Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: +xeYJ3pFQ6BjtXml7A+ewQEj025AXMvaXyXH6uTyuk4=
Subject key identifier: 89:17:4C:00:4B:DB:70:E7:A9:EC:CA:15:0F:9F:7F:A6:CF:36:55:5C
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 019CE0A1B4B09640A698474EDD5BBEE5CB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0C11
Signing time: Thu 12 Mar 2026 06:00:19 +0000
Manifest this update: Thu 12 Mar 2026 06:00:19 +0000
Manifest next update: Fri 13 Mar 2026 06:00:19 +0000
Files and hashes: 1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: /9kG8nCjdMAYkZhDCha2F0irscAU59OdjN2O1bb+sAA=)
3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e0:a1:b4:b0:96:40:a6:98:47:4e:dd:5b:be:e5:cb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Mar 12 06:00:19 2026 GMT
Not After : Mar 13 06:00:19 2026 GMT
Subject: CN=89174c004bdb70e7a9ecca150f9f7fa6cf36555c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:52:df:9c:c9:03:a4:bf:5e:b3:1a:7e:44:
c0:48:7c:f5:56:41:1c:1c:89:28:0f:c3:b0:9e:21:
1e:68:37:7a:9e:dc:51:fd:ad:0b:9f:09:52:83:50:
36:54:0c:80:b7:bd:bc:d5:cf:ab:c0:3b:33:88:2f:
94:e2:29:ef:6e:0c:4c:30:90:a3:9b:80:0f:00:ad:
2a:ca:90:91:22:bb:c9:96:80:da:79:a5:5e:c3:72:
83:00:6b:b6:7c:ba:08:89:fa:03:3d:9d:4b:55:3a:
f8:35:8b:e9:33:9e:a8:26:e8:18:60:94:7f:23:24:
3f:5e:f1:40:05:f0:36:98:ab:ac:24:64:88:6f:d9:
5d:87:17:cc:27:84:09:1c:64:c6:4a:df:f0:44:9e:
66:a1:e1:59:5f:8f:2b:88:70:86:4f:b2:1e:e6:6d:
53:b6:24:dc:89:c1:09:98:fa:55:98:a2:91:54:8a:
59:95:56:cb:9f:ef:e9:34:06:a3:67:48:df:59:35:
61:76:4f:f2:f1:b6:ab:58:92:56:48:c3:fb:e9:d0:
c8:b9:bc:b6:97:2c:10:6c:b9:9a:5e:e0:2c:35:80:
4e:2b:19:82:c7:96:a0:fb:95:7d:8d:76:79:04:44:
8b:bf:48:eb:78:d0:55:62:fc:7d:ce:36:a7:ba:73:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:4C:00:4B:DB:70:E7:A9:EC:CA:15:0F:9F:7F:A6:CF:36:55:5C
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f6:0a:7f:62:9d:58:b3:dd:ab:14:12:5c:a7:80:4b:32:54:
26:5b:27:38:f6:bc:e0:56:9a:9a:44:b6:58:7d:c5:1f:5a:b4:
5b:97:86:ef:80:53:b0:1d:08:ae:c1:75:3d:e4:d6:0e:70:f8:
58:10:c8:97:29:09:fd:3d:85:43:9e:05:9d:2e:1c:c8:af:9c:
b2:cb:58:5c:1e:a7:54:b4:a4:ff:df:75:87:05:90:ca:45:a0:
d4:0c:c5:5e:e2:fe:db:28:38:09:37:df:46:56:3e:4d:69:fe:
e9:1b:7f:24:1f:3a:74:74:92:55:30:f2:0c:cb:fb:c1:d0:f6:
83:a8:1d:3f:07:ad:d2:83:1f:91:a5:2c:65:7e:c0:84:d4:d5:
31:d8:77:9d:d8:25:be:67:7f:53:be:af:1d:c1:3e:75:c5:d7:
0c:2d:20:6d:8a:14:b2:51:4b:e5:83:2b:22:60:10:0b:ae:d5:
fe:0e:2f:4a:4f:e1:12:79:ec:52:fb:dd:ff:13:c4:df:90:66:
08:62:19:97:70:ff:e6:c2:a1:bb:69:8b:46:c3:c3:4a:ba:39:
53:e5:51:14:7d:5e:a7:95:6e:2a:c9:57:74:a3:31:7d:b5:52:
c7:23:e6:9c:9f:64:31:ae:d3:fc:b1:de:88:7b:79:5b:7a:d8:
d1:3d:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:12:26 2026 by rpki-client