Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: 1xNPS3XStoW6wVhi6PfBxBnG0GxA+5pCTneAPdVmtMk=
Subject key identifier: 31:3A:9C:0E:AB:7B:5B:D0:C5:25:41:98:BE:4B:CF:A8:5C:3B:5E:66
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019E1DC71D39C9B0396BF53B0A6A1C058DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 0199
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: MYS5rbESY47PWkURWqLatLkH86YFbuEEv/3hBZ7KQF4=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1d:39:c9:b0:39:6b:f5:3b:0a:6a:1c:05:8d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=313a9c0eab7b5bd0c5254198be4bcfa85c3b5e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:1d:37:46:81:5d:76:7b:3d:52:42:62:cd:
fe:f4:76:df:c3:8a:66:80:42:b8:e8:14:31:aa:05:
32:48:3c:5d:e6:ee:b6:3d:25:dd:f5:f4:8f:35:61:
e9:82:07:18:9e:32:f9:fb:19:92:c8:30:01:01:6e:
9a:36:1f:b1:f3:f7:d5:fd:85:42:1c:57:31:4f:80:
79:1c:ff:85:c6:81:62:29:c4:75:cb:92:3f:72:8e:
e7:fa:a7:1a:a2:e3:02:d9:87:78:a5:c7:ed:d6:1d:
17:32:0e:f0:b5:f6:95:4a:86:c2:6f:c6:c4:bc:02:
6e:bc:b9:37:e8:41:dd:bc:5b:2b:c6:cb:44:07:1c:
85:d8:82:c9:0f:5f:f4:09:a1:3c:ed:04:6c:18:88:
42:70:23:b2:46:ef:fa:72:14:e3:86:50:c3:c4:8a:
39:b7:0a:ef:b4:89:c6:55:65:88:7f:c7:e2:91:7a:
fc:4f:d3:8e:9a:3a:a2:90:61:ed:57:d7:25:c3:d3:
a8:3b:b8:f7:71:aa:2c:e4:d4:76:db:14:92:cb:29:
a9:19:2c:07:1c:52:55:13:79:3c:7c:20:0d:d9:8f:
e6:68:b7:24:43:b3:9c:6f:c9:cb:bd:63:92:12:0f:
54:e3:25:ad:1a:aa:cb:e7:28:38:8c:3c:41:47:7c:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3A:9C:0E:AB:7B:5B:D0:C5:25:41:98:BE:4B:CF:A8:5C:3B:5E:66
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3f:64:57:8f:6c:f3:7f:de:26:f7:e8:d0:50:3b:20:9c:f3:
ea:2e:54:a5:fe:68:5f:12:f8:e6:c8:8b:ee:37:cc:e4:f2:1b:
d6:00:62:6a:5d:a9:5c:4f:06:4c:00:1d:7e:5c:ff:b5:c9:69:
34:82:05:7b:52:a1:be:06:3f:f2:ac:5e:79:a1:10:a8:1a:18:
86:f6:27:da:fe:27:93:7b:3c:0a:ce:c8:48:8d:0c:12:11:9b:
5c:20:e6:34:47:76:ef:a8:9c:cd:47:2d:88:9b:8f:40:70:b4:
55:52:c9:4a:60:c7:b9:8e:60:fa:39:f9:dc:e8:27:e0:ba:c0:
4c:30:f9:a2:85:a2:ca:90:d5:6a:7b:04:98:58:ad:61:d9:4c:
81:3c:59:c5:1c:d4:f5:4b:40:50:a3:c9:48:7f:7c:76:ec:3b:
68:c2:04:e3:bc:09:94:04:a3:be:3f:aa:c9:85:6d:02:cf:23:
7b:d9:bd:b7:e6:96:1f:54:c7:b5:bf:1e:3d:c1:36:07:af:7e:
99:82:17:0e:bb:97:cf:59:94:87:54:4e:91:43:62:38:d1:96:
5f:dc:14:c1:f0:f8:b7:7e:04:e1:45:da:c2:43:80:e8:40:12:
aa:fc:ae:cc:45:34:4e:15:9a:f8:bd:a9:66:e4:50:86:ed:a6:
8b:9a:47:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:42:48 2026 by rpki-client