Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
File: PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft (raw, json)
Hash identifier: BhceBrZ1vu9fCXCJPric0r7k83Z61+ef0gOayHX9T2U=
Subject key identifier: 99:F6:EB:4A:58:69:3F:D5:2A:8D:9F:A6:A8:3A:8E:D0:65:E2:50:0F
Authority key identifier: 3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
Certificate issuer: /CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Certificate serial: 01A0DA292F1292D30EE8B0FB1F1A008A91A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
Manifest number: 73
Signing time: Fri 25 Sep 2026 20:02:07 +0000
Manifest this update: Fri 25 Sep 2026 20:02:07 +0000
Manifest next update: Sat 26 Sep 2026 20:02:07 +0000
Files and hashes: 1: PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl (hash: t2wY+iDJ4P2cueo/CVZxchMKWHwyf2vgW+ND1NAJ3IE=)
2: Vz7oOsxWL7210T9Fifl_kQQeDLM.asa (hash: rZ0F9/DNYOrNZBeOBRWHqVNZeI30ewKMxobqnhcmh7A=)
3: h2ZUA9TwJrpWxOXA3lTyOY9Tw_s.roa (hash: 5SLVRWOGvDLADbtyYHIxEzFzsBdemdaARz1cRFIMQYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:2f:12:92:d3:0e:e8:b0:fb:1f:1a:00:8a:91:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Validity
Not Before: Sep 25 20:02:07 2026 GMT
Not After : Sep 26 20:02:07 2026 GMT
Subject: CN=99f6eb4a58693fd52a8d9fa6a83a8ed065e2500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:01:97:f0:e3:08:81:ca:71:1c:49:cd:df:
bd:15:5c:b0:1a:6d:aa:6e:e2:24:17:6e:47:c8:f8:
50:e9:33:ac:ce:13:91:45:5b:0c:4d:64:d8:d6:95:
1c:c4:e0:73:5f:8f:4b:7e:e8:61:1c:95:4f:51:0d:
4d:08:f1:f5:07:8d:cb:b7:1e:fe:16:37:ea:59:ff:
df:2e:99:25:e3:11:7f:a4:33:66:11:5d:ce:6e:94:
8d:27:5b:b0:86:0d:ba:70:02:73:ee:6f:46:fd:51:
68:ec:e1:d1:53:6d:86:86:31:7f:14:3b:fe:7a:96:
6f:42:d4:e7:d1:9f:d9:81:bb:fa:2a:ad:59:97:38:
25:d7:c8:89:09:81:8f:31:8c:6a:ee:69:e6:88:64:
c9:bd:08:b4:bf:b8:4e:a9:8f:3c:6d:f2:96:47:c8:
c7:fd:65:c2:d8:cd:32:61:f9:be:5f:d0:48:87:be:
1a:47:1f:b0:1e:0e:2a:11:b6:bb:c8:4a:61:f7:88:
58:6f:a0:e2:34:3f:ca:43:97:07:5e:20:db:63:e4:
c2:f2:b7:08:a9:a6:a3:59:aa:9d:dc:b1:fb:11:c3:
92:5e:3a:30:75:0c:7a:44:40:fe:76:5a:14:dc:49:
71:34:ff:23:bd:51:91:b1:2f:41:e4:63:b4:99:c2:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:EB:4A:58:69:3F:D5:2A:8D:9F:A6:A8:3A:8E:D0:65:E2:50:0F
X509v3 Authority Key Identifier:
keyid:3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8a:10:8e:0b:84:ee:5e:ee:65:ff:68:90:9d:68:22:59:8d:
12:66:d5:98:9e:b7:c0:0a:5d:30:df:e2:78:ba:14:b3:df:11:
57:61:73:13:01:9a:71:ae:a3:aa:e9:73:86:11:a9:65:12:cc:
d2:19:92:a0:79:2d:6f:1c:80:11:85:12:07:f6:6b:a4:e9:67:
93:3e:e8:2b:83:42:ae:18:25:4c:ea:77:72:88:46:3b:2d:18:
3e:2e:a0:5d:56:fa:cd:16:3a:ad:49:64:47:7b:19:cd:0b:0d:
23:7e:64:4d:a7:8f:b4:47:4f:77:a3:40:bd:99:73:89:57:4d:
b0:4b:49:f3:79:e4:dd:62:68:a7:fb:5f:b9:9f:f6:8b:7c:49:
57:03:51:25:7b:b1:55:5a:3c:f7:8e:f0:ab:5c:5d:f1:fd:59:
ef:d5:01:19:22:c6:a6:e0:9a:6d:3f:b8:62:5d:12:41:d3:93:
64:96:e6:6c:3b:16:5e:ef:62:7b:70:6d:db:a9:c1:8e:66:83:
b0:11:aa:1a:aa:3a:d8:90:36:b6:e6:b1:7e:1f:80:33:60:a9:
b9:6e:c0:d9:d1:19:2f:ff:79:3b:38:30:e3:54:70:98:40:53:
11:7a:0e:f3:75:1c:8b:7c:ad:bc:d9:3a:15:36:ed:6d:80:a4:
d5:f9:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:20:25 2026 by rpki-client