Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File: PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier: +6u0zqcAjOjLZJuYL4IlbzQafMheJfA3wUSEuE2DSEw=
Subject key identifier: 1C:D9:54:0A:A0:11:CF:18:A1:49:7D:1B:85:63:1F:C1:79:7A:8F:96
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial: 019D2627FE6C0D330EE2E95F179FEA0A9618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number: 11CB
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: DaVNIpMuIlL/SS8bL1wDLXFbbz9V0xh2ZL/CSn2taDw=)
2: Ws8OJKe1Mz4n1mFKoky89qidQeY.roa (hash: ivJQDuxpJTpPDgi/WNl2RvtQDiFKmYxXaBnJp5IZRaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fe:6c:0d:33:0e:e2:e9:5f:17:9f:ea:0a:96:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=1cd9540aa011cf18a1497d1b85631fc1797a8f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:56:b4:10:39:58:d6:23:2d:9e:5f:df:f3:
fc:93:e4:e7:73:39:9d:17:9f:f6:91:c3:6f:75:55:
33:24:1f:73:94:93:c8:ee:c8:e5:30:79:b7:06:f5:
f5:0f:2a:b1:d0:34:12:cf:c5:95:d7:ea:8c:17:cc:
6c:49:7f:02:9a:ed:e2:f5:a7:75:3a:4a:98:5d:db:
c7:8f:d1:53:bf:86:c2:89:d5:f2:6e:bd:fe:08:f6:
44:73:89:96:b1:c0:b1:2d:7e:0b:0e:43:67:31:01:
8c:d3:fd:72:05:23:b1:06:70:2f:d2:62:f9:32:4f:
2e:ae:d5:3c:9f:d9:6f:3b:79:1d:3b:b2:66:12:e0:
23:d6:21:bf:d0:b9:61:2a:c2:87:33:6a:64:ff:43:
67:72:e3:e6:0f:f7:a1:b3:f0:29:ec:55:7d:ff:79:
6f:57:3e:b4:c4:af:6a:bf:cb:56:3c:a1:54:e1:c8:
d9:46:90:ba:10:0f:bb:86:6f:60:cd:ce:06:a2:0b:
b7:2f:2b:6e:a2:7d:b3:1b:80:67:12:35:46:8e:3f:
45:1b:0c:05:01:72:a6:ac:26:9e:05:d0:64:0b:03:
09:86:34:52:57:1d:5d:8d:5b:09:4b:bc:b2:ab:26:
0a:bf:1a:2f:65:8d:3d:bd:fc:52:9d:5c:b5:6b:6f:
eb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:54:0A:A0:11:CF:18:A1:49:7D:1B:85:63:1F:C1:79:7A:8F:96
X509v3 Authority Key Identifier:
keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:13:5a:8c:d3:da:cb:fe:62:36:35:87:3b:81:99:07:9c:07:
94:fb:41:d3:6a:21:b7:07:bd:52:34:d7:ea:42:1a:f4:f8:0e:
c9:3d:12:4e:41:ac:28:e6:a3:46:8d:95:05:d2:bd:bf:49:98:
f3:c7:b4:1c:84:50:1d:e0:ce:82:15:01:1c:1c:4a:59:04:7d:
78:1f:62:cb:c6:bf:c0:02:20:7b:04:0f:30:0f:e2:46:e3:f5:
e8:35:ad:68:ab:53:ae:02:1a:60:2a:6c:27:db:71:00:45:6a:
48:95:7d:14:3f:70:7e:02:9d:e5:3d:36:0d:92:3a:11:fc:26:
ed:83:b0:9d:6a:cc:02:65:f5:14:8e:be:ab:3e:d4:a2:33:1f:
e8:61:35:d3:25:6c:b3:c2:d7:fe:82:5a:48:a8:f1:9d:03:a9:
65:a6:b0:7f:e7:c5:3a:9b:dc:22:66:ea:4c:5a:86:60:30:2e:
bd:01:43:db:85:7c:a6:27:b2:77:ae:1e:34:68:46:48:ed:79:
41:40:d6:b2:6f:81:91:53:81:4a:f9:33:24:54:ba:b9:92:10:
a6:e3:48:b9:fe:33:9a:d2:72:8b:1f:0d:f4:5a:ef:b5:75:f7:
ff:0f:5d:ab:87:29:4d:fa:12:e6:50:00:be:df:3c:e3:c5:ed:
77:5f:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:44 2026 by rpki-client