Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: zubnmR25Gt3+zQcUwsSjRwTEzQNMVXOyzwYXocnWNEk=
Subject key identifier: FD:2E:DA:70:41:64:D9:A9:BF:11:D1:B0:F4:D6:6F:66:05:FF:D9:59
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 019E1D5970FCB45EC397E0545FFE11B000C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: 018A
Signing time: Tue 12 May 2026 18:01:01 +0000
Manifest this update: Tue 12 May 2026 18:01:01 +0000
Manifest next update: Wed 13 May 2026 18:01:01 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: hzYygsneVVvE/rrrQ/FhlxJ4J5g1QLrZ1oa/A5q5/M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:70:fc:b4:5e:c3:97:e0:54:5f:fe:11:b0:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: May 12 18:01:01 2026 GMT
Not After : May 13 18:01:01 2026 GMT
Subject: CN=fd2eda704164d9a9bf11d1b0f4d66f6605ffd959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:32:9d:24:41:15:ff:4e:9a:ef:1b:f3:61:
9d:60:37:4d:c8:6f:1f:63:81:e0:b1:7e:90:3b:61:
46:d3:c5:02:c8:99:e1:1e:d2:d6:14:a5:1a:29:be:
f1:17:4c:59:59:8f:2f:3a:19:2b:d4:34:37:21:3f:
aa:4f:84:f1:21:03:b5:19:e5:10:50:1f:09:6b:b0:
22:d5:bd:10:6c:19:54:ed:67:93:f4:bc:94:da:22:
0e:bd:6e:5e:4e:b8:6e:9e:86:de:fc:e5:52:1e:17:
33:b9:05:31:f9:12:a6:17:0c:4c:f5:11:0f:cf:5c:
1b:ea:00:fb:a3:3a:86:1d:b4:a8:43:f7:70:30:a4:
6d:7f:e7:d6:e8:cc:b4:8d:04:05:30:49:2e:c2:c7:
d7:9c:f4:25:8f:35:0f:c9:88:13:e6:da:a6:2c:bc:
65:82:be:7c:08:72:53:2e:36:85:13:53:8a:75:15:
e2:cf:86:d7:61:6e:2d:a7:d5:40:76:81:34:53:4a:
4c:c5:b4:af:01:91:07:5d:8c:97:cb:cc:c1:5a:ef:
9b:66:5f:5a:e3:0e:e0:af:0d:91:2a:99:2f:35:d8:
1d:bd:5f:d7:ee:c6:53:8f:1f:82:35:1f:78:b4:b1:
50:61:81:e7:fd:56:73:ac:05:c8:b6:b7:90:3f:40:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2E:DA:70:41:64:D9:A9:BF:11:D1:B0:F4:D6:6F:66:05:FF:D9:59
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f1:6e:2a:8c:4b:ec:63:ee:a8:ac:61:0e:9c:f7:f9:40:d4:
de:0c:a9:a8:a5:9a:a7:60:0e:3e:6b:a4:eb:79:43:48:c3:fc:
6a:fd:c9:33:5d:d6:a2:9e:8b:32:b2:db:62:b7:32:82:e5:01:
a8:db:f1:5d:fc:f0:e0:f7:cf:79:fb:3e:c2:66:83:13:fe:7c:
46:de:be:40:5b:1f:7c:3e:86:8a:b0:57:8e:3d:00:60:f2:ca:
89:fb:19:89:ce:3d:ea:cb:6e:48:16:50:cc:ba:f5:03:b0:58:
07:5a:8a:0d:5f:c5:52:b4:04:aa:57:b0:58:52:5e:10:ab:00:
7a:cc:6b:18:cc:7a:f3:f8:52:0e:cb:47:70:3a:78:c8:18:6e:
3d:dd:3c:5d:c4:90:a9:e6:43:da:29:20:79:44:c5:c5:c0:28:
b3:19:c2:26:fb:ff:a2:9f:f7:3e:a7:89:9c:4e:38:9c:95:3c:
20:91:6a:e2:90:ba:5e:fd:7b:e6:7e:03:64:49:ac:fe:8d:27:
ba:f5:40:35:c0:87:8b:e8:68:01:9f:36:41:88:13:33:30:f8:
bc:94:b8:22:3d:6f:75:4a:9b:ad:d6:76:31:61:70:6f:b7:c3:
3b:fe:7f:94:82:31:da:65:b4:e1:84:e9:99:8e:b2:cc:a3:f8:
84:88:ed:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWXD8tF7Dl+BUX/4RsADAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWFmZmU1OWQ1ODYyMWQ5NDViODk3ZmU2Yjc5NDdkNTYy
NTI5YjgwHhcNMjYwNTEyMTgwMTAxWhcNMjYwNTEzMTgwMTAxWjAzMTEwLwYDVQQD
EyhmZDJlZGE3MDQxNjRkOWE5YmYxMWQxYjBmNGQ2NmY2NjA1ZmZkOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3wynSRBFf9Omu8b82GdYDdNyG8f
Y4HgsX6QO2FG08UCyJnhHtLWFKUaKb7xF0xZWY8vOhkr1DQ3IT+qT4TxIQO1GeUQ
UB8Ja7Ai1b0QbBlU7WeT9LyU2iIOvW5eTrhunobe/OVSHhczuQUx+RKmFwxM9REP
z1wb6gD7ozqGHbSoQ/dwMKRtf+fW6My0jQQFMEkuwsfXnPQljzUPyYgT5tqmLLxl
gr58CHJTLjaFE1OKdRXiz4bXYW4tp9VAdoE0U0pMxbSvAZEHXYyXy8zBWu+bZl9a
4w7grw2RKpkvNdgdvV/X7sZTjx+CNR94tLFQYYHn/VZzrAXItreQP0ANaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0u2nBBZNmpvxHRsPTWb2YF/9lZMB8GA1UdIwQY
MBaAFDwa/+WdWGIdlFuJf+a3lH1WJSm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEt
MWRmNGNmZDdhYjc3LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lZTk1OGMtYzhjOC00NDdiLTgyOWEtMWRmNGNmZDdhYjc3
LzEvUEJyXzVaMVlZaDJVVzRsXzVyZVVmVllsS2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvFuKoxL
7GPuqKxhDpz3+UDU3gypqKWap2AOPmuk63lDSMP8av3JM13Wop6LMrLbYrcyguUB
qNvxXfzw4PfPefs+wmaDE/58Rt6+QFsffD6GirBXjj0AYPLKifsZic496stuSBZQ
zLr1A7BYB1qKDV/FUrQEqlewWFJeEKsAesxrGMx68/hSDstHcDp4yBhuPd08XcSQ
qeZD2ikgeUTFxcAosxnCJvv/op/3PqeJnE44nJU8IJFq4pC6Xv175n4DZEms/o0n
uvVANcCHi+hoAZ82QYgTMzD4vJS4Ij1vdUqbrdZ2MWFwb7fDO/5/lIIx2mW04YTp
mY6yzKP4hIjtpw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:25:07 2026 by rpki-client