Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: I3jds6LRd6I1x7SKQME0G6j/9iw1XwkLfFl2K6Tj53w=
Subject key identifier: 54:8F:A6:86:35:BA:A6:C8:4A:EE:06:A7:82:86:F9:F0:9A:A3:DC:B2
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019D284D38966933440F8BCAE69D95897496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 05E3
Signing time: Thu 26 Mar 2026 04:00:42 +0000
Manifest this update: Thu 26 Mar 2026 04:00:42 +0000
Manifest next update: Fri 27 Mar 2026 04:00:42 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: 9lkoNZUh2wFRCvIhuavi446shLgdoDpYJPvv3Vm/sBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:38:96:69:33:44:0f:8b:ca:e6:9d:95:89:74:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Mar 26 04:00:42 2026 GMT
Not After : Mar 27 04:00:42 2026 GMT
Subject: CN=548fa68635baa6c84aee06a78286f9f09aa3dcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:a8:b2:13:ed:b0:f0:48:1d:cb:7e:ea:c1:
c8:39:35:6d:8a:4d:75:85:73:10:0e:6e:b5:3b:86:
0d:5e:db:e2:7d:e0:0f:52:13:9b:e2:fe:78:1c:ff:
f6:7a:b0:28:b1:e1:32:da:f4:e7:00:bd:99:0e:49:
10:6b:bc:c8:51:f0:7e:17:2b:af:49:e3:26:58:f0:
b7:c5:f5:bb:61:81:e2:81:34:5a:6e:60:a5:e1:52:
43:03:b8:54:bf:9b:5c:1e:ed:de:63:3b:9a:57:38:
c2:57:7b:16:81:bc:d9:49:3f:f2:77:42:59:df:13:
a6:52:09:b0:7b:0b:c4:2b:98:5d:27:c6:f0:9f:ac:
6b:94:25:b9:90:48:86:c2:03:c3:1e:cf:4a:95:f5:
e8:34:bd:54:0d:51:c4:f9:36:a8:c3:09:92:3b:4b:
bd:35:d8:ca:30:d3:60:0f:0c:b9:e8:25:c5:06:9f:
7f:0d:c3:f1:cf:40:ac:a0:21:b0:b2:40:63:5a:23:
35:e1:56:91:f9:ad:41:62:98:4f:65:4e:19:f6:64:
84:fc:5f:4a:94:32:2a:a7:39:6c:21:2b:ef:5d:1f:
34:4f:ee:0f:9a:96:67:d5:03:ce:8a:ac:e6:8f:42:
9a:99:d6:ed:b6:72:b6:82:96:b3:37:98:e0:d0:65:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:A6:86:35:BA:A6:C8:4A:EE:06:A7:82:86:F9:F0:9A:A3:DC:B2
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:01:b5:5d:4d:47:c3:16:33:f7:eb:41:ca:a8:fe:76:79:21:
18:29:99:6d:46:55:73:b3:e7:78:5f:58:f8:47:85:ba:ed:c3:
76:43:56:ab:65:37:45:5e:a4:46:9b:b1:99:15:03:db:e9:1c:
67:bc:ba:6c:13:d2:89:1f:e8:fa:8a:79:a0:b9:21:5c:4b:5e:
a0:73:2d:fb:11:61:a2:e7:3e:0a:9a:cb:f4:2d:6a:24:18:b2:
64:95:91:3e:af:a7:fa:e6:1c:05:ae:4e:9d:0d:95:31:e9:5e:
da:b9:6e:0b:7a:85:64:75:87:4d:9d:ac:0c:a4:99:b4:9d:26:
57:2e:1f:a0:cc:70:93:e5:de:94:4e:d1:32:a5:7c:60:cf:e8:
c1:37:c8:14:18:a3:03:05:3d:93:1d:00:30:cd:4d:ce:ea:95:
0a:19:24:98:7a:e3:da:d5:a9:40:01:22:fd:83:63:96:b2:95:
01:53:18:0a:64:51:ae:c0:5d:eb:5a:ad:67:b9:60:55:a6:0a:
58:3d:07:01:33:85:34:39:59:75:1d:9d:12:0b:76:20:77:b9:
c4:10:cd:2f:1d:e0:0d:23:ff:f8:6e:1d:74:60:a8:b2:31:ed:
f9:b1:fb:ac:06:fc:ca:51:2f:8f:29:16:9d:e3:51:e7:d6:f4:
90:6e:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:06 2026 by rpki-client