Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: U0oCQcjDzDw8HT17panP/+l/Q23oH/bNKekXz7bUduE=
Subject key identifier: EE:EF:A6:F2:52:30:1B:5D:D6:68:25:4D:36:C7:DB:09:0E:EF:02:A5
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 019F935AC460EF356366951AECD7CD4CDDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 04DB
Signing time: Fri 24 Jul 2026 09:00:26 +0000
Manifest this update: Fri 24 Jul 2026 09:00:26 +0000
Manifest next update: Sat 25 Jul 2026 09:00:26 +0000
Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=)
2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: mK5XK4Bn/TC+/4NTjRFraNAloP1xcKCQ+zIbBgyXU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:c4:60:ef:35:63:66:95:1a:ec:d7:cd:4c:dd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Jul 24 09:00:26 2026 GMT
Not After : Jul 25 09:00:26 2026 GMT
Subject: CN=eeefa6f252301b5dd668254d36c7db090eef02a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:74:2c:e8:83:1b:5c:85:94:0e:40:43:40:
9f:8b:f8:68:e1:0e:fe:ea:ae:e1:d5:7c:ff:ae:1e:
68:96:09:e1:96:60:08:d3:8e:b9:d6:8f:f6:ce:e4:
c9:9b:6e:96:ac:63:13:a6:22:00:6e:7e:84:e3:d3:
17:c9:b8:be:9a:6f:e6:aa:7c:65:de:86:d3:fd:63:
cd:36:53:96:a2:43:ea:71:be:af:6a:38:c6:7a:ca:
fb:37:c6:52:eb:5a:d3:6e:69:00:b3:90:1a:0d:e8:
c6:fa:94:98:cb:65:8a:08:a4:80:76:81:9a:72:75:
52:5f:0f:6a:4e:8f:94:30:2f:30:96:dc:7a:d9:d0:
49:bc:cc:30:ec:8c:23:00:27:10:67:04:6f:7c:ef:
b7:a1:88:b8:1c:a4:1a:c3:cb:ad:82:4c:d6:a9:cc:
c2:9d:0e:23:45:9f:1f:90:e2:8d:24:6c:7a:d7:40:
68:1d:6d:61:2b:f5:82:fe:f9:9b:b6:60:98:a1:44:
df:d1:c8:9b:77:42:28:ac:9c:93:ba:f3:ee:70:0f:
5d:c1:d1:32:e5:6f:5f:66:40:56:63:1c:c8:29:27:
70:f2:bb:12:85:bc:7f:01:35:06:19:24:18:72:0d:
07:71:5e:eb:c5:e0:89:c4:5f:72:f9:6c:b4:29:21:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:A6:F2:52:30:1B:5D:D6:68:25:4D:36:C7:DB:09:0E:EF:02:A5
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:34:70:e7:5b:af:98:b6:64:e0:16:70:75:d2:2f:e6:d7:c1:
73:21:9f:89:89:7e:a7:b5:f4:19:dd:7d:12:1c:4e:36:c1:83:
34:df:d1:59:75:a8:9e:0a:a0:64:d9:e8:b4:8f:b4:88:1f:82:
e8:b0:c7:5c:5c:63:85:65:5f:19:1a:74:cc:c1:10:9c:f8:9e:
ff:a3:f9:9a:ea:b0:e5:fd:98:f0:18:e6:62:a9:16:96:e6:a0:
b1:7c:66:28:82:48:e5:80:1b:e2:41:8e:34:cf:92:b1:68:a9:
0e:dd:05:8e:57:5c:1e:14:7d:3d:eb:9f:6f:f5:ea:a9:64:aa:
e6:99:3b:6e:82:1f:50:04:7e:5a:4c:30:40:20:08:12:69:a8:
91:8b:ad:a7:57:46:e5:e3:78:0b:8c:53:06:98:9e:03:c3:dd:
91:78:03:9d:f4:63:bb:dd:ad:02:cc:e4:7d:68:77:8e:be:05:
2d:ba:69:49:fe:64:d4:ea:87:59:7d:36:2f:59:5b:3d:d1:48:
17:d2:42:a9:93:98:1f:e6:01:32:43:b9:11:ac:1d:b0:d6:97:
b1:b6:bc:dc:81:b0:b4:d0:26:82:0e:d1:92:4c:19:2e:c9:1c:
24:5b:27:7f:cb:d2:44:61:41:f7:fa:fb:e8:82:b5:bf:81:fb:
e4:04:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:51 2026 by rpki-client