Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: QqtIjk5BN6vz7mnGoqQy1lWXGxK2eBsJ5EoiQsDglAM=
Subject key identifier: 8A:19:84:8B:7D:3C:95:A3:65:61:CB:88:6C:E6:1C:08:28:F4:DD:AE
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019D29299CFC1D7BB4C5DA3BBEBE2B3136A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0C81
Signing time: Thu 26 Mar 2026 08:01:26 +0000
Manifest this update: Thu 26 Mar 2026 08:01:26 +0000
Manifest next update: Fri 27 Mar 2026 08:01:26 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: vh5Jwu4XGI9H87zwYhceMtKtshY5y6XLT9q7dMx+vLw=)
2: c6e2woPNB04ZsyBinFv698qVT4o.roa (hash: +z15BNM7prrFn2O9ay18qeSx+nY/lsQt2tceRY1CHk4=)
3: kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa (hash: woEwD4aK5vmEAsvtUFsMtH0Vvs264WAeMxmjqmjfCh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:9c:fc:1d:7b:b4:c5:da:3b:be:be:2b:31:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Mar 26 08:01:26 2026 GMT
Not After : Mar 27 08:01:26 2026 GMT
Subject: CN=8a19848b7d3c95a36561cb886ce61c0828f4ddae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:fc:77:96:4e:e2:a3:6e:a3:2e:b7:4a:9b:
c3:3b:08:1f:ee:34:b5:8f:f7:cc:03:65:56:5a:5c:
9b:c1:fe:16:c7:e1:12:75:e0:5c:02:e4:57:9c:d9:
eb:39:07:9b:63:c5:39:af:47:1d:6f:3d:6c:54:b8:
94:7a:43:0c:4f:14:ef:c7:2f:0e:b9:a0:ca:09:fd:
ae:8b:47:66:5f:6a:5c:f6:50:e8:42:a3:c5:b6:4d:
a7:72:2c:c2:00:60:2d:31:86:fd:1c:66:e3:3e:47:
2c:38:7f:5b:e8:67:84:35:c4:6d:a3:64:10:6d:54:
f2:57:50:99:d6:b3:9b:a7:97:d0:14:ea:8f:88:99:
c8:1a:ef:3d:1a:8c:04:97:1f:5f:72:7b:9b:5f:87:
e3:57:39:69:d9:36:1a:96:3f:b1:4a:bb:db:50:c1:
a4:3b:99:a6:bf:a7:9e:23:0f:02:b9:43:c6:d4:1b:
ee:63:eb:b5:39:0f:59:c4:d2:81:8a:8c:2b:26:d3:
12:15:df:14:51:48:c5:87:f0:3a:24:5c:d1:8c:b1:
26:61:84:89:71:3b:7e:0b:bb:9f:f6:2e:e6:f8:41:
44:05:8b:47:41:a0:44:ac:75:3f:d2:29:44:7b:7e:
3d:e5:ed:4e:d0:95:81:4f:68:81:f9:48:d1:31:54:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:19:84:8B:7D:3C:95:A3:65:61:CB:88:6C:E6:1C:08:28:F4:DD:AE
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:51:2f:7a:b6:95:87:62:c6:0a:b3:fc:db:36:97:4d:64:6d:
c2:90:3d:a9:8d:f0:99:1c:9c:96:bf:2a:26:7d:07:00:82:2b:
27:6b:47:f2:a5:80:c8:b2:42:1a:ec:1d:79:fd:0c:cc:0d:2e:
86:a9:01:74:ef:f3:09:71:26:c5:eb:c8:52:42:56:da:6e:83:
d9:e9:a4:d3:ef:ff:49:c5:f0:14:df:7c:49:65:21:02:46:b3:
2c:95:7a:f8:79:47:d5:95:a5:f3:c1:a6:d5:8d:4d:b6:08:23:
9a:70:62:ca:e0:5e:07:ac:e1:34:9d:a8:3e:5e:29:fa:29:ce:
6f:2e:92:28:81:26:90:c3:c6:30:9c:11:8d:b8:9c:3b:37:d8:
32:16:67:bb:47:9c:cd:a4:f0:6a:50:20:d1:e3:33:1e:d0:98:
2f:d9:4f:2f:d9:15:fd:94:60:dd:59:fe:96:d5:4e:6b:95:92:
84:36:1b:ff:39:e4:6e:8c:04:ad:97:51:9a:e2:4d:02:ee:87:
e6:79:7c:d6:9e:a5:3b:e7:0c:51:1f:1a:e9:a6:a7:2e:d2:38:
ae:e3:fa:6a:ba:58:b0:c9:92:3e:c0:57:a4:0e:58:76:24:38:
a1:72:c1:30:e4:a1:f2:57:e0:d1:d4:0f:fc:84:a0:bc:cd:7a:
34:73:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:20 2026 by rpki-client