Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: 2y3UivMqBJj5PEmduT3ytdpCr+M4z7DSoLc/eHE97VE=
Subject key identifier: 40:79:F7:19:B5:6C:A4:B8:08:E3:AE:76:F3:48:EF:F9:FA:EA:5E:EC
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019D0D7B2A201B9663A65E1CAAE250F87DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 010C
Signing time: Fri 20 Mar 2026 23:01:08 +0000
Manifest this update: Fri 20 Mar 2026 23:01:08 +0000
Manifest next update: Sat 21 Mar 2026 23:01:08 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: yiWKaYmUJnt4hr0LSp7OaDSipWcbJWMFdqmvIsnnGlA=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:7b:2a:20:1b:96:63:a6:5e:1c:aa:e2:50:f8:7d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Mar 20 23:01:08 2026 GMT
Not After : Mar 21 23:01:08 2026 GMT
Subject: CN=4079f719b56ca4b808e3ae76f348eff9faea5eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:58:9e:7c:05:e6:ba:c8:e0:db:91:dc:bb:
e8:64:8f:9d:86:78:c6:7a:e0:93:4d:2f:ea:41:13:
87:ea:d8:4d:f7:87:ac:d8:74:95:f7:82:c2:18:ba:
d8:63:9e:4f:bc:0d:85:7b:08:6e:b6:4d:20:28:d4:
48:cf:72:b8:c7:e7:72:59:9e:31:8e:7f:00:68:4b:
7f:77:57:e2:64:05:45:a7:23:44:93:77:f1:54:e7:
2c:ed:2b:6c:38:23:18:99:d2:17:10:29:6f:c4:9e:
c5:b8:a5:37:56:72:8e:ca:1e:e6:ba:9f:fc:9a:02:
43:d3:98:d4:fb:f9:a7:7a:40:a6:3c:02:49:33:33:
50:a4:53:27:b3:d5:2f:8b:45:23:43:16:6d:5e:be:
4a:1e:e8:f4:00:88:ee:c5:1d:13:fe:4f:28:9d:aa:
34:6c:ec:74:e9:d3:89:ce:ee:9e:e3:50:e6:dc:f3:
2c:92:71:cf:9f:59:1c:3f:f3:dd:6b:93:18:cd:85:
ec:8f:22:4a:e6:67:a4:bb:4f:76:2b:b1:39:2b:84:
f5:1e:18:07:21:34:44:c9:e0:7c:42:3f:60:09:b7:
19:3e:43:ad:16:23:fa:6d:92:e7:87:a8:d3:e9:a1:
bc:6a:fa:69:12:86:42:4b:02:6b:74:61:69:1c:78:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:79:F7:19:B5:6C:A4:B8:08:E3:AE:76:F3:48:EF:F9:FA:EA:5E:EC
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:04:9b:bb:98:7f:a0:96:23:64:f8:71:25:1f:ec:53:5b:92:
dc:d8:b1:ac:11:5e:f8:4a:e2:9c:43:a8:21:3e:5f:a3:e4:df:
e8:12:04:98:57:9d:d0:9b:f9:2c:c2:ca:f5:15:90:ab:ec:2f:
5a:36:34:8d:b3:30:91:2f:d8:78:01:44:d7:44:82:7a:3f:a7:
fa:c0:9c:4f:67:5e:e1:aa:9b:f2:47:69:b5:b6:74:16:4c:9e:
10:36:b4:9e:56:bc:93:84:cb:27:26:f4:72:93:aa:9f:87:f2:
c4:de:c4:27:51:f1:6c:36:7a:48:99:66:bc:90:4c:77:a6:e7:
79:e2:4b:f7:76:3f:d8:0d:31:9a:91:64:04:14:41:87:b2:1d:
e3:76:42:bb:73:0a:6d:a0:43:d6:8f:d7:4b:81:a6:88:0b:eb:
f8:15:a6:1c:8f:88:a5:01:be:c6:c5:fc:26:57:0c:5b:94:28:
52:0c:b6:52:df:43:c4:37:c0:d4:54:fe:9c:b7:98:65:5a:b2:
9e:56:7d:51:18:0e:56:26:ec:82:2d:2d:2e:54:07:bd:37:27:
a9:3f:35:ad:b6:c0:71:d6:90:0b:87:f2:17:23:03:f7:08:5f:
30:be:ae:93:4d:c2:d1:a3:c0:84:93:cf:cd:8c:46:f0:15:b7:
5a:5d:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 02:40:19 2026 by rpki-client