Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
File: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft (raw, json)
Hash identifier: BXlwJvsuklI3dA+95fRB8GqcibfvXE71dt2BBZQmaug=
Subject key identifier: EA:5C:85:99:66:65:20:1C:EE:5E:81:34:A8:3F:63:C8:44:F1:36:8A
Authority key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Certificate issuer: /CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Certificate serial: 019D1490120CAEF6A319AD14A2D1472AB8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
Manifest number: 1A
Signing time: Sun 22 Mar 2026 08:01:19 +0000
Manifest this update: Sun 22 Mar 2026 08:01:19 +0000
Manifest next update: Mon 23 Mar 2026 08:01:19 +0000
Files and hashes: 1: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl (hash: 00WDbXJh2HHlI754bO6kYiPvVS5WJW07AOhgpUJYlmo=)
2: jgpzu-ESfiekXnmQsWtfxfFMnls.roa (hash: VKgBSq4j9tQnrdlFEiguu7TMFYsGEpDcXU1dHxHAkww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:90:12:0c:ae:f6:a3:19:ad:14:a2:d1:47:2a:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Validity
Not Before: Mar 22 08:01:19 2026 GMT
Not After : Mar 23 08:01:19 2026 GMT
Subject: CN=ea5c85996665201cee5e8134a83f63c844f1368a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:2a:7b:a8:7c:07:53:e1:90:d6:2c:8d:1c:
d5:3b:8a:ea:da:f8:5e:c2:2e:f1:24:7c:df:bf:c5:
4d:3c:f0:a8:80:50:4f:f8:de:ed:0e:09:4e:fb:c1:
52:9d:d5:3b:e4:2f:9e:93:1e:98:c4:0d:8f:57:bf:
98:1d:f4:84:90:f9:3a:ad:af:0e:2e:ca:8d:0f:06:
f8:b6:b6:20:ce:5a:1e:04:a1:43:cd:9d:f2:60:dc:
2f:ca:02:e1:be:7d:17:1e:08:89:c7:87:af:7c:f6:
46:f8:e9:cb:c3:64:d3:37:df:34:99:50:98:61:16:
54:cd:0c:ef:cd:d9:9b:78:9b:09:41:f0:8c:64:fa:
99:e1:06:a1:d0:1b:a1:80:5f:10:bf:c8:34:53:72:
1b:ac:b2:7c:3c:56:34:31:4d:01:2d:1e:df:8b:e2:
e7:95:2f:4a:23:9c:27:7d:94:ed:47:4a:15:f6:58:
aa:70:2e:87:cc:7a:83:52:ee:69:c8:c7:4e:b1:82:
0b:49:cd:96:41:34:6b:b9:6f:57:15:b6:15:2e:5a:
8c:ab:8b:b0:71:39:9b:9e:a6:d7:8e:04:b1:41:4f:
3c:02:1a:84:03:5a:94:cb:d0:dd:d6:6a:55:a2:e4:
94:ee:a6:f4:eb:59:ef:1f:32:72:73:7b:d0:3f:0b:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:85:99:66:65:20:1C:EE:5E:81:34:A8:3F:63:C8:44:F1:36:8A
X509v3 Authority Key Identifier:
keyid:3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:58:b6:71:d5:c9:55:cd:64:f5:7f:7e:f8:0b:06:39:8c:c3:
d3:c0:a2:e9:e5:cf:c4:35:c5:f7:45:43:5f:8e:94:b8:07:1a:
5e:cf:4f:48:6b:56:11:53:61:09:ab:ad:cd:31:10:af:97:dc:
67:3b:b7:ae:8c:c5:21:41:50:d6:ef:8d:aa:89:79:f6:f0:d3:
cd:57:f6:e0:ef:c5:9e:d7:09:05:c4:49:45:4f:1d:31:6c:5c:
30:fa:ac:1a:26:ce:33:1a:50:86:22:fe:9e:78:f9:61:ba:6a:
66:4d:4a:cc:c2:a6:44:33:43:7b:6a:25:0e:bf:d3:0b:80:e3:
63:c2:5a:1c:3e:43:45:d6:60:e3:ad:07:8a:ed:19:a9:5f:0d:
16:8b:2b:b7:71:88:61:8a:ac:a9:69:e3:b2:72:af:ee:46:a6:
33:72:54:2d:0e:e2:2e:c3:99:91:9f:24:23:1f:e6:23:d5:d2:
65:f2:d6:4e:15:a0:ad:64:67:50:db:4e:63:1c:e8:fd:fc:87:
4f:7e:f7:73:18:2e:78:48:14:02:d9:b5:95:14:15:18:a9:2b:
7b:56:c6:29:92:77:17:6b:ac:0c:e3:3f:8e:db:53:1c:a9:30:
2c:15:19:31:50:f7:e9:81:1c:94:19:80:42:37:e8:cc:a3:29:
ab:5c:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 16:21:18 2026 by rpki-client