Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier: vPKXPoM63BmqFGRXfqvnbOCKRNdxsuiarhfkwgfxA04=
Subject key identifier: C0:97:BE:55:27:E3:46:D3:28:F3:41:3D:A5:F3:EE:79:13:3D:73:71
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 019CE334E922AFB9C4534A4810E4D82CDEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number: 0532
Signing time: Thu 12 Mar 2026 18:00:21 +0000
Manifest this update: Thu 12 Mar 2026 18:00:21 +0000
Manifest next update: Fri 13 Mar 2026 18:00:21 +0000
Files and hashes: 1: 9zHlW6xfmyURsAXTYq0PK9oPUEA.roa (hash: CPYRyV7yCkjWy3aVUIMVZcjIfqBkbNBK6TsEp1SL/Vk=)
2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: zE47+a1gGusSAHZBmpE056MwxKemaJf19qH8mK4iy6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:34:e9:22:af:b9:c4:53:4a:48:10:e4:d8:2c:de:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: Mar 12 18:00:21 2026 GMT
Not After : Mar 13 18:00:21 2026 GMT
Subject: CN=c097be5527e346d328f3413da5f3ee79133d7371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ca:ce:44:bf:09:5a:8b:de:c2:a2:03:ab:f3:
08:dc:de:5b:b4:89:da:23:f0:52:00:bc:00:a7:41:
c6:ca:d2:6e:2f:fc:e3:48:de:24:42:12:15:c2:0d:
73:7d:6b:1e:55:6a:74:73:06:6f:9c:ee:20:7e:97:
93:f8:35:b5:8b:21:6f:cf:81:b6:a6:b2:e7:5e:d4:
f7:ef:5f:ee:95:cd:71:13:b3:17:a3:0a:97:44:89:
52:49:bb:ca:a6:2f:c8:13:c1:b4:a8:68:71:d1:90:
20:43:a0:9e:5f:4a:60:4a:8b:af:8f:c7:38:a4:72:
02:b2:1a:17:48:87:25:81:72:ef:26:37:a6:66:89:
15:98:a6:12:cc:c3:7e:16:6d:d9:87:3f:00:bf:40:
22:6e:fa:31:66:08:e3:d1:05:9f:0c:84:b6:f3:d0:
da:2f:61:95:cc:23:4b:c3:be:f6:39:17:b8:a4:b8:
47:b1:f9:da:02:cb:51:b0:c0:c2:54:69:67:51:b2:
a5:66:ef:e4:77:22:73:3c:cc:28:93:80:63:2d:6e:
f6:1e:83:b7:fd:3d:e5:e5:59:ab:95:4f:d4:8c:9c:
cb:4d:92:9b:85:20:47:92:59:7b:14:85:ef:e3:7f:
fa:7a:b6:d5:1a:88:0d:f0:2e:72:cb:6c:5a:9f:8a:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:BE:55:27:E3:46:D3:28:F3:41:3D:A5:F3:EE:79:13:3D:73:71
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f3:ab:e3:c6:19:eb:cc:44:b8:1f:53:bb:7b:65:02:b7:bd:
5f:78:c0:1d:28:4f:7c:a7:21:55:3e:cd:67:e0:f3:27:89:e8:
ca:30:c7:4e:c3:b0:36:72:95:47:1f:09:7d:f8:42:f9:6f:2f:
13:27:01:3a:e6:74:1d:21:4d:fd:01:67:4b:29:c3:66:0f:71:
78:c7:66:52:f0:dc:67:04:61:0d:f2:29:db:d4:f0:c1:31:ea:
53:fb:a4:55:2e:bc:86:ea:12:b5:7b:bc:52:46:3d:93:41:69:
b9:d3:0c:28:a2:4d:70:44:de:e2:38:c4:a2:e9:dc:e9:d0:4f:
c0:5d:da:a6:09:81:1c:3e:33:5a:8b:fd:dd:a9:83:10:37:60:
88:90:02:2b:00:87:08:73:01:e2:36:ec:d1:a2:44:8c:5d:6d:
ab:8e:0c:d6:96:92:31:1d:6b:3a:e9:61:c6:62:e0:a8:45:b5:
ee:9a:31:62:e2:b2:a8:7c:2c:f1:b6:00:67:f7:bb:eb:6c:7c:
59:09:94:2b:0a:aa:cf:9f:6d:3d:d1:3c:c7:2d:77:ba:7f:b5:
c6:b7:b3:78:b4:92:4e:60:fe:3b:2b:34:2d:b0:b5:b3:bc:14:
c4:b0:c5:7a:62:32:b1:26:33:1c:ae:4d:de:9c:0d:50:99:bb:
7b:eb:c3:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjNOkir7nEU0pIEOTYLN7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj
NTU0OWIwHhcNMjYwMzEyMTgwMDIxWhcNMjYwMzEzMTgwMDIxWjAzMTEwLwYDVQQD
EyhjMDk3YmU1NTI3ZTM0NmQzMjhmMzQxM2RhNWYzZWU3OTEzM2Q3MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8srORL8JWovewqIDq/MI3N5btIna
I/BSALwAp0HGytJuL/zjSN4kQhIVwg1zfWseVWp0cwZvnO4gfpeT+DW1iyFvz4G2
prLnXtT371/ulc1xE7MXowqXRIlSSbvKpi/IE8G0qGhx0ZAgQ6CeX0pgSouvj8c4
pHICshoXSIclgXLvJjemZokVmKYSzMN+Fm3Zhz8Av0AibvoxZgjj0QWfDIS289Da
L2GVzCNLw772ORe4pLhHsfnaAstRsMDCVGlnUbKlZu/kdyJzPMwok4BjLW72HoO3
/T3l5VmrlU/UjJzLTZKbhSBHkll7FIXv43/6erbVGogN8C5yy2xan4pCRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCXvlUn40bTKPNBPaXz7nkTPXNxMB8GA1UdIwQY
MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt
ZjFjNmJmMWU0YmE3LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3
LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvOr48YZ
68xEuB9Tu3tlAre9X3jAHShPfKchVT7NZ+DzJ4noyjDHTsOwNnKVRx8JffhC+W8v
EycBOuZ0HSFN/QFnSynDZg9xeMdmUvDcZwRhDfIp29TwwTHqU/ukVS68huoStXu8
UkY9k0FpudMMKKJNcETe4jjEounc6dBPwF3apgmBHD4zWov93amDEDdgiJACKwCH
CHMB4jbs0aJEjF1tq44M1paSMR1rOulhxmLgqEW17poxYuKyqHws8bYAZ/e762x8
WQmUKwqqz59tPdE8xy13un+1xrezeLSSTmD+Oys0LbC1s7wUxLDFemIysSYzHK5N
3pwNUJm7e+vDYA==
-----END CERTIFICATE-----
Generated at Thu Mar 12 20:41:03 2026 by rpki-client