Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: 1Mij4FOh/8K3moprsOnNkuavFws/XjBkUqj0CtUsqmw=
Subject key identifier: CA:24:7E:85:37:0C:83:E9:EB:78:93:41:F8:0B:F1:89:63:E0:AD:9C
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019EB5B30BEF2A2705655982F5DD1F724DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 1063
Signing time: Thu 11 Jun 2026 08:01:10 +0000
Manifest this update: Thu 11 Jun 2026 08:01:10 +0000
Manifest next update: Fri 12 Jun 2026 08:01:10 +0000
Files and hashes: 1: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (hash: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik=)
2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: BIRW5c6dKaIeL4kXNnzR/RtIwFyg+42wlv4Fa7qRcsU=)
3: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (hash: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo=)
4: unkGkB8qp1620UotFb6yhd6x1oU.roa (hash: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b3:0b:ef:2a:27:05:65:59:82:f5:dd:1f:72:4d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Jun 11 08:01:10 2026 GMT
Not After : Jun 12 08:01:10 2026 GMT
Subject: CN=ca247e85370c83e9eb789341f80bf18963e0ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:b4:9b:f1:cb:44:fc:a0:e7:08:c5:df:e4:
1c:2c:14:ba:13:c5:7d:52:14:12:3d:d4:d8:cc:07:
c5:06:89:93:98:5d:b4:20:8a:6e:dd:ab:71:8a:64:
2f:f3:86:d1:5a:1c:cd:df:d4:9a:f8:14:cc:e0:74:
01:d2:df:f7:56:fb:f2:18:4f:91:f0:99:8e:e5:e5:
e8:06:b2:e4:64:ea:55:64:df:f4:07:ac:67:00:f6:
0a:21:ad:cd:cc:85:05:ee:8d:79:c3:7c:f5:2f:ec:
c6:40:6d:65:c7:91:a9:ed:9a:00:ff:88:5b:1f:7b:
c3:93:b3:5a:b1:b3:eb:74:4b:80:39:63:51:2f:d0:
cd:c7:b3:87:4f:a4:46:f6:c4:63:f7:38:bd:4e:b7:
30:fe:46:ac:2f:9a:07:b6:46:e1:e2:51:51:ee:da:
0d:bf:74:e2:c8:a9:ac:56:1f:35:20:4b:d6:29:82:
6d:b2:94:66:69:6d:c7:ef:65:c5:3d:33:c5:ab:5b:
5c:c4:31:59:74:c0:31:5a:68:d4:f8:27:60:64:e9:
e9:6d:ba:42:46:85:4d:13:d8:13:32:1d:6e:1a:9a:
c8:2c:10:a2:5f:35:b8:7a:0a:85:6c:84:ba:9f:42:
28:e6:b2:a1:27:15:4b:8d:ee:21:6c:25:8b:fe:22:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:7E:85:37:0C:83:E9:EB:78:93:41:F8:0B:F1:89:63:E0:AD:9C
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:05:eb:80:53:56:02:e4:05:31:f4:d5:14:e5:93:2d:c1:b3:
57:57:d2:c8:26:87:f8:00:d7:5b:7c:ac:ec:f9:e0:e7:c1:51:
d0:43:b2:f7:23:84:f4:f6:14:8a:84:a7:b1:3f:2c:0c:f2:b0:
53:65:df:26:f0:cd:a6:ab:52:f6:a9:92:e4:ca:bc:3f:b2:c9:
d8:cb:04:66:64:d4:4c:27:1d:56:68:a1:d4:e5:7c:65:d7:3e:
fb:22:17:b9:00:05:2c:68:76:7c:ad:06:c3:1f:f9:99:77:5a:
6d:3d:5f:72:61:fd:1f:64:56:21:ed:17:3e:6e:c0:d8:69:11:
73:29:f5:44:0c:7d:f3:32:d6:ba:34:38:fa:1c:d0:3d:ed:e6:
4a:6c:5c:13:fa:75:ed:3f:d1:a7:b4:8f:43:2b:f5:b0:f2:db:
37:51:7c:48:86:f5:1b:ff:ea:23:3a:1e:de:44:4b:05:4d:a3:
99:ae:dc:67:3f:3a:60:b8:ef:7c:a5:2d:95:10:ec:ac:ae:00:
7c:12:6c:53:2b:41:74:33:96:5c:dd:73:b0:f0:1e:20:8a:43:
c1:fe:57:19:51:cb:72:47:6c:10:4e:fb:e8:67:30:ac:76:f7:
a0:c0:08:f2:20:d7:e3:0b:b1:54:e3:a7:d0:7a:77:ba:c5:6f:
6c:48:1f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:52 2026 by rpki-client