D:EA:B5:65:BF:5E:46:C5:FF:2F:69:AD
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 01A186E3E0C64FD8E1E0691D0DE422836A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 0601
Signing time: Thu 29 Oct 2026 09:00:43 +0000
Manifest this update: Thu 29 Oct 2026 09:00:43 +0000
Manifest next update: Fri 30 Oct 2026 09:00:43 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: Nu5k+kYEtVpvMNGcWst38QElR0Hy9P3mIltrIU7PsVQ=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:e0:c6:4f:d8:e1:e0:69:1d:0d:e4:22:83:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Oct 29 09:00:43 2026 GMT
Not After : Oct 30 09:00:43 2026 GMT
Subject: CN=00c8ba4c9b925c402deab565bf5e46c5ff2f69ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:1b:8f:98:ed:ef:20:f0:fe:7d:4f:ee:bb:
ae:ef:f5:6a:2f:67:80:f7:e3:07:52:99:3c:03:b6:
fc:af:dd:ac:3a:04:25:8a:2c:d6:12:ad:4a:7f:c5:
9d:da:4c:3c:a5:68:bc:a7:9a:93:a3:a4:59:80:ea:
24:8e:c0:9a:8c:b1:dc:ce:71:2b:b8:91:a6:a8:5b:
98:b5:f9:fe:5c:3d:80:0a:b7:fa:57:53:21:79:65:
68:6d:db:93:9a:93:ae:d3:80:bf:63:a3:cf:cf:e2:
b5:7d:ef:39:27:64:40:a0:b1:26:e7:c6:f3:62:1b:
11:a2:9d:59:50:81:ca:18:59:48:5c:e0:05:3a:1b:
df:57:3a:58:d9:6f:8d:63:db:1e:9d:4a:c7:bd:8e:
77:74:b4:e3:79:5f:94:a3:26:d7:6c:f6:47:62:8e:
11:98:91:18:b2:4f:e7:6e:03:f4:85:8e:20:31:66:
6d:99:55:1c:55:37:3a:d3:20:f8:56:40:f9:95:75:
0c:53:3a:d0:85:a5:5d:4b:87:55:06:6a:ce:f8:12:
dd:40:91:22:d4:23:61:e6:0f:c5:2e:fd:ce:80:3f:
e3:13:52:fb:fc:d2:e9:7c:46:1a:03:36:4d:2b:48:
2d:b1:19:87:f2:34:a2:d6:d8:97:3d:dc:2c:92:21:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:BA:4C:9B:92:5C:40:2D:EA:B5:65:BF:5E:46:C5:FF:2F:69:AD
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:ac:c3:30:a5:ec:1d:0b:22:9b:de:c2:8b:4a:7e:42:2f:
10:ab:9d:bb:63:8f:72:2a:84:76:d4:3a:40:8f:b7:6c:7e:f6:
d1:12:c8:5c:fe:b5:51:4c:df:7b:af:ec:f5:c2:b4:41:96:47:
6e:f2:68:71:ca:de:92:92:aa:ce:82:09:a0:55:83:4e:89:02:
27:c2:4b:23:e8:c0:84:bc:4c:b6:ee:70:b6:dd:20:f4:7a:1d:
46:51:7d:a3:ce:c7:be:2d:01:0f:d1:71:b5:ad:4d:2a:9c:5d:
6a:0c:f4:b8:be:27:67:d9:46:f4:6b:b0:2c:bd:a0:55:d3:8a:
91:ff:e3:3f:b5:12:f9:43:32:79:f0:d3:1c:f6:53:03:fb:50:
03:48:81:45:d9:1f:3f:5d:74:31:3f:ec:0c:8d:4c:e1:c8:a6:
c6:08:98:17:99:73:56:75:bd:82:62:df:e7:00:2f:5e:34:87:
17:be:1d:3d:3c:44:65:e1:3b:e7:8c:0e:bc:17:d5:4d:54:b9:
f2:2c:2d:14:08:3d:8f:97:18:b0:d4:a0:54:c5:0a:15:04:34:
da:2e:47:f2:e5:60:81:72:86:78:d4:cd:8e:89:81:13:f6:66:
8a:5a:00:d5:14:99:eb:55:3a:0a:a0:1a:6a:8f:6b:3b:28:11:
28:5d:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:01:35 2026 by rpki-client