Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: iEEw+eNZipAxje47/IYRWLxo3m73osJOm7epfN4wURw=
Subject key identifier: 03:43:25:90:7B:B3:68:42:4C:97:C1:B0:CC:A4:5E:E7:14:95:26:2E
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019E1DFDDDAF811780AE942FD9F8ECD20DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 043D
Signing time: Tue 12 May 2026 21:00:36 +0000
Manifest this update: Tue 12 May 2026 21:00:36 +0000
Manifest next update: Wed 13 May 2026 21:00:36 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: Jth3FTQu/MapcS1O/9/M/7t+f9eG7+htjjcKV1lyAds=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:dd:af:81:17:80:ae:94:2f:d9:f8:ec:d2:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: May 12 21:00:36 2026 GMT
Not After : May 13 21:00:36 2026 GMT
Subject: CN=034325907bb368424c97c1b0cca45ee71495262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:9b:50:a0:45:85:d0:fd:69:76:e1:d6:a8:
db:31:aa:90:03:42:cb:a8:09:29:f5:83:5c:86:88:
b9:d2:21:fd:ab:d3:7b:37:7e:31:23:d4:4b:2b:8b:
7e:3f:d0:f5:4d:cd:df:0e:17:cc:e3:80:27:7c:c2:
b4:5c:e6:a4:e0:c9:3f:b8:ff:2f:bf:b2:4b:7d:5d:
42:4c:12:6b:3a:f1:5b:3d:9b:68:7b:33:c0:98:f4:
02:98:72:dc:91:82:20:39:53:27:59:a9:fd:84:aa:
e1:f7:ab:4e:cc:5e:89:8b:4e:8f:33:1a:74:fa:49:
8d:6b:1b:7c:77:ab:2d:19:86:3a:b0:1f:89:6b:31:
73:60:2d:bc:0c:64:6c:3d:47:af:e7:4a:b3:e0:ce:
54:d1:eb:43:13:12:43:23:05:e0:2d:6d:a8:cb:0c:
89:df:aa:f1:b4:43:2a:07:67:b4:b4:ac:51:4c:ae:
39:db:5a:03:34:d0:f5:88:fa:6c:07:f5:3c:74:30:
43:07:f2:a4:ad:e7:94:43:5f:e4:20:af:db:3d:fd:
03:ae:e2:ed:10:0a:d7:ba:2d:a3:ba:c4:e1:b4:96:
3a:8b:98:c5:1d:85:f0:35:f7:de:b3:71:b4:48:44:
4b:72:05:87:15:b0:93:b0:15:0b:83:93:49:c5:c9:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:43:25:90:7B:B3:68:42:4C:97:C1:B0:CC:A4:5E:E7:14:95:26:2E
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:79:6e:5c:a3:a5:61:70:05:0b:dc:f2:07:4a:be:e4:73:16:
15:e8:42:4f:05:cb:ca:2b:9d:fd:82:f3:6f:d0:4e:de:28:9c:
9e:1c:f5:b6:ca:6b:66:4a:1e:2a:cb:74:22:bc:12:f6:5e:d9:
33:eb:59:8f:4f:ce:29:b5:cf:7a:6e:55:f9:0f:f6:f3:c6:82:
f6:52:d7:81:d0:da:36:01:99:34:c8:95:a1:ee:03:d3:c5:99:
c8:6f:59:96:10:95:f2:86:19:2f:cd:78:65:24:ca:1a:33:9b:
aa:73:a7:e4:2b:59:d1:2c:01:b9:48:42:6e:8e:3f:f2:2d:d9:
8d:49:1b:7b:00:4d:0e:0c:d1:2f:d3:3d:b1:1a:75:ee:90:9a:
7f:ae:e5:5a:21:12:f7:e1:e5:12:4f:f9:3c:e9:fb:a2:0e:c9:
99:bf:fc:54:5b:6c:48:a9:d5:2f:62:5a:37:6f:24:5b:f0:99:
b8:ea:26:dc:ba:ce:8c:9f:3a:d0:87:ed:19:1d:8f:f0:86:19:
39:97:59:c7:d2:4f:00:c5:34:8b:1b:f1:17:bb:1d:93:c5:1d:
6e:75:f9:e7:71:ca:3b:ac:e0:60:45:c5:1d:15:4d:4c:86:bb:
da:2b:51:d3:2c:94:f9:53:6b:d0:88:bb:21:96:3f:62:f6:9d:
e1:85:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:47 2026 by rpki-client