Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: ZFoS4QlYrMNe3xv89sUAYnvx1nkNr0I0icAYNmE35dI=
Subject key identifier: FC:27:3E:B0:96:D3:98:3D:E4:35:5B:9E:72:B4:E7:32:1B:B9:01:53
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 01A0404DF23AB7DD883D15157307DBE91B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 01B5
Signing time: Wed 26 Aug 2026 23:00:44 +0000
Manifest this update: Wed 26 Aug 2026 23:00:44 +0000
Manifest next update: Thu 27 Aug 2026 23:00:44 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: k7Do8d35ZyDC4Tmu7usdWHoMNXEd3K4xRTLzWUgowiA=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:f2:3a:b7:dd:88:3d:15:15:73:07:db:e9:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Aug 26 23:00:44 2026 GMT
Not After : Aug 27 23:00:44 2026 GMT
Subject: CN=fc273eb096d3983de4355b9e72b4e7321bb90153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:6a:9e:52:e5:b4:f4:03:8e:f9:fd:de:87:
db:9e:af:ed:89:41:b7:2b:b9:d8:3f:ab:71:2b:a8:
98:56:e2:b3:af:cb:8b:9a:b6:18:85:94:1e:cd:bc:
db:9f:95:d4:33:dd:20:e2:48:ff:36:ad:1c:0c:37:
9b:46:44:55:ed:2b:e8:a5:ec:c6:8c:60:6b:df:48:
ab:32:5c:9d:a8:05:5b:b9:4a:8c:a8:7d:56:42:91:
8f:d1:cc:93:4d:c5:34:c2:81:20:47:18:0c:3c:25:
44:31:96:ff:d7:1e:27:a9:f7:af:fa:ad:e1:bf:1c:
d4:58:ae:c2:8d:76:1e:1c:e8:f1:2f:ca:dc:4e:23:
1d:28:be:a4:60:67:3b:f0:9d:5c:bc:57:c9:f5:1c:
39:35:36:b2:58:2c:b6:96:dc:de:d5:c1:76:c3:72:
76:42:62:db:58:44:e5:c7:e8:e7:d4:b3:97:83:27:
53:f1:83:a7:d8:35:ac:0c:9e:66:32:f6:d2:1e:53:
9e:e2:26:8c:17:cc:1e:c9:4f:4f:58:37:ea:e5:4d:
b0:0b:79:d3:fe:72:9a:05:3f:4d:8b:d4:0a:e9:64:
83:68:70:e1:ce:6d:c4:ff:07:31:ee:d4:6c:e0:75:
07:21:fd:8c:3c:ae:b8:a9:95:8c:3f:9a:f5:f5:c9:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:27:3E:B0:96:D3:98:3D:E4:35:5B:9E:72:B4:E7:32:1B:B9:01:53
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b9:9b:a0:f1:8a:96:95:53:4d:f5:24:5e:a0:c5:e7:f9:38:
77:e8:ff:84:ed:db:9b:6e:be:22:db:94:fa:17:8d:b9:e9:19:
67:7e:ab:9b:94:34:c2:71:eb:c5:d0:7a:08:c7:f8:9f:85:7b:
39:d5:16:39:89:1a:b0:38:4b:ea:e0:78:64:03:28:c3:b3:9f:
62:d7:d8:cb:67:ec:72:6d:5e:79:32:38:89:98:7a:12:49:66:
09:e0:18:04:4f:10:34:75:ed:12:6f:ce:3e:7a:d4:28:f8:d9:
89:d2:e2:06:d9:7b:d1:fa:dd:31:76:3b:33:30:ae:40:93:c0:
61:75:90:eb:46:7a:ba:43:32:4d:9d:81:f7:a7:21:4d:c6:32:
9f:d3:58:3f:a9:ed:97:27:4c:73:3e:5c:b7:83:f1:1f:08:b6:
c9:02:8a:9c:84:ae:7a:f3:b1:5f:16:85:7b:00:2d:c4:84:3f:
72:6d:22:14:5f:47:a4:2e:fc:e6:74:04:63:98:22:3f:82:88:
f1:45:27:9b:f9:ca:b1:c3:d5:63:1f:f3:0c:9a:fd:66:2e:8d:
e7:14:9b:39:43:55:0c:4d:38:ec:99:93:0b:14:af:fe:ac:21:
15:d9:bb:3c:62:5b:27:e1:78:1d:fe:ae:eb:e0:cd:5f:d4:f5:
28:a5:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 01:46:47 2026 by rpki-client