Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: pCuVjL9gENF9zGj+C3eVFDOqzTa9upm3I3NgzGuUWIU=
Subject key identifier: A8:C7:03:B3:86:42:B9:C0:C3:55:63:C8:A5:4A:4B:D2:7C:32:35:1C
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 01A0016F38DD63F7F99FC2F90278976F8688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 0514
Signing time: Fri 14 Aug 2026 18:01:01 +0000
Manifest this update: Fri 14 Aug 2026 18:01:01 +0000
Manifest next update: Sat 15 Aug 2026 18:01:01 +0000
Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=)
2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: 7/zwQKZtqK0jP+XWmHjw2MMS0VlKENw7BzzM2KT4ROY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:38:dd:63:f7:f9:9f:c2:f9:02:78:97:6f:86:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Aug 14 18:01:01 2026 GMT
Not After : Aug 15 18:01:01 2026 GMT
Subject: CN=a8c703b38642b9c0c35563c8a54a4bd27c32351c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:e3:7e:47:69:97:1f:4e:c9:60:73:87:ea:
5e:4a:8a:a7:38:5e:7a:05:78:0a:17:9d:4a:f4:b0:
fe:a1:02:3b:8b:e9:1b:a8:18:17:8f:06:c7:3f:46:
03:d2:ae:82:56:a1:43:6b:e7:18:13:0e:32:af:94:
92:a8:67:59:7b:a0:c2:4c:d7:b9:16:a4:a5:86:b7:
5e:41:52:69:61:01:9a:40:c8:fd:a2:d3:4a:10:af:
ef:e0:28:74:31:28:30:78:51:5d:87:2c:12:42:c8:
d2:cc:b3:e7:52:2e:cb:36:62:6e:56:32:be:6f:31:
48:d3:7e:fd:73:26:fd:ec:ff:d9:c7:c4:3f:55:24:
5b:5b:96:13:17:86:92:ea:22:5a:5d:57:33:83:99:
f9:30:32:7a:67:dc:6b:29:12:6b:49:6c:79:89:d2:
a2:2d:93:1e:11:2c:15:72:3a:8b:e3:f1:77:1b:6b:
ac:bd:33:99:ef:4d:4e:9a:10:71:b5:08:e3:26:12:
ed:ab:dd:29:c1:2a:0c:18:53:33:5c:ea:ea:e7:5b:
bf:c1:1a:8b:4f:8c:99:51:31:09:86:72:c9:1b:3d:
db:67:68:b4:bc:63:05:7f:09:e6:e7:a1:35:fa:17:
d6:eb:23:77:f9:2a:bd:54:c3:ae:59:d0:3a:3b:e6:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C7:03:B3:86:42:B9:C0:C3:55:63:C8:A5:4A:4B:D2:7C:32:35:1C
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7d:31:f9:13:16:7b:7f:2c:fb:a5:f8:10:ff:7b:c0:4a:0e:
8e:f2:b6:f4:78:67:5e:ef:12:48:6c:8f:8f:af:fa:b4:2e:52:
a9:47:cd:2b:b6:f9:19:8b:11:2a:52:f4:c8:fa:18:a3:2f:f0:
7b:d5:17:3e:e8:f8:ec:60:be:ac:60:6b:83:83:5e:95:b3:6e:
68:21:8d:de:72:33:9d:4a:c6:a1:d0:81:3c:75:65:b8:2c:62:
d8:0c:78:27:96:43:a5:b5:a1:22:8c:cb:42:23:48:42:7c:49:
a9:e1:31:7d:64:0b:d6:90:5d:40:30:da:da:a2:3c:62:8b:49:
30:07:b4:e3:b8:ba:15:53:36:a2:07:4b:05:d8:a4:6b:97:5f:
f1:c2:fa:64:f9:56:14:7f:89:be:c7:f6:3f:43:60:59:0b:03:
ce:5e:d1:79:c1:14:a4:c5:11:ae:af:0a:00:cb:03:17:e5:88:
62:9a:86:78:b6:1c:35:ae:ae:76:bc:ea:28:a6:3e:9c:d0:b4:
53:b5:fc:94:d1:35:3a:4a:40:5c:0a:83:23:6f:77:18:dd:bb:
f2:97:a5:77:c3:6d:a5:0f:cd:8f:ba:a0:12:7b:ff:e2:4d:6c:
9e:ec:b1:f6:7b:08:82:9e:d7:81:a3:64:83:ca:14:82:bb:00:
89:ba:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:35:13 2026 by rpki-client