Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: KsMKRMZvZ52PdWE70xVYXZFK1KEcDMOyVwUZp+yAImE=
Subject key identifier: 27:54:96:EC:4D:00:3A:F9:DF:C4:A7:87:E2:32:6F:57:2A:34:BE:85
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 01A0EC2EEA7C08345F79C7BC44416AE96ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 030D
Signing time: Tue 29 Sep 2026 08:01:32 +0000
Manifest this update: Tue 29 Sep 2026 08:01:32 +0000
Manifest next update: Wed 30 Sep 2026 08:01:32 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: aJg+rAHw4A/VXDGt//LfdKfvkvNUeHIvZNIl8NQOUuc=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:ea:7c:08:34:5f:79:c7:bc:44:41:6a:e9:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Sep 29 08:01:32 2026 GMT
Not After : Sep 30 08:01:32 2026 GMT
Subject: CN=275496ec4d003af9dfc4a787e2326f572a34be85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:b2:b7:43:77:9d:39:e7:1e:6e:79:9d:bd:
6c:62:a9:b0:a1:73:e7:03:ff:8d:e9:d9:3f:3e:ac:
4a:d1:bb:5a:d4:e2:8e:c1:03:80:52:ec:bb:73:65:
95:ce:2d:f6:61:0f:0e:fb:42:e3:b2:24:20:28:4c:
f9:ba:64:91:67:a2:b1:95:b8:8d:67:b6:11:e9:d5:
3c:7c:a7:85:69:27:b4:4b:b5:a7:a9:41:00:e7:30:
38:dd:d1:f4:42:10:ad:7f:a0:43:81:5f:f2:f2:9e:
eb:db:df:7b:c9:d5:ce:58:e1:69:4d:d5:5d:39:b6:
33:c5:17:fd:93:b3:fb:8d:ff:16:8a:c3:9b:0a:a9:
5d:10:1b:c5:e5:8b:55:57:6b:11:f0:3a:53:29:ba:
76:9b:43:28:97:04:2d:a6:7c:6c:dc:35:e8:68:64:
a8:90:3d:27:d5:32:8b:02:82:9b:15:17:d1:12:a6:
7f:86:4a:91:a2:e7:6c:88:7b:ae:a9:f0:75:92:e7:
74:ad:67:dc:a2:fa:e3:ca:cb:d6:6d:69:dc:c1:7c:
0b:d6:a3:61:76:91:de:47:b5:d9:0e:6c:b6:06:6e:
39:51:f1:fa:f5:ee:76:2f:65:17:57:18:a5:24:7e:
27:64:55:89:94:77:e3:36:f1:67:cd:9a:a9:e0:80:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:54:96:EC:4D:00:3A:F9:DF:C4:A7:87:E2:32:6F:57:2A:34:BE:85
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:54:ed:7c:02:1e:47:ad:9f:53:ae:33:4c:28:7a:95:96:a6:
ab:d6:2a:0c:7f:68:9c:76:64:74:98:a2:b7:23:2d:a9:8f:3a:
83:c7:e4:fa:b9:0d:7f:68:14:41:51:97:81:da:4a:01:9b:b8:
9c:16:d8:cc:6c:5a:07:14:3f:63:76:41:5e:af:3f:75:7f:84:
8d:27:6b:76:73:8c:73:04:83:ee:3c:1d:dc:93:57:1e:e0:c7:
6a:01:8b:d6:fd:a6:b4:a3:1c:60:0f:07:81:5a:0b:2c:49:b9:
2f:9f:22:8f:df:46:c1:22:6e:7c:0d:9b:e8:9b:39:40:b4:dc:
19:be:e2:a8:7d:e6:65:90:67:a0:fd:53:5f:36:ca:30:87:6c:
d5:52:22:8d:39:dc:52:ab:2d:9d:4a:64:3d:a5:45:48:10:f5:
eb:14:c9:37:38:7f:66:d6:bb:d3:cf:5b:63:3e:3a:ef:6c:69:
49:4b:ed:90:21:94:76:bd:5a:2c:b0:cc:0c:d2:4c:91:55:6c:
46:5b:93:de:1c:59:3d:d2:7e:5e:cb:4a:5c:94:0e:9c:db:87:
49:cd:c8:21:0f:75:a1:2b:0b:ae:1a:97:c5:89:3a:94:cd:0b:
5e:94:83:12:18:7e:9f:a3:01:e8:1c:a8:90:54:c2:34:27:a9:
0d:f7:6f:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsLup8CDRfece8REFq6WrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTI0NzYyNGEzMDA1YzZmY2Y2NjEyYmFjOTljYWIwNGM2
MDEyNmEwHhcNMjYwOTI5MDgwMTMyWhcNMjYwOTMwMDgwMTMyWjAzMTEwLwYDVQQD
EygyNzU0OTZlYzRkMDAzYWY5ZGZjNGE3ODdlMjMyNmY1NzJhMzRiZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+uyt0N3nTnnHm55nb1sYqmwoXPn
A/+N6dk/PqxK0bta1OKOwQOAUuy7c2WVzi32YQ8O+0LjsiQgKEz5umSRZ6KxlbiN
Z7YR6dU8fKeFaSe0S7WnqUEA5zA43dH0QhCtf6BDgV/y8p7r2997ydXOWOFpTdVd
ObYzxRf9k7P7jf8WisObCqldEBvF5YtVV2sR8DpTKbp2m0MolwQtpnxs3DXoaGSo
kD0n1TKLAoKbFRfREqZ/hkqRoudsiHuuqfB1kud0rWfcovrjysvWbWncwXwL1qNh
dpHeR7XZDmy2Bm45UfH69e52L2UXVxilJH4nZFWJlHfjNvFnzZqp4IAYswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdUluxNADr538Snh+Iyb1cqNL6FMB8GA1UdIwQY
MBaAFDwSR2JKMAXG/PZhK6yZyrBMYBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWIt
ZThiZDJkYmE5N2FiLzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMzYzZjAtZWMwZC00OGE2LTljZWItZThiZDJkYmE5N2Fi
LzEvUEJKSFlrb3dCY2I4OW1FcnJKbktzRXhnRW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1TtfAIe
R62fU64zTCh6lZamq9YqDH9onHZkdJiityMtqY86g8fk+rkNf2gUQVGXgdpKAZu4
nBbYzGxaBxQ/Y3ZBXq8/dX+EjSdrdnOMcwSD7jwd3JNXHuDHagGL1v2mtKMcYA8H
gVoLLEm5L58ij99GwSJufA2b6Js5QLTcGb7iqH3mZZBnoP1TXzbKMIds1VIijTnc
UqstnUpkPaVFSBD16xTJNzh/Zta7089bYz4672xpSUvtkCGUdr1aLLDMDNJMkVVs
RluT3hxZPdJ+XstKXJQOnNuHSc3IIQ91oSsLrhqXxYk6lM0LXpSDEhh+n6MB6Byo
kFTCNCepDfdvpA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:29:27 2026 by rpki-client