Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: LFGJnP5zhTO5SN7hBzf+k7FI9Lnyu2XpvbOj2cz4h+s=
Subject key identifier: E2:90:23:D2:FB:D6:B4:34:CD:DB:8E:68:E1:4C:69:23:76:8F:91:02
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 01A0D68241D7B996A2A1D2AE38F2C6EC9645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: 02F3
Signing time: Fri 25 Sep 2026 03:00:55 +0000
Manifest this update: Fri 25 Sep 2026 03:00:55 +0000
Manifest next update: Sat 26 Sep 2026 03:00:55 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: 2oFZZsY3P4PVfv1dtGqdHGwguUBkxYGrVMtx3dAaF4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:41:d7:b9:96:a2:a1:d2:ae:38:f2:c6:ec:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: Sep 25 03:00:55 2026 GMT
Not After : Sep 26 03:00:55 2026 GMT
Subject: CN=e29023d2fbd6b434cddb8e68e14c6923768f9102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:c6:52:92:83:18:04:22:c2:bf:b2:0a:7f:
02:e3:dd:1f:f6:2e:f7:d6:09:6d:23:73:aa:db:32:
4f:9e:46:55:d0:8d:ad:1d:9d:20:ce:3e:10:34:9a:
b3:51:bb:87:ab:97:35:b1:e0:44:e4:da:aa:47:a6:
f3:15:5e:0f:7a:8d:32:f6:10:ab:6b:1f:ec:0a:cc:
9d:39:ea:56:24:a1:cb:1b:8f:8a:65:3c:08:d9:be:
87:e0:05:ad:e2:fd:64:44:53:88:6e:94:d7:97:2c:
0d:ce:13:f6:69:5c:c3:a2:0d:26:ce:e9:15:c4:6a:
b0:6e:ad:71:f0:1f:53:0d:48:b0:13:df:92:70:55:
d1:51:2b:0a:65:f3:28:df:f2:18:41:92:86:89:f6:
50:52:48:3f:e5:54:a5:15:23:97:87:f3:a6:04:89:
dc:17:3c:e6:78:6b:2a:65:03:f3:f9:e8:a6:0b:d4:
c8:5a:d3:5e:e4:29:f9:00:d5:ad:3b:63:90:f1:60:
17:d5:da:f8:0b:86:a8:1f:c3:53:df:91:c0:d1:ab:
82:8c:d6:ee:e9:21:d4:e5:b0:b7:76:4b:85:58:46:
42:90:38:44:8c:bb:01:fb:c1:1f:fb:e1:b8:6b:09:
57:ba:02:89:0b:e1:66:9b:b4:da:07:e0:e7:7a:d1:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:23:D2:FB:D6:B4:34:CD:DB:8E:68:E1:4C:69:23:76:8F:91:02
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:54:1b:24:b4:e8:67:55:af:bf:f2:2e:7d:c6:75:93:2e:c9:
ba:d0:6a:d0:21:ba:88:d1:b9:13:5e:de:ef:26:1f:74:04:aa:
ce:08:e0:93:01:84:3b:2d:fe:54:22:eb:c0:09:07:d0:68:b1:
e8:a0:0a:19:ff:03:ff:7d:b1:2e:94:74:38:f4:c2:59:d3:3a:
e3:46:fe:d8:7f:f5:f4:aa:fd:39:e9:e3:44:0d:16:dd:fd:d0:
98:6f:9a:b7:69:f7:2d:6d:2b:4c:0f:4a:d4:57:83:02:7d:38:
ba:ff:78:34:8f:21:e7:0c:f2:bc:fe:3a:88:c0:19:d2:8d:d6:
d3:5d:e2:51:4d:ff:5a:a2:15:0b:53:10:66:6c:4a:b9:b7:34:
e0:56:2e:ac:8e:94:b1:45:d3:27:bf:62:21:6e:0d:b4:55:62:
26:01:81:7d:d0:56:fc:b7:eb:89:99:3b:a2:f8:0e:91:4f:d3:
ef:70:da:0d:c5:0f:bd:e7:36:e9:10:48:fb:b1:f4:19:25:47:
d2:29:82:a9:14:92:81:eb:f4:ea:75:15:00:60:1a:b2:b8:b0:
70:c5:3f:17:9e:06:d8:98:f1:4c:f5:0a:e3:7f:43:a6:b3:67:
be:f5:fb:a0:c0:59:15:1d:2f:a0:e9:c4:bf:1b:28:df:a8:75:
de:83:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:41:49 2026 by rpki-client