Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: RYgN64aGQOE+YQn3wjDsHJ8S2EQXqZJiIJt5KXjc7Ug=
Subject key identifier: FC:55:65:80:E2:C2:2F:25:86:12:59:2A:D0:A5:4A:92:A7:B7:F4:8D
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019D2884CD69F636DE5990882B31A56DD0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 011A
Signing time: Thu 26 Mar 2026 05:01:24 +0000
Manifest this update: Thu 26 Mar 2026 05:01:24 +0000
Manifest next update: Fri 27 Mar 2026 05:01:24 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: ljm5P8NinhwMmMdv/H9dPxxG04MSs1Lg1eLq61LVK9s=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:cd:69:f6:36:de:59:90:88:2b:31:a5:6d:d0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Mar 26 05:01:24 2026 GMT
Not After : Mar 27 05:01:24 2026 GMT
Subject: CN=fc556580e2c22f258612592ad0a54a92a7b7f48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:c8:e0:6d:59:ca:02:60:3a:23:a1:bc:0f:
21:89:12:21:ff:10:78:d0:e8:ef:35:3e:1a:44:d1:
4e:1e:32:2c:96:9a:c0:69:ad:11:57:a1:59:91:f5:
d4:42:d1:ee:f0:10:7d:8a:62:f2:71:3f:f6:5f:f0:
76:f9:13:3e:a1:e8:0b:b2:c7:d0:3b:6a:f5:88:ce:
38:94:88:1c:a1:10:e2:9e:56:cf:5a:56:36:9d:cd:
fb:14:cb:3c:8d:01:21:5f:c5:3f:9c:a5:9d:fd:48:
fd:eb:10:c0:ab:c2:19:4f:e7:aa:d2:61:06:68:30:
06:53:aa:0f:44:90:d5:45:eb:0a:e4:25:1c:46:51:
42:97:95:49:3a:57:c1:ec:9f:93:2e:18:bf:18:f8:
4e:4c:c9:5f:99:13:65:34:7d:38:d4:22:c2:82:56:
f8:ac:bb:bd:be:c7:0b:23:f2:97:17:6c:19:b0:88:
dc:4f:0a:af:f0:5e:fb:f8:34:ea:8a:9d:20:f3:e2:
c8:e8:32:94:82:a7:0e:cb:5c:6f:eb:50:f4:81:dc:
3e:2b:88:74:61:27:49:b4:8c:85:0e:19:06:bc:9a:
5c:77:12:d9:b3:24:e7:f6:17:f2:93:17:7a:b7:ca:
fe:1b:b7:81:5c:ec:42:26:05:51:c5:c6:57:06:f2:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:65:80:E2:C2:2F:25:86:12:59:2A:D0:A5:4A:92:A7:B7:F4:8D
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:23:e3:e9:52:7b:66:e0:8d:d2:99:7e:1c:d2:9c:68:17:f9:
b8:5c:29:61:e2:a6:a8:fb:09:af:2e:a0:76:aa:c8:55:10:d0:
be:b5:30:4b:95:70:42:49:46:81:89:45:87:c9:b1:2d:01:fc:
f7:5b:12:cc:05:d6:bb:70:8d:f2:41:1b:ff:56:3d:ce:c4:68:
40:aa:b8:3a:ea:55:cd:72:5b:a4:63:ee:48:83:11:23:e0:27:
25:3c:11:b5:5f:e6:ca:04:a3:e2:8c:c2:b9:63:56:3b:65:30:
3a:1d:cb:fd:28:5e:d0:10:23:d6:5f:21:10:9b:87:c5:e2:30:
7b:c0:0f:25:f6:2a:75:a9:39:e8:39:8a:01:81:f5:07:02:1f:
40:32:75:12:9c:e0:e0:da:2c:33:bf:d6:74:b3:cd:93:e3:c4:
14:67:56:f8:28:90:af:ed:00:3d:74:75:7c:67:8d:6f:16:8e:
2d:56:b0:8b:40:e4:91:77:3d:c8:c6:36:23:a8:7b:25:6c:06:
1a:59:00:00:68:3f:76:14:e4:d5:5a:b5:66:4d:d5:ec:d5:ab:
1d:42:15:6e:65:fc:d0:e8:ff:5c:62:dd:14:ea:e3:e7:7d:da:
ee:04:f9:13:82:ad:c9:f9:59:0c:7c:cd:74:ca:ef:3a:d2:3e:
b5:1b:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:35 2026 by rpki-client