Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: WpO/zhyeHlNgUp0Oe9I4uEXiVae3HSsA6/Rj8xYghvs=
Subject key identifier: 07:43:8E:D7:08:E5:6F:21:47:5A:7B:A8:BC:F3:09:59:5D:C0:5A:92
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019D39777DEBC1705226796768BD095B53F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 0587
Signing time: Sun 29 Mar 2026 12:00:25 +0000
Manifest this update: Sun 29 Mar 2026 12:00:25 +0000
Manifest next update: Mon 30 Mar 2026 12:00:25 +0000
Files and hashes: 1: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: +qhhE6CxwCCh98yBSBM2U9TXHqQuKILDl53LN4N/rrI=)
2: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
3: ao20WTlIdybEK7OORASxFGQHj5g.roa (hash: Bp9zWQUGEQfw9+EW5ojP9Kn3oyy71raM8WkHF/muXnE=)
4: xPUKnE5air9RWIE875_uAzahZ3k.roa (hash: WlB4PuFKngSEx9SC4lG9bAjuKu7PHJdrrtLtNhRjc6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7d:eb:c1:70:52:26:79:67:68:bd:09:5b:53:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Mar 29 12:00:25 2026 GMT
Not After : Mar 30 12:00:25 2026 GMT
Subject: CN=07438ed708e56f21475a7ba8bcf309595dc05a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:ae:5b:aa:c3:b8:3f:84:dc:d8:3d:6d:a1:
4b:00:54:d8:e2:fe:47:52:10:ad:00:a2:22:89:b5:
ac:59:33:e8:56:c9:0f:ea:4b:f9:38:6f:f7:9a:bf:
f6:26:ba:ac:a3:80:df:58:83:71:18:f8:cc:12:c0:
88:c9:14:bc:41:46:ec:0a:73:fb:c7:a3:bb:47:93:
f6:17:b6:56:87:74:f4:84:15:cc:ff:b1:b5:9d:34:
ff:d5:44:94:13:b0:79:6d:46:b6:e0:f5:93:aa:75:
d2:84:b3:f4:23:af:76:e1:ed:cb:8a:f4:52:27:18:
95:15:56:be:63:6b:8e:3a:0f:90:84:38:91:e5:f4:
c7:42:dd:49:1b:5f:0b:e6:fa:73:b7:2f:45:a4:ee:
aa:d1:da:7f:80:ce:42:fe:c8:46:61:6f:a3:07:a6:
3b:31:3e:47:76:23:52:c9:d2:18:c5:2a:1d:3c:32:
3f:8e:c8:a9:70:c0:20:33:c0:ed:f7:b1:38:a0:26:
b7:f6:8e:13:04:53:a4:2a:5d:74:c0:28:c6:34:b1:
a2:70:f5:f9:13:d1:55:28:6b:f5:07:d0:db:23:5c:
c8:61:ea:a0:75:46:6a:a1:6b:36:f6:3e:58:12:78:
bf:94:cc:0c:b8:87:cd:34:14:8c:ac:3a:9c:0f:8a:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:8E:D7:08:E5:6F:21:47:5A:7B:A8:BC:F3:09:59:5D:C0:5A:92
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f4:a3:b4:05:c0:aa:09:a0:e4:27:8e:00:14:5f:c8:84:65:
f4:c0:ef:60:1a:f0:0b:b8:fa:ac:af:95:dc:5b:9b:66:0d:1e:
ab:33:5f:57:2b:d1:9f:22:09:be:8a:00:6e:0a:65:22:ca:47:
9e:c0:2a:a0:09:4b:c4:b2:9b:d7:8f:de:b0:ed:25:2c:8c:72:
e7:72:4a:d7:47:2c:da:2a:da:02:be:53:d2:d1:8b:e4:e2:fa:
dc:25:44:7f:30:2b:51:8f:e2:ce:11:d0:bb:a9:f8:61:c0:99:
50:af:25:42:2f:ef:95:8e:59:32:b9:7d:fe:3e:7d:69:38:20:
a7:59:39:93:7b:2c:40:ba:6f:2f:e9:aa:da:8d:13:3d:bd:64:
7b:a6:f8:f6:8b:dd:ba:dd:d0:da:e4:01:8c:77:73:5d:08:1b:
fa:41:17:48:54:e4:d5:ca:9d:ac:4c:9b:cb:3e:cc:5a:fd:e5:
db:cb:3b:de:5f:a1:3e:23:1f:d3:d8:8a:ca:12:15:1c:f4:8b:
f7:be:2e:f3:3c:d2:62:7e:c8:21:50:ee:89:0d:b0:75:43:2b:
56:2c:04:bb:15:bd:97:2e:38:a1:84:0f:7a:5e:99:d0:d8:94:
39:5a:f7:07:c8:28:f5:b5:67:1c:5f:ce:d8:18:b7:c4:ae:53:
4d:12:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:10 2026 by rpki-client