Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: iUKsAH7HDo5Pz7o9v8bcVv/uFtV2Acoh6jLvUSapqIg=
Subject key identifier: 15:2C:75:DA:8A:30:20:1E:0C:1A:E2:F0:D7:71:28:68:5C:7F:03:0A
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 01A1DD269285232AC26747A07D9811E9729C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: 037B
Signing time: Sun 15 Nov 2026 03:00:54 +0000
Manifest this update: Sun 15 Nov 2026 03:00:54 +0000
Manifest next update: Mon 16 Nov 2026 03:00:54 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: X6V7NfsWWI+X39QxD85clzbpWFgA5nk8PJjujiBcvWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:92:85:23:2a:c2:67:47:a0:7d:98:11:e9:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: Nov 15 03:00:54 2026 GMT
Not After : Nov 16 03:00:54 2026 GMT
Subject: CN=152c75da8a30201e0c1ae2f0d77128685c7f030a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3d:da:09:c6:c8:37:df:82:db:19:dd:49:6e:
af:c3:aa:45:16:4a:a1:13:cc:e0:52:a3:fa:b9:c8:
43:26:20:69:02:5d:89:a8:fe:2d:98:78:87:d5:d6:
a5:c5:f1:a1:5d:82:88:2c:05:3d:77:11:1b:18:9f:
73:8c:85:a2:8d:32:5f:21:e8:08:dd:2c:63:fd:d4:
2f:fc:b8:40:18:7c:8e:6c:a3:a0:83:d3:2c:9b:c8:
2d:92:e8:f1:69:0d:58:4a:20:e1:60:30:07:2a:12:
19:86:d3:e5:cd:b6:f6:45:00:51:ae:6e:86:08:6a:
1c:e7:80:b7:b3:cd:0a:45:89:75:ac:79:15:b6:fb:
7c:cc:a4:c9:4a:0f:c2:45:3f:48:37:62:f1:24:47:
76:98:0a:3f:7d:ab:14:29:f3:6c:7b:a8:e2:b4:56:
6f:e1:b5:5a:7d:2f:2a:a7:e0:af:ea:95:0f:e2:db:
bf:59:86:e6:34:85:6c:cd:48:de:8b:05:9b:11:0d:
be:3e:31:0a:38:ff:92:cf:89:17:14:c6:19:5e:9f:
8e:eb:28:b9:13:50:26:55:2b:28:09:63:8b:2a:d0:
c6:88:47:81:23:dc:6b:93:34:64:4c:8a:b0:1e:5f:
57:ad:de:bb:a4:c5:9b:34:9a:7d:d9:c2:76:89:06:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:75:DA:8A:30:20:1E:0C:1A:E2:F0:D7:71:28:68:5C:7F:03:0A
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:05:0f:7e:90:b0:ce:d9:f6:9e:d5:59:c7:bd:92:1e:c0:00:
f4:ab:29:54:9a:9e:0a:a3:48:21:e1:3c:13:32:12:0e:c0:65:
55:0d:d3:a3:71:52:88:70:d4:02:f7:0b:80:00:92:c1:8b:5b:
23:bf:4f:11:ac:bb:18:06:3a:d9:bf:ba:ef:fa:b1:05:81:69:
03:1b:be:f9:63:67:0d:b2:8b:7f:72:27:e4:76:75:0f:d4:48:
95:d6:b0:2b:8f:88:3c:53:1f:f9:8a:f0:ac:3c:00:e0:ee:03:
74:e4:68:26:bf:4e:6f:bd:82:a5:6e:8b:d1:fb:15:9d:23:b8:
46:ec:64:59:15:10:91:40:e2:40:34:00:82:24:e0:b9:4f:b9:
4c:3f:6c:e9:b3:da:91:14:c0:d7:71:1a:75:08:79:c7:aa:44:
e8:c7:bb:98:b2:e2:81:21:b6:5a:92:64:09:1b:fc:17:35:18:
f8:9d:28:23:78:ae:03:71:97:30:8c:e2:64:ad:49:4f:f6:31:
9e:05:60:6c:1d:a0:a5:a4:43:76:fb:ca:e4:6c:5e:05:29:a4:
7d:3f:a3:ae:38:d5:35:d4:48:f8:67:e6:49:af:ed:ee:0f:7c:
55:ba:58:c3:26:9d:73:be:9b:49:82:dc:ff:ab:9d:93:6a:7c:
08:54:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:00:50 2026 by rpki-client