Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier: 6MvfrH3mxHiMU+rR651JSukJUQ79XQM+3bshoSZHZBs=
Subject key identifier: E2:0A:98:69:2C:92:16:B1:DE:9A:EB:D0:DF:8A:8A:92:AE:6E:30:7A
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 019D26CCDD009BA1A34219AF9964535EA596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number: 0555
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: 9zHlW6xfmyURsAXTYq0PK9oPUEA.roa (hash: CPYRyV7yCkjWy3aVUIMVZcjIfqBkbNBK6TsEp1SL/Vk=)
2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: 3b5zrcJ1b51mkLe2SfwBYDO3OHYvuFoLw0mYaGPF8tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:dd:00:9b:a1:a3:42:19:af:99:64:53:5e:a5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=e20a98692c9216b1de9aebd0df8a8a92ae6e307a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:c7:4a:8a:a9:f0:db:00:08:56:64:aa:71:
6f:6f:4e:39:06:85:0a:9d:32:55:04:43:5b:1e:4c:
37:88:9e:69:4f:9a:df:7d:c2:70:85:71:5c:8a:a9:
aa:f9:b6:18:83:69:3e:57:9e:44:b2:44:4d:ef:4a:
e1:bd:bb:f9:75:8e:8d:48:b7:61:1c:40:60:56:b0:
50:7a:75:5f:be:db:68:51:a0:45:1a:81:f7:e5:ce:
62:d7:8d:6f:4b:9b:0f:3b:25:77:62:70:51:20:63:
47:aa:e0:4d:27:b8:2e:d7:0a:46:fb:c7:87:bd:d0:
6e:f6:aa:ce:5b:fb:8b:18:c4:35:c1:64:e2:3d:86:
52:3c:f0:c3:d4:79:0f:4c:7d:7d:90:4c:db:4b:69:
56:50:05:b9:72:35:52:bc:68:32:73:5c:3f:f9:f1:
d6:c8:54:9b:b3:05:37:74:1f:51:bc:46:17:41:66:
eb:cf:dd:2a:12:54:3a:55:f8:18:c6:5c:ac:1c:ea:
61:b2:4e:a0:e9:b1:1e:37:ea:98:2b:26:1a:09:a2:
62:bc:6f:e7:04:42:4d:c9:ce:26:d9:a0:a4:c2:5b:
84:ba:4b:43:3c:f6:0f:78:33:84:e8:8a:67:56:d9:
b0:d2:9e:d2:68:b8:1e:52:64:e6:92:95:8a:3d:13:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0A:98:69:2C:92:16:B1:DE:9A:EB:D0:DF:8A:8A:92:AE:6E:30:7A
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:20:13:ac:d3:df:dc:00:5b:4c:58:cb:90:0e:34:35:36:
d5:76:1d:64:b8:81:bd:f7:9d:33:55:b2:90:d1:4a:8f:a6:7b:
51:c7:d7:2c:35:99:12:c4:51:8d:3b:38:c7:7d:6b:f6:1b:2c:
34:c6:ae:b5:3a:8d:6e:71:15:7e:88:44:3d:c4:4f:e4:ca:b8:
5c:b5:aa:c2:70:ac:ae:d7:e8:0b:cf:70:c0:d0:8a:32:f9:39:
a8:36:5c:59:e3:b6:3c:1d:b7:8a:27:1b:86:b6:20:ae:29:ba:
89:16:02:2d:10:98:e3:02:24:cd:03:0d:18:53:01:b8:11:ab:
a0:9f:4c:ab:9f:8c:7c:fa:32:d8:38:62:34:32:c2:98:af:a7:
80:a5:58:89:d5:69:57:95:06:33:4c:47:b8:f9:f9:ed:e7:c2:
3f:3e:14:28:37:ee:4a:67:52:51:8f:fa:10:0c:e9:26:d0:a0:
e5:7a:ce:0d:93:f5:fe:67:8b:ab:50:7f:66:6d:96:bf:39:f9:
9f:b9:84:65:e2:06:36:1c:70:7c:9b:fc:d8:ec:93:e0:8a:66:
d6:bd:b3:60:26:a2:63:d1:f5:9a:5c:60:ae:49:df:40:5f:a6:
34:7f:f8:7b:2f:90:ff:f0:d7:ea:5f:b8:c4:04:8f:e1:6a:4a:
55:41:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:03 2026 by rpki-client