Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: 1tMxui5uY6JX9GZWo1IukIZhE57G6shlSrZeBw1g8ns=
Subject key identifier: 68:85:D6:89:A6:0F:F2:88:7F:53:DD:DC:3F:15:D3:FB:B5:1E:C3:46
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 01A145DFDAABAD6FC232CD546446CF4938BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 05BC
Signing time: Fri 16 Oct 2026 18:01:00 +0000
Manifest this update: Fri 16 Oct 2026 18:01:00 +0000
Manifest next update: Sat 17 Oct 2026 18:01:00 +0000
Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=)
2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: 63ETURR135s/CW1QJjl09bXO4pTwJFCL2/b/Jz3oXak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:df:da:ab:ad:6f:c2:32:cd:54:64:46:cf:49:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Oct 16 18:01:00 2026 GMT
Not After : Oct 17 18:01:00 2026 GMT
Subject: CN=6885d689a60ff2887f53dddc3f15d3fbb51ec346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:dc:f9:14:53:39:9d:d8:97:6a:d2:7b:c7:
7b:75:ce:cb:22:15:30:09:79:1d:a8:19:8b:f4:9b:
6c:08:c5:91:30:b5:ed:5a:ee:94:2b:a1:44:30:ac:
78:00:0a:05:cf:d8:d1:40:e4:fb:fd:40:8a:10:ce:
08:1e:7b:98:1e:92:90:61:e3:f0:67:e7:c0:8c:f8:
16:95:d3:18:e4:71:16:9e:36:63:5d:77:3d:63:bc:
0e:5a:4d:00:17:04:85:72:7b:6e:8d:f5:55:dd:76:
56:d3:a1:8d:ab:74:97:4e:04:59:a5:c9:ca:48:be:
ca:9d:8f:e5:ab:2c:cf:c5:d6:7a:7a:ba:36:c9:eb:
39:87:5c:92:89:29:b6:46:05:8e:d6:54:d3:1e:e1:
49:30:14:6c:56:9b:96:70:dc:bf:d8:c9:6d:63:51:
b4:a4:f5:12:4b:38:bd:69:a9:23:04:26:e1:8c:c5:
9a:99:c8:ed:75:70:61:8a:96:d8:53:83:d9:cf:3b:
5c:90:68:ad:13:68:e5:86:71:02:d4:55:d6:28:08:
18:d9:3c:f1:58:47:87:5c:37:54:57:b4:b2:da:a7:
5c:a9:ef:48:14:d8:02:ec:7d:71:49:50:90:f2:4e:
d5:37:8f:8c:2e:ac:16:05:1d:ae:bd:20:96:b5:92:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:D6:89:A6:0F:F2:88:7F:53:DD:DC:3F:15:D3:FB:B5:1E:C3:46
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fc:c3:00:9e:52:fa:d9:d9:ad:b3:1e:2e:53:00:ae:08:f2:
60:e1:dc:31:fc:91:f2:d7:7a:4e:d8:37:89:5c:9f:3f:70:7a:
71:0d:03:e9:22:8b:79:5f:a1:3b:fe:64:4e:96:ea:a0:c8:90:
3a:b8:a6:a6:39:ea:c2:58:13:ab:29:3b:a8:93:a9:89:e7:50:
08:22:b5:06:26:ac:8a:ec:8e:b1:0c:fa:28:61:76:ff:49:31:
77:78:d2:9f:ac:bb:e8:ae:59:2b:56:dd:9e:b9:f9:03:66:c2:
0b:2e:97:52:72:13:74:8c:4c:ed:2e:b5:fe:3b:2c:62:3c:3e:
ce:9c:5b:61:46:5d:b2:49:80:76:c1:eb:dc:5e:44:af:5b:c0:
5d:3a:c8:d3:3a:a8:81:2c:3c:ef:f1:f9:53:06:8a:b3:8d:7f:
79:36:45:5d:93:4b:31:84:40:cc:22:ec:d2:80:d9:f9:11:2d:
32:37:9e:16:65:7f:8a:5d:70:95:97:35:7a:e1:58:a7:66:82:
dd:bd:15:23:b2:31:5f:79:20:40:ee:47:a4:74:ae:6b:88:63:
c4:bc:eb:5d:bc:f8:30:21:42:9b:6a:5b:75:b9:49:6f:ad:44:
53:df:cb:e2:ac:57:89:c9:83:2d:8a:63:51:ce:25:63:a9:4a:
7b:c5:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:31:26 2026 by rpki-client