Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier: PVwzf1u3pGl402+VQY0EPB5iUk/RkQPYejjt7PShMso=
Subject key identifier: 33:CC:BF:FF:A2:3B:67:49:EC:FD:BC:95:7F:84:04:B6:DE:4B:05:B4
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 019EB98F950193A7EED463961CC39B23225E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number: 0626
Signing time: Fri 12 Jun 2026 02:00:55 +0000
Manifest this update: Fri 12 Jun 2026 02:00:55 +0000
Manifest next update: Sat 13 Jun 2026 02:00:55 +0000
Files and hashes: 1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: 2hKnfW4Vp1j5om62BtTTfJzft3R8t+xF62lv4PRBomQ=)
2: X9x54sAG8w3l-mHNMKHxAPO9ltI.roa (hash: xlwxDru5yEZFAMpF66c13VJUz7UoYnf6iZAymM3Fcv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:95:01:93:a7:ee:d4:63:96:1c:c3:9b:23:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: Jun 12 02:00:55 2026 GMT
Not After : Jun 13 02:00:55 2026 GMT
Subject: CN=33ccbfffa23b6749ecfdbc957f8404b6de4b05b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:77:ce:89:5e:24:54:11:3f:20:c6:46:92:
a2:f0:86:cf:08:a5:ec:3a:75:1d:53:cb:aa:94:ae:
c5:60:33:c6:0a:bd:1f:80:f1:58:a9:25:74:c2:e0:
73:d9:03:e2:d5:04:38:04:7a:bf:8e:85:3c:98:91:
42:01:46:91:6a:3b:f1:75:1c:dd:09:14:33:76:80:
b2:77:62:b6:83:41:48:ee:72:6a:d1:5d:17:74:6e:
4e:2e:ae:b2:5f:91:ca:fb:d8:c0:62:ad:71:d5:88:
0d:b5:b9:f1:b6:e8:d3:34:8e:d1:ff:c5:52:83:40:
8a:aa:c9:2f:06:5e:97:74:c0:f9:2e:12:ab:3e:68:
c4:f6:8e:94:07:da:95:12:ce:a2:85:eb:4d:7e:d3:
8b:61:d1:e8:b9:76:32:2d:a5:61:9c:09:59:63:0f:
fc:6b:8f:55:34:27:f3:33:ab:e5:5b:96:8f:af:7f:
c1:3d:44:2a:ac:89:5d:a4:49:2a:09:aa:03:91:f7:
70:b0:13:93:4c:00:3c:b4:53:0f:98:4a:db:10:6b:
2b:62:9d:5b:19:af:6a:a2:f6:08:85:43:c6:3b:b6:
5f:4c:e8:17:03:36:f7:c5:d3:54:19:f1:aa:14:6d:
df:f0:ca:f8:dd:40:cf:40:05:55:30:f9:1e:b4:b6:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CC:BF:FF:A2:3B:67:49:EC:FD:BC:95:7F:84:04:B6:DE:4B:05:B4
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:85:05:41:5d:a9:02:61:73:be:9e:21:ac:28:b4:87:cb:f5:
54:a2:01:06:29:63:bc:19:65:00:63:82:69:05:46:6a:2c:bd:
c9:97:5d:07:94:97:25:d0:a4:a5:91:35:28:a0:45:2c:a1:81:
79:60:64:11:c4:f3:84:16:f7:c1:a7:47:b6:e6:87:41:d0:1a:
b2:55:8d:b6:df:5c:86:5c:c0:a1:ba:81:01:18:98:62:d4:97:
83:a6:2b:d7:83:13:7d:90:da:72:59:ee:81:cf:56:d3:87:59:
0a:85:b0:4d:3e:26:d4:66:ad:59:2d:c7:06:e1:17:80:a3:5d:
5e:37:64:25:9f:ad:0e:ca:fa:09:9a:8b:f9:ff:48:84:48:4f:
fe:26:84:56:47:95:98:5d:f9:cc:4e:0b:76:61:30:f6:7b:a9:
d4:33:56:4f:b0:c5:5f:ce:20:2a:85:68:bf:c5:b6:7b:7b:f2:
ec:89:2c:2a:8d:73:f5:a9:d7:94:d9:3a:16:4c:a7:e7:6d:33:
14:3f:93:85:52:62:9f:87:ea:4a:20:35:bd:50:80:1e:5f:9e:
e7:a0:0c:98:18:be:b4:37:78:c5:ef:6f:11:78:c1:38:6f:4b:
ef:d1:92:86:04:d8:68:4f:7e:28:c5:5a:7c:83:3a:2f:24:1a:
54:f6:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:16:09 2026 by rpki-client