Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: ApjZxCd46/ozAkj8I60Xhrpx50vYB2oGwGB+r6ic31Q=
Subject key identifier: EF:76:32:BB:E3:45:6F:51:3B:DF:9B:E5:69:7D:94:13:A4:F9:DB:AF
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 019FF8A3A10A9A30D0E5A4DED24DC38FD606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0C4C
Signing time: Thu 13 Aug 2026 01:01:40 +0000
Manifest this update: Thu 13 Aug 2026 01:01:40 +0000
Manifest next update: Fri 14 Aug 2026 01:01:40 +0000
Files and hashes: 1: 5DqQ9hW3dBalgSVXvsmmpv04Na8.asa (hash: ufHA7NYeo4Q5ZwaQYTsog/tM8CFlDz7G3uObnG3T/Xc=)
2: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: ShPXwVK+hW9HnnO7s1o5Au/qU7DmJ4/4w39tf6ZAh3c=)
3: bKvy0wAyXjDdBCSQNQJ_GGUvadk.roa (hash: OCcyy3rJb6EJk7Jn3nr3zoEQ6CrNcyPKVMt0C1tP8r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:a1:0a:9a:30:d0:e5:a4:de:d2:4d:c3:8f:d6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Aug 13 01:01:40 2026 GMT
Not After : Aug 14 01:01:40 2026 GMT
Subject: CN=ef7632bbe3456f513bdf9be5697d9413a4f9dbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:f5:2e:ad:4f:6b:77:fb:6e:ea:ff:01:41:
ad:1b:59:3e:47:c5:96:c7:b1:3b:14:8d:9a:93:51:
7e:9e:71:15:16:13:3b:e1:25:41:ef:eb:67:88:53:
c8:db:24:da:8e:c4:8c:fc:a2:de:e2:82:fc:29:f6:
ff:5e:c8:22:fb:53:0d:df:e5:ec:2f:ab:8d:36:35:
3f:06:84:43:69:3c:40:a3:bf:92:c9:82:fc:5b:b9:
32:b4:b2:99:36:47:34:07:c0:e5:9b:2c:34:e2:3e:
66:16:4b:ea:fa:55:98:ec:62:28:af:8f:5d:dc:f7:
ef:43:cf:e8:73:ec:a4:27:6d:0a:07:0d:83:2e:e0:
28:a4:48:9d:7e:1b:1f:ac:f9:83:7c:7f:7c:f3:6e:
50:a0:e8:69:8b:80:c2:f6:69:8d:56:77:e9:77:f6:
d3:26:b7:e5:ae:08:65:b6:dd:30:b6:ff:3b:3a:6f:
94:ca:d0:d1:32:7f:c3:42:0f:63:05:db:f6:1e:b3:
e3:12:0c:1d:f8:85:84:a2:05:28:b1:7b:d1:a6:82:
29:68:61:f9:c9:55:ca:30:12:6a:56:03:a3:da:0e:
0a:dd:1f:8b:8a:ad:6c:c3:b3:db:5b:fd:61:8c:1b:
f1:73:b9:cc:05:14:39:4b:9b:e5:f3:f6:e5:fb:02:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:32:BB:E3:45:6F:51:3B:DF:9B:E5:69:7D:94:13:A4:F9:DB:AF
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:06:a3:48:3c:a3:a7:8a:4a:ff:89:d5:ff:83:38:27:ee:b5:
fd:f4:ab:6a:3f:87:11:a0:ae:a0:ee:e3:25:f6:04:ce:34:2f:
0f:61:c9:ec:78:2c:12:40:1d:9c:d2:5b:e1:33:bf:17:3a:8c:
a1:d4:06:db:87:0f:71:83:dc:ba:e0:4f:80:44:23:cc:9a:9b:
f9:75:20:2d:34:d3:a8:94:ef:11:bd:54:b6:e1:cc:d6:9a:ff:
57:c0:7a:ce:0f:db:87:13:35:2d:91:d1:7a:6f:f9:76:df:09:
35:f5:71:6a:60:4e:4b:1a:00:14:81:b6:f3:72:66:ca:b6:c4:
cc:4d:d9:cc:9e:44:ef:f2:57:e0:c3:6a:94:2a:d9:38:76:2c:
b2:92:02:7d:01:0d:45:a6:57:7e:36:f7:b7:96:64:da:12:95:
0c:72:ae:e5:72:b5:ea:0c:03:fd:25:a1:da:a7:0a:27:8a:3e:
af:00:e4:12:e1:27:4c:9c:2c:d9:c6:ef:d2:24:21:8b:8a:ea:
4c:8c:fc:e0:6d:57:45:5d:3e:04:a0:71:2c:66:38:6a:47:98:
45:de:99:4d:51:82:fb:4b:19:77:f0:1f:04:70:2d:90:0d:87:
fd:37:45:e7:27:26:3d:76:21:bb:32:9b:c2:96:e8:e8:9a:8a:
97:5f:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:29 2026 by rpki-client