Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: HSS5Vy6zmVTGluh0+FVam4AjFnUMYG+aNnH36Klo45Y=
Subject key identifier: 3D:76:4D:B9:BF:AA:D5:4E:6D:9B:00:14:04:39:EE:99:F7:39:3E:E3
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 019F9211BD03004BF09985F47122DA7EAC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: 024B
Signing time: Fri 24 Jul 2026 03:01:03 +0000
Manifest this update: Fri 24 Jul 2026 03:01:03 +0000
Manifest next update: Sat 25 Jul 2026 03:01:03 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: UzFRno/sqb2bWr0MOExptAep0c8fjCpAdJOBtfGBoo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:bd:03:00:4b:f0:99:85:f4:71:22:da:7e:ac:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: Jul 24 03:01:03 2026 GMT
Not After : Jul 25 03:01:03 2026 GMT
Subject: CN=3d764db9bfaad54e6d9b00140439ee99f7393ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:20:3b:27:73:8f:7e:ff:45:35:a4:f3:ca:
38:9a:af:58:fc:d6:5a:cc:c8:e8:8c:9d:73:a6:79:
b3:75:b8:f4:62:e7:58:ab:12:40:da:e9:b8:4b:02:
9b:28:80:26:bc:f2:2d:b2:62:9c:8f:00:8e:7c:90:
f7:dc:63:41:13:df:4a:6f:f5:91:15:00:2e:b5:8c:
c2:1e:66:85:96:22:e7:05:69:be:81:9e:2d:25:42:
51:11:38:bd:76:f0:60:84:4c:3a:d7:42:ba:60:a9:
57:0f:a6:04:36:c4:4a:ba:30:a4:88:89:db:a6:4a:
8d:a3:34:02:eb:1b:bb:c6:ec:18:b6:88:fc:38:6c:
8b:63:b5:27:a6:2a:1b:0b:02:4f:7e:6c:b3:87:1a:
87:34:6f:60:d8:ec:14:6b:c2:61:71:35:b2:74:99:
a0:1f:35:c9:28:d1:ca:f0:f8:21:4e:47:77:f3:d4:
ba:f6:0b:09:bf:ce:da:cf:0b:e3:79:23:f9:8a:73:
36:bf:f6:d2:3a:f5:f2:82:90:ed:f3:69:34:54:c4:
3c:38:96:ab:04:ef:ed:65:4d:47:56:ca:2a:8d:e6:
f2:6e:62:21:8a:45:7c:dd:67:2b:25:5a:fe:0a:9f:
4b:0d:f8:60:78:6c:ec:a1:18:02:92:8d:01:ed:5d:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:4D:B9:BF:AA:D5:4E:6D:9B:00:14:04:39:EE:99:F7:39:3E:E3
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e7:b1:51:32:68:09:f9:70:6a:0a:83:26:46:40:23:64:ca:
0b:05:a0:f4:bd:5e:1a:3e:d1:09:e3:25:35:d3:14:12:24:d4:
39:80:0c:e5:95:dc:e4:4e:42:11:86:5d:50:ff:23:de:1e:a4:
8c:f1:c4:30:b2:f6:09:92:68:a4:5e:ec:eb:45:07:61:a6:ad:
49:c7:d9:ac:34:5d:71:eb:be:85:ae:96:f5:41:bf:7e:db:c5:
06:4e:17:2e:a6:ce:dc:45:47:a2:aa:4b:e8:7b:46:08:48:59:
8b:a6:2d:5f:d3:16:53:23:1f:68:10:80:5d:cb:c4:86:00:1b:
47:30:1e:03:aa:b0:1e:6c:18:73:39:73:4b:7a:d4:3e:69:62:
cd:03:37:27:a0:6a:43:e6:a1:d8:d8:28:dc:0f:3b:0f:9c:8d:
6f:ec:4d:20:4c:14:65:d8:3c:0f:a7:a8:5e:17:d4:af:f0:b9:
a7:a1:29:14:81:88:ec:71:ca:fb:ac:6d:ae:c0:dc:35:d0:cd:
6a:43:26:18:63:34:27:6a:af:ac:e9:ea:cc:05:54:95:4f:e5:
51:88:bf:f6:e3:1b:3a:d1:cc:a1:88:dc:0f:09:b7:5b:f8:a5:
b6:d3:e5:01:5d:6e:c5:f2:68:48:73:c7:06:0f:0c:ab:b9:a4:
46:bd:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:13 2026 by rpki-client