Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: ccrOEAXTX8SO8P2r/QL8ui3/NDgH1rsa01SCwub+m4A=
Subject key identifier: 23:39:6E:44:12:FA:87:C8:9D:41:E5:49:91:1E:67:F3:8B:69:C4:2A
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 019D2704C568B8ED3BA4FABAD2205FD2FED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 0C8C
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: OVYD6LDqKHuBhRjzNYtsVBKKhV7/RM8Lbn7GNzpOkkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c5:68:b8:ed:3b:a4:fa:ba:d2:20:5f:d2:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=23396e4412fa87c89d41e549911e67f38b69c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:1a:ba:89:1c:05:66:62:1a:d2:b8:c8:74:
de:32:eb:c0:aa:8b:5c:01:39:3b:2d:71:b7:86:94:
0b:f3:29:83:3b:5d:92:a2:e3:ae:5a:99:54:eb:ed:
90:73:0c:ff:68:de:90:a9:9c:02:60:24:fe:8d:eb:
6a:8d:23:11:d4:2a:06:f7:96:14:4e:e9:f0:94:55:
25:99:2a:fc:77:5c:1e:41:9c:e0:3c:3d:48:f9:df:
82:c5:6d:da:36:4b:14:a5:85:61:00:7a:21:9f:3e:
54:d6:d1:8d:ad:ce:b0:43:5c:a6:95:d7:44:33:15:
ec:61:7c:9b:b5:06:a5:71:bf:54:c2:b6:3f:60:e9:
e7:8a:6f:c8:6d:b3:95:52:67:dc:3e:03:5b:e3:90:
f5:cf:56:02:cb:33:a5:96:18:be:81:44:fc:82:7b:
f0:61:93:94:01:74:db:7a:6c:ae:d4:16:b1:57:f1:
da:c3:ba:56:0f:09:bb:33:c7:05:32:41:f7:59:7a:
f1:8f:2c:5b:29:71:38:76:76:c6:b9:7b:ee:09:33:
98:c4:79:bd:26:8e:f6:f5:7e:77:99:51:56:02:6c:
ac:9c:42:a1:30:40:3a:ac:7d:ef:55:14:ad:ff:ad:
93:ef:54:b4:8c:35:25:b8:c5:35:a7:0e:03:60:ce:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:6E:44:12:FA:87:C8:9D:41:E5:49:91:1E:67:F3:8B:69:C4:2A
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:42:1a:15:b4:75:b4:6f:a7:b9:9f:3a:d6:1e:1e:49:a8:87:
1a:00:69:2e:65:ad:f5:66:0b:fa:45:fd:50:36:e3:75:f7:df:
02:e0:02:fc:0a:fb:99:15:9d:0d:d8:91:c3:06:7b:05:6d:5c:
19:f2:de:9e:77:6f:aa:d3:b1:9d:e5:04:4d:69:fa:e2:17:88:
4e:3c:0a:32:5b:00:86:9b:4c:83:e0:a7:90:4e:84:85:86:ef:
4a:e6:dd:18:8f:e1:04:07:ce:66:5f:c0:25:40:1f:e5:60:de:
77:69:58:f5:44:55:07:1a:f0:46:28:8d:99:3f:01:fd:6f:8b:
25:94:73:5b:52:93:37:94:6f:ed:20:cf:68:5f:7f:13:40:a1:
85:ae:2d:06:23:0b:6a:01:7e:f4:20:0e:b9:96:5e:08:b4:fa:
52:cf:3d:ab:63:34:96:e7:50:4b:64:2c:8b:64:86:a4:06:6a:
8d:6b:91:97:f5:7c:b0:2d:a8:ed:52:25:ae:ff:f6:6a:ff:bb:
f6:47:a3:44:8a:36:9f:19:bc:9a:d4:dc:06:b9:27:22:24:b6:
f6:a0:dd:4a:c9:9a:1b:4e:3d:f7:58:94:10:d6:b9:b5:ad:ff:
ad:61:91:5c:59:9c:e8:cd:5e:09:bd:33:ca:44:95:6e:24:25:
8e:b9:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:45 2026 by rpki-client