Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: IDDgLLPHCAFSGNCIHH9NP3v4gZ2xenjP7q0rOeEg/UU=
Subject key identifier: BB:2A:7C:8A:58:BF:B2:33:28:10:FE:F9:E7:FD:B2:2C:4B:E2:66:51
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 019D2961270D5F0603E0C90B263599724EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 039B
Signing time: Thu 26 Mar 2026 09:02:05 +0000
Manifest this update: Thu 26 Mar 2026 09:02:05 +0000
Manifest next update: Fri 27 Mar 2026 09:02:05 +0000
Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=)
2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: n9ne8/a3y4+qIjpyNqMPDmNV1ic5TklL3pXqS30Sf+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:27:0d:5f:06:03:e0:c9:0b:26:35:99:72:4e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Mar 26 09:02:05 2026 GMT
Not After : Mar 27 09:02:05 2026 GMT
Subject: CN=bb2a7c8a58bfb2332810fef9e7fdb22c4be26651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:af:40:08:a2:72:12:5a:02:bf:f9:8a:a2:
e4:cc:93:14:78:aa:43:26:e5:ac:51:00:13:2b:cf:
5d:43:6d:3a:e9:93:4e:51:6d:22:b9:c4:6d:7f:5b:
4b:08:d5:a7:89:b1:83:ba:80:8a:72:f7:79:58:b9:
a0:d6:fe:2b:09:08:71:35:b1:97:ff:38:e2:c9:19:
e7:83:b8:d7:44:1f:dc:e6:bf:49:9a:bd:5a:0a:7b:
64:16:32:4e:d3:1c:0d:bb:c1:62:50:ba:c5:6b:14:
1b:a2:8e:39:17:a6:a9:36:9a:7a:f6:cb:c8:f1:69:
cc:cc:44:74:92:f5:3b:b0:f6:26:19:32:8a:ca:d1:
6d:74:24:7c:7d:6f:cd:f9:b5:eb:e6:95:f6:0c:7b:
57:9c:41:81:fb:63:f8:b8:91:5c:83:77:fd:c6:7f:
69:0c:13:d9:f4:d0:f8:97:5b:10:cd:a7:db:80:88:
4a:9d:5e:77:c4:dd:f2:3a:0e:71:81:b2:92:16:2d:
25:5c:ce:3c:83:9c:dd:0c:ec:8d:1b:b8:40:0a:08:
8d:58:8d:7f:f7:70:38:b1:4d:67:fa:e5:8d:dd:54:
0b:22:6b:ef:1c:cb:93:b9:67:4f:ba:b5:63:c6:0b:
99:4b:cb:e3:2d:36:a6:52:dc:d4:20:5e:a7:7e:b6:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2A:7C:8A:58:BF:B2:33:28:10:FE:F9:E7:FD:B2:2C:4B:E2:66:51
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:41:43:af:a4:37:08:bf:2f:50:fc:e5:6f:55:61:98:d0:22:
07:4a:1e:1a:bf:80:40:60:a5:fc:5e:bd:50:7d:0a:85:ec:d6:
aa:12:a7:c8:e9:11:cf:7d:de:db:dc:2f:d9:4e:77:6d:ab:61:
58:27:9c:7e:ba:b4:0a:10:a8:21:3e:1b:3c:a5:ad:c8:9d:a2:
f1:90:b1:bd:1f:6c:a3:3b:f0:f6:78:04:36:76:66:6e:97:ea:
f2:44:ad:41:3c:c4:9b:59:c9:32:61:30:d4:84:8f:e7:74:bf:
4a:5a:80:35:99:39:d2:54:ef:dc:2b:2e:88:fe:d2:ff:fa:17:
42:63:c0:ac:2f:44:82:08:43:56:1e:4f:da:3b:62:89:c8:9d:
1c:b2:68:2f:60:5b:2e:ba:2d:10:ea:59:4d:5b:d4:cc:d8:51:
b8:17:f5:bc:74:8a:47:74:f5:cf:4c:d2:60:b1:e6:4b:42:ae:
dd:c0:8b:4e:58:0d:91:34:ff:ad:5d:0f:cd:9f:35:83:b4:72:
dc:da:20:3f:e3:62:2d:9a:f7:ba:5f:6c:56:be:f3:23:9b:96:
e5:31:ac:07:5a:2a:6f:09:91:18:2f:7d:a3:3a:e7:72:1c:c4:
2f:45:7d:0b:51:ef:5b:2c:a0:92:37:4c:b6:ce:55:8b:56:64:
18:8e:48:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYScNXwYD4MkLJjWZck70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTllNmYyN2Q5MjgwOTVlNTYwZGU3Njc4ZjI4ZTM0NTlk
NTU5NDcwHhcNMjYwMzI2MDkwMjA1WhcNMjYwMzI3MDkwMjA1WjAzMTEwLwYDVQQD
EyhiYjJhN2M4YTU4YmZiMjMzMjgxMGZlZjllN2ZkYjIyYzRiZTI2NjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ2vQAiichJaAr/5iqLkzJMUeKpD
JuWsUQATK89dQ2066ZNOUW0iucRtf1tLCNWnibGDuoCKcvd5WLmg1v4rCQhxNbGX
/zjiyRnng7jXRB/c5r9Jmr1aCntkFjJO0xwNu8FiULrFaxQboo45F6apNpp69svI
8WnMzER0kvU7sPYmGTKKytFtdCR8fW/N+bXr5pX2DHtXnEGB+2P4uJFcg3f9xn9p
DBPZ9ND4l1sQzafbgIhKnV53xN3yOg5xgbKSFi0lXM48g5zdDOyNG7hACgiNWI1/
93A4sU1n+uWN3VQLImvvHMuTuWdPurVjxguZS8vjLTamUtzUIF6nfrYP4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsqfIpYv7IzKBD++ef9sixL4mZRMB8GA1UdIwQY
MBaAFDwZ5vJ9koCV5WDednjyjjRZ1VlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMt
NzkyN2RlNTM5MzY0LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMtNzkyN2RlNTM5MzY0
LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0FDr6Q3
CL8vUPzlb1VhmNAiB0oeGr+AQGCl/F69UH0KhezWqhKnyOkRz33e29wv2U53bath
WCecfrq0ChCoIT4bPKWtyJ2i8ZCxvR9sozvw9ngENnZmbpfq8kStQTzEm1nJMmEw
1ISP53S/SlqANZk50lTv3CsuiP7S//oXQmPArC9EgghDVh5P2jtiicidHLJoL2Bb
LrotEOpZTVvUzNhRuBf1vHSKR3T1z0zSYLHmS0Ku3cCLTlgNkTT/rV0PzZ81g7Ry
3NogP+NiLZr3ul9sVr7zI5uW5TGsB1oqbwmRGC99ozrnchzEL0V9C1HvWyygkjdM
ts5Vi1ZkGI5IhQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:08 2026 by rpki-client