Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: zfkB1zzwcWYoB3VNc9DaWAQL60x4uRQvtFvsSqop/oo=
Subject key identifier: 4B:43:6B:BB:AA:48:94:80:6D:D6:B4:A7:A9:57:15:54:39:67:26:1D
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 019D265F7772AB12E2273AA0DED9674746AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0AD5
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: OUaWQ7HauQSwY/JDoWk6v2TBdnv9v2UtYfEpjtFYb9c=)
2: bKvy0wAyXjDdBCSQNQJ_GGUvadk.roa (hash: OCcyy3rJb6EJk7Jn3nr3zoEQ6CrNcyPKVMt0C1tP8r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:77:72:ab:12:e2:27:3a:a0:de:d9:67:47:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=4b436bbbaa4894806dd6b4a7a95715543967261d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:b5:ad:16:b3:44:d8:9d:ee:0b:5d:5c:54:
55:d8:40:7c:df:b7:c9:53:d4:9a:6c:d1:cd:8e:74:
16:ee:63:2d:62:87:98:a2:d6:02:94:24:4f:9a:a9:
a1:1a:b0:02:c2:02:81:42:36:8c:d2:6c:9e:e9:9c:
30:6f:b7:83:54:e8:3d:67:cb:01:a3:6c:b4:99:c5:
42:6b:5d:4c:8e:7f:6a:5f:5c:b0:b7:8a:2c:67:3e:
ef:b7:08:8d:a0:38:62:98:f6:d9:e8:d2:22:31:3d:
ec:ef:35:ee:69:91:db:66:ae:db:de:8b:37:08:8d:
a7:07:6c:ef:43:0e:03:16:5f:20:71:b9:b6:58:ce:
bb:42:8d:b3:b7:44:0e:57:b4:d2:e6:53:d0:0a:ca:
ef:29:e7:e3:c0:22:b9:0c:70:80:bb:e3:6d:0b:03:
6e:bb:af:e7:5d:b8:ee:c2:c0:33:d0:2e:23:cb:2e:
64:e1:4f:e1:87:bb:8b:10:1f:6d:3a:eb:7d:35:32:
0d:85:eb:ec:5e:aa:97:ed:f0:68:b4:9a:5b:07:7a:
8b:13:fc:67:4f:38:9b:04:8c:20:d5:85:e0:0e:ec:
fa:94:1f:97:62:62:ad:a5:11:6c:ae:89:ff:7e:d0:
e7:80:f9:17:55:73:bc:b1:1e:e4:63:8e:4f:1a:08:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:43:6B:BB:AA:48:94:80:6D:D6:B4:A7:A9:57:15:54:39:67:26:1D
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:59:56:70:9d:c2:80:63:14:5b:14:64:0a:82:26:52:61:1e:
bb:16:21:13:0c:21:72:df:90:39:62:3b:68:a9:50:57:78:dc:
b2:95:1c:04:b2:3b:be:0f:c6:ef:8e:45:a1:66:4a:b2:ff:38:
04:c8:b9:c7:02:17:50:35:fa:be:b2:47:d6:25:e5:52:fc:c1:
97:e3:45:2a:21:55:b1:6f:25:06:71:1a:13:74:83:4c:34:57:
93:a2:3b:a3:3f:c1:3f:0e:e5:9e:94:32:be:8a:9d:66:57:89:
1c:2d:dd:71:b6:52:ab:fe:07:41:5e:e2:9f:e3:33:1b:1f:38:
1f:37:52:c5:53:fb:04:f9:21:84:69:2e:f9:4b:7f:81:46:b1:
06:22:ca:ec:31:a3:c0:f7:9e:e1:32:a0:ce:c0:cf:37:c2:b0:
bb:90:26:e3:05:57:29:b2:d1:84:88:53:aa:e1:b6:8b:51:64:
70:1f:74:81:24:9a:a7:18:1b:be:19:92:5e:a8:4a:8f:48:68:
50:81:74:d7:68:e4:5b:d7:b4:82:08:52:63:3c:5e:48:84:5a:
c0:0e:f0:a2:83:0c:31:d6:16:39:2d:4d:c6:4e:d9:1b:10:40:
8d:03:10:1f:89:f4:5f:8b:d3:2f:dc:b4:98:ff:26:63:4b:49:
cd:0b:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:57 2026 by rpki-client