Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: 7/BdF4fY/iKkHxaNw7TvIIvl+fhs1QFJVOCFLTkaT8I=
Subject key identifier: BF:0C:D0:8D:1D:30:6A:16:F1:DC:43:7F:70:28:DB:BD:CB:1F:6D:13
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 019E1DFDF7E0480F808C837192146D2D7950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 9A
Signing time: Tue 12 May 2026 21:00:43 +0000
Manifest this update: Tue 12 May 2026 21:00:43 +0000
Manifest next update: Wed 13 May 2026 21:00:43 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: e+fVPIkmryCm0EoLTwT+SFjHF/aWuiinQSrzND2tUxQ=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f7:e0:48:0f:80:8c:83:71:92:14:6d:2d:79:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: May 12 21:00:43 2026 GMT
Not After : May 13 21:00:43 2026 GMT
Subject: CN=bf0cd08d1d306a16f1dc437f7028dbbdcb1f6d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:cc:b1:55:cb:2f:0e:99:91:3e:6a:d6:38:
67:4b:0d:e5:71:a0:7f:e3:58:4e:84:ea:4e:36:e1:
09:1f:70:7c:f9:27:23:42:25:b0:ac:6c:d8:98:a3:
4d:22:96:7b:63:60:0d:bf:2b:1c:fc:bc:e2:f5:c4:
4b:c8:1e:93:61:da:82:a7:dd:c2:fe:99:bc:2a:8d:
2d:a0:c4:79:e5:2c:87:2d:4e:e4:f8:9a:38:39:01:
01:41:c7:d8:5f:69:c1:91:fc:45:e0:82:7f:50:8c:
d1:ae:86:57:38:d5:a2:4b:b0:fb:68:cf:8f:dd:bb:
d4:8a:0e:13:4c:b7:60:7c:56:8f:2d:3c:3c:61:d2:
31:d3:5b:92:e4:49:41:a4:83:56:ee:47:ad:1c:24:
ce:5c:39:2d:83:9d:cd:46:63:db:69:c4:b1:e2:65:
46:be:7b:e3:3d:6a:a4:7c:de:91:29:6d:4d:cd:af:
8e:7d:f4:b3:c9:60:e5:8f:99:52:0e:ab:f6:9f:00:
6a:4f:47:8c:54:f3:a2:ce:1f:89:8a:8c:84:cd:69:
1d:d5:ca:9f:19:4d:23:1c:12:59:c3:92:40:2e:45:
9f:71:52:c9:a3:a6:84:23:11:46:e1:4e:20:d5:08:
1f:ff:db:cd:96:e0:fa:cf:91:69:53:0a:c7:eb:de:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0C:D0:8D:1D:30:6A:16:F1:DC:43:7F:70:28:DB:BD:CB:1F:6D:13
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:20:51:ce:c4:61:77:7a:1b:a0:1d:07:f0:f6:13:88:27:c1:
ae:3a:7f:29:f5:a7:28:4b:b3:20:be:de:53:80:69:ee:44:88:
39:e5:9f:fc:04:91:f5:cf:55:16:2a:9b:72:0b:af:82:de:8c:
07:d5:b0:c3:68:75:3f:be:2a:78:5a:82:e4:ad:66:45:a3:a8:
58:ad:89:47:3b:f7:5c:fa:40:e9:0c:d0:e5:e6:c4:01:06:7f:
99:d0:54:6f:2f:a9:ba:0f:54:fb:cb:f9:a7:bf:e4:0a:4d:45:
d9:ee:42:52:94:8d:c6:d9:9a:82:2f:8b:5c:c4:27:a1:9f:56:
a8:7d:1c:0a:bf:ed:78:ae:23:08:c4:c0:e0:bb:6e:99:ed:6c:
72:8c:89:d4:61:07:18:1d:7a:23:2a:73:2a:16:4d:6a:e4:f9:
4e:2c:b0:55:b2:4f:cb:00:fb:c0:55:e9:5d:c7:2c:6f:cb:3e:
5c:3d:46:0a:7c:5f:50:10:73:d1:47:33:b1:fe:e0:43:6f:ce:
de:cf:54:90:49:e0:0f:ff:84:ff:13:e1:fa:61:75:61:be:88:
29:2c:39:67:3b:3d:51:dc:8f:15:6d:65:26:41:b2:79:b0:38:
63:81:99:6f:a4:6f:71:8b:3d:67:0c:b5:6b:51:8d:3e:8d:eb:
11:23:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:56 2026 by rpki-client