Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: wTS1nuTPaZu2LT2jGE7xJTS4vj+Z9tuZ/H/EeCnZVsM=
Subject key identifier: 83:8E:DB:F0:BB:93:5B:5C:87:14:DF:88:C0:4C:C4:FD:05:9E:11:FF
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019D28BB2570FC0E8EE59E40AF3B93A10C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 03BE
Signing time: Thu 26 Mar 2026 06:00:46 +0000
Manifest this update: Thu 26 Mar 2026 06:00:46 +0000
Manifest next update: Fri 27 Mar 2026 06:00:46 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: FkATPtIQRi8f2FNtms6lNrQvWH1c7zbu1eylsLVBEuc=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:25:70:fc:0e:8e:e5:9e:40:af:3b:93:a1:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Mar 26 06:00:46 2026 GMT
Not After : Mar 27 06:00:46 2026 GMT
Subject: CN=838edbf0bb935b5c8714df88c04cc4fd059e11ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:d6:83:4e:81:c4:c9:02:a1:d5:1e:bb:a4:
5c:ce:7b:3a:6b:4d:e8:d8:d9:e2:f6:ca:34:90:17:
f7:aa:1b:87:ed:d7:e9:92:0f:7d:6b:12:d7:f3:ba:
41:63:d7:40:07:31:76:fe:21:9e:63:e2:3b:d6:7e:
5d:c8:c8:42:c0:22:d9:c3:80:dd:1d:5b:d4:12:38:
7b:d5:fa:d5:5b:5d:78:b3:da:b7:50:ec:73:a8:60:
52:28:c9:ae:6b:8e:5d:00:0d:f5:85:64:db:78:95:
ec:ab:e5:1c:3d:77:53:e1:62:e7:a3:3d:a7:75:c1:
7c:90:e4:cf:cb:fb:fe:f7:30:ce:72:d1:74:47:4e:
b0:36:12:75:0e:e4:94:d4:67:c0:9d:8e:49:3b:7d:
aa:47:53:a6:56:9b:83:4d:ca:3a:e0:0b:8a:bc:78:
25:29:3a:68:9e:73:e3:70:d9:96:5a:57:af:37:79:
c0:17:32:46:e2:94:05:eb:0a:51:19:21:7e:6f:61:
d5:03:5c:e8:79:1b:90:fe:58:5d:d0:11:e9:d5:ce:
3d:c2:15:9c:57:83:33:62:f0:67:2b:ab:78:cc:3d:
c4:1b:c7:16:d2:e1:72:69:d1:21:8f:0a:34:be:0c:
fd:0c:27:d5:4b:94:1c:a7:5d:f8:42:f5:9c:ef:fb:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8E:DB:F0:BB:93:5B:5C:87:14:DF:88:C0:4C:C4:FD:05:9E:11:FF
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c4:6b:6f:5b:70:32:15:0c:f2:50:fd:ea:aa:0d:c6:b5:ba:
ca:8d:59:5c:79:76:2f:46:0c:65:55:8d:af:aa:6e:43:73:1a:
b0:d3:5d:50:6d:40:05:52:5e:bc:87:9d:ca:53:61:3b:ae:a8:
f4:70:8c:3e:11:cd:38:a1:11:9d:9e:52:fc:0d:30:8c:6d:75:
0a:68:b3:11:6e:63:d1:c4:74:a1:4e:74:d8:b8:4f:fe:8f:e2:
f1:31:b8:e7:4d:d4:7e:76:5d:ce:7b:97:53:ba:24:0d:4e:8d:
3e:5b:5c:9d:4b:22:65:fe:b4:9b:05:2f:1c:c3:83:23:14:2a:
87:85:c5:8f:58:f2:ca:03:e7:04:92:3c:f8:9c:b0:49:67:bd:
76:5e:b2:d1:8f:80:e5:cf:2a:9f:5c:8b:ae:b3:64:44:6f:ee:
14:27:e2:9d:37:dc:4e:49:fe:64:7b:e4:19:a6:9a:b7:88:cf:
56:47:2f:fb:3e:7e:88:45:62:00:88:b1:82:fb:b2:7a:96:49:
18:9e:18:60:e4:dc:3d:9b:4a:50:96:93:db:8a:2c:c5:3a:ef:
44:f2:c5:0b:b8:f9:a0:96:c5:e5:35:68:0c:c2:a4:a0:09:ef:
f6:1a:4d:f5:2f:5d:e0:b3:ad:c7:c1:80:cc:85:d2:09:cd:fd:
34:e4:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:39 2026 by rpki-client