Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: 6uEmncAbcJGrM71sESL8gA5pU4aBmJtT1GVHLQydDvs=
Subject key identifier: 99:B6:03:44:20:A4:DD:E5:60:A9:C1:B8:60:68:27:E1:ED:B3:EF:1B
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 01A0B80A1D5D91BB55EA9B6020BB2D38BF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 02F2
Signing time: Sat 19 Sep 2026 05:01:05 +0000
Manifest this update: Sat 19 Sep 2026 05:01:05 +0000
Manifest next update: Sun 20 Sep 2026 05:01:05 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: kYdI4IDG4I85lhIDJiC19fip1vzOXwmP263Tzc0ie30=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:0a:1d:5d:91:bb:55:ea:9b:60:20:bb:2d:38:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Sep 19 05:01:05 2026 GMT
Not After : Sep 20 05:01:05 2026 GMT
Subject: CN=99b6034420a4dde560a9c1b8606827e1edb3ef1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:c4:7d:b7:d3:81:e0:c2:ce:54:c6:38:c2:
5e:55:76:c9:88:85:c9:b8:24:d0:24:fe:0e:5a:0c:
07:ea:75:b6:73:51:81:da:75:c5:cc:c4:b9:b7:d1:
53:3e:5b:91:ec:75:52:e0:5a:ba:0b:8a:0c:c0:6f:
72:05:3d:3f:5b:a4:a6:aa:18:ac:76:48:a7:0d:5e:
29:24:47:e6:a9:7d:7c:47:f0:8e:30:b9:3d:44:69:
39:6f:7c:db:69:30:89:b7:a2:92:d4:ef:3e:ec:c2:
fb:6d:fb:c2:78:79:bb:05:cb:57:e5:62:de:fe:e7:
81:13:04:bf:73:3d:60:dd:dd:6b:f4:cf:f4:79:a5:
75:5f:b9:4a:9c:8d:11:2a:9b:ed:21:a9:73:a6:50:
c9:73:44:9d:48:de:a3:11:28:4f:75:2d:07:af:c7:
b9:44:f7:54:ca:93:ef:83:80:0f:a3:4f:8c:4d:f4:
12:25:34:cd:58:63:de:c7:3c:72:f7:2b:21:42:0c:
a9:77:5f:14:8f:fb:d2:8f:bd:da:35:74:24:49:96:
e0:7f:19:b3:c3:3c:32:13:cd:33:c8:a6:21:c3:13:
73:5d:1f:3d:6b:a4:4c:76:94:0e:3c:1b:45:58:f5:
ef:6e:43:2f:7c:66:5d:84:d1:78:0f:a1:62:fe:50:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:03:44:20:A4:DD:E5:60:A9:C1:B8:60:68:27:E1:ED:B3:EF:1B
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a5:3a:4b:12:fe:5e:a6:4a:39:98:84:1f:b9:6e:f6:74:b3:
36:0c:f3:41:28:10:63:fa:c2:1c:d3:9b:55:cc:5a:41:10:7a:
14:d8:9c:70:91:2b:b2:72:4d:55:d9:2e:e6:50:80:30:69:6c:
c8:b4:53:08:9f:2b:bc:4a:8a:34:e3:82:bc:ae:25:d6:05:e5:
4a:47:70:6c:fe:67:e5:d5:f0:ae:f1:20:d7:46:9e:71:b4:02:
0e:b7:d9:4d:21:a7:45:31:f5:1b:90:97:bf:10:40:47:53:fc:
63:77:cb:ae:73:1b:99:3b:a7:17:d8:0d:36:b5:2d:97:53:61:
6d:ef:7e:3a:70:d0:a2:01:fa:37:05:93:83:0a:1d:d8:01:fe:
95:d1:3b:da:84:6f:df:c4:a2:5b:9f:43:e6:1f:29:e6:60:6b:
4e:bc:df:0e:5b:5c:86:00:61:3a:56:85:39:e4:96:66:9b:14:
4e:30:0a:44:0f:18:97:17:5c:e5:41:f2:eb:b2:89:75:31:40:
87:cb:96:82:b0:05:ff:27:d2:ab:85:83:e3:64:a2:3b:7a:28:
20:ce:d6:85:d3:64:48:ac:bf:57:88:d9:b2:76:16:cd:c1:75:
d6:40:c8:ce:10:4c:58:55:0d:e2:1a:5a:a9:12:f4:e0:04:30:
8f:91:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:42:14 2026 by rpki-client