Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: ETxR5Xs2SlRczKKpeocQidovsIMDI4OZbQ55D7C/at8=
Subject key identifier: BE:6E:D2:77:17:54:F8:5B:A3:F9:D8:08:6B:B3:77:23:07:0B:73:60
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 01A0ED0B6A8344BDB46E982E37C6FC160318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 058E
Signing time: Tue 29 Sep 2026 12:02:23 +0000
Manifest this update: Tue 29 Sep 2026 12:02:23 +0000
Manifest next update: Wed 30 Sep 2026 12:02:23 +0000
Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=)
2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: s/JFSPpS7H6muNHoTg9iGRUYgp4gR9PikMv3J+5/Z3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:6a:83:44:bd:b4:6e:98:2e:37:c6:fc:16:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Sep 29 12:02:23 2026 GMT
Not After : Sep 30 12:02:23 2026 GMT
Subject: CN=be6ed2771754f85ba3f9d8086bb37723070b7360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:04:10:83:c7:8b:42:5b:52:9f:e2:36:4c:
96:91:96:44:3b:5d:79:c7:de:01:4b:43:8d:bd:00:
4e:55:e7:5a:40:e5:22:c3:5d:49:76:8e:81:f2:56:
30:33:41:da:33:ba:6a:35:45:a5:23:49:65:b4:a9:
c6:77:3b:f7:c1:2a:c3:83:96:8f:50:11:20:af:d9:
58:34:b2:e2:cc:ab:06:3c:56:1f:61:f0:e0:71:2b:
2e:0d:fa:21:37:2f:99:37:12:04:d6:5d:c1:37:56:
6c:34:32:d6:48:40:b5:a6:ae:ad:a1:d0:de:05:92:
f9:c5:71:54:66:7b:9b:b0:9c:0b:11:ca:0c:a6:03:
e0:a2:9c:8b:cd:7e:df:41:2b:36:c6:34:93:ae:59:
de:e2:e0:ae:05:70:f5:7b:e0:cf:41:a0:5a:6d:31:
cd:f5:90:31:32:af:42:56:cc:31:7b:f6:01:17:2d:
8b:6f:82:e9:94:72:02:c7:35:e4:11:fb:93:95:af:
11:33:d9:63:a2:7f:66:6d:30:fb:d9:5b:61:8d:c1:
80:67:5a:68:7d:ac:9a:c4:a7:77:5e:59:e8:c6:64:
79:9e:ef:e6:8e:75:13:52:fa:15:0a:6f:53:7a:2b:
69:0a:bf:12:b6:75:0e:b9:45:78:00:36:f3:5b:51:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6E:D2:77:17:54:F8:5B:A3:F9:D8:08:6B:B3:77:23:07:0B:73:60
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:82:2f:48:a8:f3:48:6c:a7:cb:28:b5:32:76:35:24:da:01:
b2:96:41:59:d1:60:0a:b9:ff:04:f5:15:6d:d2:05:d0:e9:7a:
3c:7a:ca:1d:15:b8:58:6b:b6:43:8a:d6:a6:05:41:02:93:33:
d8:74:ca:e3:60:d5:ee:98:4a:1e:6d:c1:d0:09:ac:4e:1d:5a:
59:f1:31:23:49:6a:f8:72:93:d5:f5:36:f6:dc:f7:98:d5:56:
93:c0:5e:05:e3:4d:70:d7:9b:d8:5a:f5:2a:84:56:e9:aa:88:
ad:eb:d5:15:7d:af:d8:51:2c:00:87:d5:bf:11:40:85:bb:21:
eb:bc:3e:bc:a2:11:96:39:81:e5:dd:c0:54:12:f6:01:68:a2:
5b:db:8f:c0:8b:f4:61:35:c5:ac:a8:fc:33:45:45:f9:83:7b:
49:fe:77:1e:07:aa:61:9f:44:ba:68:16:10:33:62:30:da:81:
15:72:50:5f:b1:12:7f:4a:fb:fb:64:bc:9b:0a:49:f8:ab:24:
5a:df:01:09:79:3d:87:9d:9a:41:1a:8e:da:02:f7:0e:86:5b:
a8:af:6c:c9:2d:28:5c:9b:ee:92:df:ad:a5:bd:4b:12:06:10:
e0:61:7b:71:23:52:49:c8:31:8a:09:21:d6:1a:fc:54:3a:05:
2d:80:60:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:55:15 2026 by rpki-client