Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: tjbcmbibBh+XuOCbSvPyF6KLqPXnud+x9+AC53LnysM=
Subject key identifier: 7A:B9:15:37:F2:9E:34:9E:56:C4:F1:38:45:BF:F2:2C:31:5E:14:28
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019EE4B0EA7B71CB8F7E8D724A1F426ACFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 0200
Signing time: Sat 20 Jun 2026 11:01:00 +0000
Manifest this update: Sat 20 Jun 2026 11:01:00 +0000
Manifest next update: Sun 21 Jun 2026 11:01:00 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: kFlkxxguSbVWFX6tojiZlpeGLStfhqInLNOrPuHvq7E=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:b0:ea:7b:71:cb:8f:7e:8d:72:4a:1f:42:6a:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Jun 20 11:01:00 2026 GMT
Not After : Jun 21 11:01:00 2026 GMT
Subject: CN=7ab91537f29e349e56c4f13845bff22c315e1428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:90:77:9b:3b:31:08:d3:0f:61:ac:3f:66:
df:c8:0d:5e:d7:32:c2:b3:02:5a:d9:bb:97:95:d6:
0f:6a:f6:2e:82:04:7c:8f:c6:6f:ec:94:31:a9:93:
da:24:95:1e:2d:af:f0:77:36:a5:70:ee:5b:b7:3f:
f4:f0:d3:c4:dc:e9:64:48:c6:c8:2d:d9:d4:d2:27:
89:3b:b8:ed:e3:b5:0b:ce:60:99:df:1f:a4:91:27:
32:bb:f8:4d:c0:8e:e6:3a:04:19:ed:c6:a2:cd:dc:
04:78:1c:6b:52:30:28:ca:a1:19:f4:e0:95:6a:97:
0d:39:07:bd:b5:22:41:d7:c2:fb:2a:bf:6b:73:97:
71:3d:72:3a:d5:60:e6:eb:e3:b6:93:df:52:29:41:
a2:90:30:97:34:d2:73:8a:54:a3:b9:69:c5:92:19:
15:08:fe:c3:0d:0e:8c:58:2a:3d:0c:ce:1a:69:8d:
d7:82:92:b5:02:95:f5:42:cd:a8:61:6d:bd:02:bf:
bc:d6:ab:bd:7d:69:2f:04:c4:45:03:9a:bc:df:4f:
de:fb:12:39:91:83:84:83:d5:21:dd:03:f9:7f:9d:
82:5a:ce:0c:0e:1f:9c:3e:65:9b:85:4a:e7:37:75:
2d:8c:97:52:c6:1b:3e:15:bd:08:54:06:30:1c:3c:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:15:37:F2:9E:34:9E:56:C4:F1:38:45:BF:F2:2C:31:5E:14:28
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:80:71:9f:44:cd:55:0f:2e:d3:8f:14:2b:8e:4e:b5:20:
60:5c:1d:a7:f6:ef:a5:eb:2c:2f:5e:1c:4d:a3:d3:7c:f3:fb:
7f:6d:44:c7:d6:7a:4f:1d:64:a6:23:24:07:54:72:80:3c:1d:
79:08:28:f8:26:fc:9c:95:a3:50:91:23:7a:5b:07:4d:e4:64:
84:83:6b:02:83:31:08:0f:f9:b3:72:a3:4f:bf:0d:74:36:69:
97:2e:f0:ad:3b:e5:56:5f:e2:f1:31:9d:44:6f:d9:14:30:dc:
75:09:76:0d:d3:b2:44:67:d7:0a:f6:09:01:3d:51:6d:f3:90:
e1:0c:72:65:d0:f4:c5:c1:2f:68:ec:b4:d1:93:29:a7:06:99:
e1:dc:77:a8:ca:2b:b1:8c:44:d4:f3:91:80:ca:60:1c:5c:8f:
7f:66:0e:d1:5d:84:37:79:06:a9:37:6d:82:94:fc:7d:10:e8:
b0:1f:74:e1:08:b5:89:d0:64:e7:c0:5b:0c:1f:79:1d:d1:24:
a8:e7:be:e5:89:7d:4b:ca:87:92:14:da:ba:9b:3f:64:fe:90:
91:43:9a:f5:5f:b3:e7:38:b7:25:16:7a:32:01:d2:32:2f:eb:
77:d7:1a:97:34:df:a4:3e:98:2d:42:4e:c1:50:ab:cd:6d:ce:
7d:61:32:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ksOp7ccuPfo1ySh9Cas/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTI0NzYyNGEzMDA1YzZmY2Y2NjEyYmFjOTljYWIwNGM2
MDEyNmEwHhcNMjYwNjIwMTEwMTAwWhcNMjYwNjIxMTEwMTAwWjAzMTEwLwYDVQQD
Eyg3YWI5MTUzN2YyOWUzNDllNTZjNGYxMzg0NWJmZjIyYzMxNWUxNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKuQd5s7MQjTD2GsP2bfyA1e1zLC
swJa2buXldYPavYuggR8j8Zv7JQxqZPaJJUeLa/wdzalcO5btz/08NPE3OlkSMbI
LdnU0ieJO7jt47ULzmCZ3x+kkScyu/hNwI7mOgQZ7caizdwEeBxrUjAoyqEZ9OCV
apcNOQe9tSJB18L7Kr9rc5dxPXI61WDm6+O2k99SKUGikDCXNNJzilSjuWnFkhkV
CP7DDQ6MWCo9DM4aaY3XgpK1ApX1Qs2oYW29Ar+81qu9fWkvBMRFA5q830/e+xI5
kYOEg9Uh3QP5f52CWs4MDh+cPmWbhUrnN3UtjJdSxhs+Fb0IVAYwHDzWIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq5FTfynjSeVsTxOEW/8iwxXhQoMB8GA1UdIwQY
MBaAFDwSR2JKMAXG/PZhK6yZyrBMYBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWIt
ZThiZDJkYmE5N2FiLzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWItZThiZDJkYmE5N2Fi
LzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuSAcZ9E
zVUPLtOPFCuOTrUgYFwdp/bvpessL14cTaPTfPP7f21Ex9Z6Tx1kpiMkB1RygDwd
eQgo+Cb8nJWjUJEjelsHTeRkhINrAoMxCA/5s3KjT78NdDZply7wrTvlVl/i8TGd
RG/ZFDDcdQl2DdOyRGfXCvYJAT1RbfOQ4QxyZdD0xcEvaOy00ZMppwaZ4dx3qMor
sYxE1PORgMpgHFyPf2YO0V2EN3kGqTdtgpT8fRDosB904Qi1idBk58BbDB95HdEk
qOe+5Yl9S8qHkhTaups/ZP6QkUOa9V+z5zi3JRZ6MgHSMi/rd9calzTfpD6YLUJO
wVCrzW3OfWEyNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 20 13:36:11 2026 by rpki-client