Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: uz39PJAADUzE32BlXFg6N8roqb4AHOPkqiREnIAOrus=
Subject key identifier: 45:A6:9C:93:E2:73:B7:C4:3E:22:5B:4C:18:B2:02:9E:A7:D1:0E:54
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019F946DA7844D92E60742E387062636F7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 025B
Signing time: Fri 24 Jul 2026 14:00:42 +0000
Manifest this update: Fri 24 Jul 2026 14:00:42 +0000
Manifest next update: Sat 25 Jul 2026 14:00:42 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: I3jqBdouIsXGwX94KGDtkawzqD+wLO969ZMhTkGtt30=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:a7:84:4d:92:e6:07:42:e3:87:06:26:36:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Jul 24 14:00:42 2026 GMT
Not After : Jul 25 14:00:42 2026 GMT
Subject: CN=45a69c93e273b7c43e225b4c18b2029ea7d10e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:16:7f:3d:28:7f:0f:c9:25:a4:5f:30:b3:
1a:a8:e5:1f:1a:40:3f:0d:e2:3c:2e:f9:3f:22:c8:
28:53:d7:4e:34:bc:73:a2:0c:50:0d:2e:85:09:f3:
26:00:ee:68:4a:f8:51:55:85:ab:40:fd:d5:22:8b:
83:75:4a:d5:c9:13:09:30:91:f3:78:2b:85:a1:c2:
28:af:5c:c4:93:06:0d:a8:84:1f:20:68:3e:43:d0:
2e:3f:e2:b0:3b:94:d2:a8:f7:40:9b:d4:9f:72:bd:
1a:fd:d1:5d:eb:dc:e1:de:88:40:b5:41:ff:5c:92:
c6:02:20:75:04:38:85:89:23:0c:77:e3:1c:95:96:
37:ab:cc:37:f7:a2:32:4a:b0:28:7d:ad:c1:a3:27:
7d:ad:5b:6e:19:53:9b:14:75:18:bf:2f:18:56:f6:
19:5d:6b:d6:d0:7c:85:e3:f5:e6:a1:50:33:a8:bd:
65:d6:33:ab:a3:8e:c0:8f:38:38:46:ef:5f:71:25:
31:65:8c:9f:0a:46:fb:4f:da:46:ee:5e:2f:a8:b7:
4f:d8:56:6d:06:3a:8a:c5:35:5f:24:1c:ba:28:e4:
48:06:42:c3:ce:7a:fb:13:37:34:69:6b:7a:b3:de:
6f:33:ca:54:c4:22:76:fb:e7:b8:c1:50:82:79:82:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:9C:93:E2:73:B7:C4:3E:22:5B:4C:18:B2:02:9E:A7:D1:0E:54
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:40:84:ad:1c:eb:e7:4e:cf:ab:27:3c:3d:00:71:20:47:
52:92:5b:07:d1:f0:ec:d1:ca:70:5d:7a:27:c0:cc:a0:5f:b5:
8a:5c:ef:f4:10:a1:03:10:e9:4d:fc:38:b6:88:1a:b4:68:49:
c7:c0:24:47:bc:0f:e0:75:0b:7a:f0:d3:2f:89:c3:33:b8:b8:
b6:94:8a:87:d1:49:61:ca:83:86:0b:cd:13:d2:d3:4b:18:af:
1e:49:20:08:bd:8d:6d:04:0f:99:4c:a3:a7:c4:05:85:5e:f5:
e8:08:32:08:40:57:83:69:8e:81:ad:d5:0d:e3:cc:2b:ac:c1:
02:98:1f:5f:42:2c:2a:89:0d:ce:26:47:f0:87:ef:23:71:13:
61:d9:d6:6d:61:b0:28:6b:25:4a:48:de:a0:0b:17:ed:e1:67:
2d:01:7a:5d:fe:86:ca:25:d9:cc:4c:db:34:44:55:52:6f:f3:
f8:c5:11:e4:d8:41:18:5c:1b:d3:5e:08:29:1a:e9:72:f3:be:
80:54:3a:ce:ee:55:9d:99:f7:37:78:c0:89:c7:dc:52:1a:63:
7f:1e:80:50:6e:82:99:3e:f3:5c:78:f3:4c:09:dc:23:f4:44:
99:92:ca:75:6e:14:37:bc:e8:9f:72:35:1b:3c:fb:dd:5e:c1:
74:db:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:46:15 2026 by rpki-client