Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: YOqd0MN7r8v/yY4VKWNgSQf8TelO92tL9tB27Gy5eVs=
Subject key identifier: 93:77:35:DC:20:60:75:D5:07:3C:68:11:4F:B0:8E:79:6C:EB:89:A1
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 019D39AF6BAF1973E4A9EC84F44CD083AEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0ADF
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: 7atOiLDVbxtzBJuRsgNV9T7IV6pjwMLZJ3QFgcMRnEE=)
2: bKvy0wAyXjDdBCSQNQJ_GGUvadk.roa (hash: OCcyy3rJb6EJk7Jn3nr3zoEQ6CrNcyPKVMt0C1tP8r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6b:af:19:73:e4:a9:ec:84:f4:4c:d0:83:ae:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=937735dc206075d5073c68114fb08e796ceb89a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:fb:e3:43:b5:fe:cd:36:09:53:a2:1b:12:
c2:6b:83:a7:ca:61:ba:b5:11:80:5d:33:25:09:0e:
20:45:ce:0f:b0:19:f0:5b:32:9f:c8:3f:6f:d7:86:
50:fe:d8:ee:3f:60:d4:23:86:ef:9f:1c:e7:e9:99:
68:55:a6:f6:45:12:10:16:b7:01:0d:80:e3:de:a1:
f8:c7:20:09:2a:cc:84:e5:d1:00:ae:54:8f:48:e2:
a2:17:7f:91:4c:e9:f9:15:02:f7:3b:48:ba:a2:bc:
da:07:2d:ee:86:d0:de:e8:72:91:75:ad:f8:47:94:
c2:42:60:ac:9a:d9:29:a1:93:bb:9f:c9:8c:49:6b:
e7:35:fc:4d:3d:ee:a9:32:12:f5:e1:ec:b6:d8:32:
f7:07:d6:be:65:e7:29:78:77:98:42:4b:27:66:04:
c8:d9:ef:0f:d6:21:63:5f:4f:3f:09:26:4f:c6:e1:
75:f6:30:55:51:8d:ee:06:8a:a5:c1:9e:29:4b:aa:
b6:eb:42:a8:74:e5:d5:8c:52:b3:0e:d7:1c:9d:5b:
bb:2b:6a:78:b9:92:58:24:27:4a:19:f6:20:bc:38:
42:f3:6a:f0:fa:36:b3:30:78:75:02:86:03:26:7d:
15:6f:87:97:b6:cc:32:a5:75:10:af:89:43:f3:17:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:77:35:DC:20:60:75:D5:07:3C:68:11:4F:B0:8E:79:6C:EB:89:A1
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:0e:cc:db:9f:db:c9:12:39:cc:9b:be:f7:d8:18:03:f4:
73:34:3b:80:33:92:18:b6:cc:1f:ff:2e:0f:93:9a:cc:87:2e:
ce:cd:e7:fa:c9:b7:7d:1c:dd:ae:eb:77:9a:b3:4d:8f:99:fa:
28:fa:06:f9:fb:97:e8:dd:30:c2:3f:3e:9a:f8:6e:17:60:2e:
79:88:54:4f:5c:09:6b:b4:2e:82:d9:fe:4c:13:c3:ec:bb:0f:
ba:1f:65:9f:66:bd:01:7e:57:3d:f2:35:8b:34:75:4c:eb:1d:
4a:74:42:e7:0b:dc:85:90:2d:0e:9c:2d:05:5c:eb:d7:ad:9e:
63:ac:11:38:d3:2f:5b:3e:ab:07:70:46:b1:1b:d2:90:69:c2:
5d:04:08:30:af:0f:06:1b:a6:ec:55:1d:1a:0c:a5:bd:ab:d7:
6b:eb:25:7c:e8:12:c4:05:23:e9:47:f4:1d:95:2a:cd:36:81:
9a:26:d1:8a:65:58:24:c2:5a:9f:80:98:87:8d:66:5b:1d:35:
e9:61:4b:05:65:52:41:e2:33:f1:9d:a2:e8:07:2b:af:e0:b7:
27:ff:ec:05:e6:98:18:a7:ca:d9:79:ab:7b:28:4d:fd:af:02:
b1:92:b9:a0:67:7e:6c:14:5f:52:89:2a:40:4b:86:41:61:15:
32:d1:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:15 2026 by rpki-client