Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier: 6H3ONxZQdfxNA4bBC+rdm3IrvcwPCbXm7P/Sk8czqDY=
Subject key identifier: 7C:9D:CB:67:C9:08:F9:5F:FF:29:36:2C:23:E0:C3:3E:FB:66:B9:17
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 019E20FF4363F67F915D6793465BB0CC516B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number: 05D7
Signing time: Wed 13 May 2026 11:01:00 +0000
Manifest this update: Wed 13 May 2026 11:01:00 +0000
Manifest next update: Thu 14 May 2026 11:01:00 +0000
Files and hashes: 1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: N8aZzdfzx0+iBOGqgQPr8d3eZaTYphhhZizE4QG1ULw=)
2: X9x54sAG8w3l-mHNMKHxAPO9ltI.roa (hash: xlwxDru5yEZFAMpF66c13VJUz7UoYnf6iZAymM3Fcv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:43:63:f6:7f:91:5d:67:93:46:5b:b0:cc:51:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: May 13 11:01:00 2026 GMT
Not After : May 14 11:01:00 2026 GMT
Subject: CN=7c9dcb67c908f95fff29362c23e0c33efb66b917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:cb:1b:d8:7b:47:5a:0a:66:87:b2:f9:de:
7e:f9:c6:4d:a0:da:c0:c2:13:03:2d:49:04:e6:14:
2a:14:86:b3:66:68:4e:0d:04:d6:78:f4:d8:02:c8:
98:87:31:10:7f:a8:4a:5e:5d:9f:af:4f:20:6e:0d:
73:3d:81:02:9a:39:38:b3:20:db:09:66:e9:3a:bf:
9a:c3:43:b3:a1:5d:f0:7a:75:4b:69:b8:5f:9e:22:
a0:8e:b5:6e:b3:39:22:d3:46:f2:e5:44:12:dd:48:
88:28:b2:2e:a5:1d:2e:f2:56:6f:c2:02:be:8f:92:
be:59:78:22:90:f3:06:13:72:d4:46:2d:7b:dd:5e:
9c:ba:cd:f9:40:80:5f:60:11:d9:ba:ba:f8:fa:57:
1f:c8:96:b0:df:21:83:e5:8f:78:e7:6f:44:68:92:
ca:e6:11:2e:8f:ef:51:93:2a:af:fb:aa:0c:3f:1b:
d0:42:47:ac:b0:b7:fc:a1:4d:ce:0e:cd:64:79:37:
5f:33:25:05:34:dd:a4:21:8b:d2:41:33:66:76:e1:
0b:ad:a9:02:18:c8:0e:da:9a:c9:e7:70:09:87:89:
37:b4:a2:f2:72:9e:7f:d7:41:97:4e:0b:dc:7a:84:
db:1f:07:fc:e6:4f:c3:02:79:28:37:9e:79:a3:d3:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:CB:67:C9:08:F9:5F:FF:29:36:2C:23:E0:C3:3E:FB:66:B9:17
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:ff:31:99:0a:9f:a1:15:c3:69:cf:ed:5d:37:45:0f:17:
bb:e7:08:85:fc:d0:78:fe:80:01:f6:6f:8c:7e:12:a9:88:8d:
0e:59:56:c0:f9:a7:23:74:eb:45:c0:c0:0a:f1:bb:9d:06:83:
c2:cb:b6:db:16:0b:9c:24:ad:cc:56:ea:92:3c:74:5b:24:81:
b1:4e:d4:22:16:04:82:51:5d:a2:56:34:22:9d:fc:62:d1:f3:
71:b1:d9:3f:fb:87:a0:6d:cb:0c:c9:df:51:d7:05:43:be:c8:
ea:fd:15:02:e0:b2:ce:00:dd:f3:77:49:ff:fa:fc:26:0d:df:
be:e2:13:68:d9:21:6a:80:d4:d9:3d:bb:68:aa:2b:1c:35:1d:
14:25:ed:5a:0f:b2:02:5a:a3:82:0e:fe:84:9c:59:48:0f:a9:
6c:ba:63:16:7c:a8:81:03:fc:cb:5a:0f:a4:e2:9a:29:a2:11:
79:33:1a:07:3c:40:c7:ac:63:70:1e:6c:0f:a0:73:9a:45:6a:
8a:d6:0f:4c:e0:72:4e:cc:78:f8:e0:5d:d0:8d:ff:32:a7:93:
00:cd:6b:0b:e9:43:49:95:91:11:5f:8b:bf:58:9d:d9:11:d6:
82:e7:65:b2:a6:f2:ad:c6:d3:87:1b:64:a7:dc:7a:71:aa:e9:
a5:1d:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:43:09 2026 by rpki-client