Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: d/mm0wslzf5KW6wHwoBuM/x5L21gPwrwcaZgfQZgL9M=
Subject key identifier: B7:98:5D:AC:C5:70:9E:EA:AC:08:70:8A:0A:E3:75:78:6D:1D:81:D7
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 01A0EC65C95556C5CA296019484B510280C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 05B1
Signing time: Tue 29 Sep 2026 09:01:28 +0000
Manifest this update: Tue 29 Sep 2026 09:01:28 +0000
Manifest next update: Wed 30 Sep 2026 09:01:28 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: OLe3OPqN+pT9NK5on9VpdM7KiT8UbWqxd/4LuaeCyTg=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:c9:55:56:c5:ca:29:60:19:48:4b:51:02:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Sep 29 09:01:28 2026 GMT
Not After : Sep 30 09:01:28 2026 GMT
Subject: CN=b7985dacc5709eeaac08708a0ae375786d1d81d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:51:0d:59:26:8e:50:df:fc:b2:36:7e:d8:
e8:7b:11:28:7d:9a:0b:22:51:8e:bd:45:f2:94:2b:
6a:ff:7a:38:f6:9a:1c:96:a8:51:1f:81:20:60:f5:
a0:78:dc:60:9c:9b:3b:58:e4:59:2a:11:96:47:8a:
1f:ed:ae:da:02:2a:fc:d1:85:dd:7f:7c:f3:fb:6c:
a3:0c:33:a5:77:8c:38:d9:cd:2b:bb:80:4d:30:d7:
2a:0c:4e:2a:74:12:93:06:a4:90:8b:64:63:80:b9:
46:9d:90:b8:cd:68:d3:55:59:a9:9d:39:92:0c:f2:
c3:db:8b:b8:30:87:44:d5:d8:3f:99:57:44:3e:ba:
fe:69:36:83:ee:7d:3f:93:8f:5c:87:45:e7:09:2d:
38:9a:d5:8f:43:d7:82:fa:cc:b8:25:6c:c3:97:ba:
6b:5a:4b:3d:03:b2:0e:30:93:23:c3:ff:4a:32:64:
7a:cf:70:e1:25:39:ff:4b:f8:3b:17:a9:b4:53:24:
c8:78:af:04:66:3b:fe:f3:a6:f0:36:26:c7:d6:8b:
43:58:ca:cb:c3:fa:e4:93:0d:52:85:bd:b3:e7:4c:
89:1e:2a:44:e3:a5:d4:05:a9:a3:5c:15:c9:28:fb:
44:d1:05:83:03:81:81:64:7a:09:25:20:3f:4d:5b:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:98:5D:AC:C5:70:9E:EA:AC:08:70:8A:0A:E3:75:78:6D:1D:81:D7
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:6b:b7:dc:f4:ab:c0:12:51:62:f6:ce:c0:4e:8c:1f:41:
41:58:20:e4:4a:9b:61:d7:d9:36:62:6c:da:21:70:c4:ef:33:
8c:ab:8e:63:31:a5:5e:66:7d:aa:c4:f2:73:53:cd:d5:38:84:
d7:fc:ce:ba:70:b8:80:e4:61:ae:5a:10:98:a6:0d:09:8f:13:
d2:21:1b:26:e6:c1:b9:08:5a:ab:e4:43:df:d5:46:63:4e:f2:
10:f0:ae:fe:99:42:5a:d6:7e:9e:af:6e:99:94:8d:a6:e8:15:
8b:a4:4c:6f:2c:0a:a7:4e:95:0c:9d:af:bd:1e:cb:2b:80:79:
6b:64:a3:62:2b:e4:97:49:ad:fa:89:1b:39:10:8a:ad:66:aa:
67:0a:f0:5b:28:6a:cc:50:98:7f:87:89:5f:3f:ee:e9:5f:e5:
50:18:ce:e9:82:5e:ec:dc:87:d9:07:07:a4:8a:32:f9:f1:5a:
01:03:67:8a:4d:90:51:56:96:26:00:81:c0:37:62:3d:5a:de:
64:eb:dc:cb:e5:49:48:07:d6:3b:28:44:be:2a:da:23:a4:63:
e6:d6:05:7d:2e:98:b9:0e:14:ce:83:d9:3f:b4:95:0c:b9:c8:
32:c3:10:32:22:af:14:e1:44:cc:c4:a0:fc:71:8f:b8:fd:04:
4d:4d:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:40:32 2026 by rpki-client