Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
File: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft (raw, json)
Hash identifier: upGl3PKeus2lUpubt22Jw143jqcZh2L7UrYNF7kZdd4=
Subject key identifier: 23:18:F6:AB:9E:2D:57:EB:54:AE:8E:00:69:02:27:12:B6:BB:65:5A
Authority key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Certificate issuer: /CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Certificate serial: 01A0CE916F63D482C3B7B01158496AA6C417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
Manifest number: 0208
Signing time: Wed 23 Sep 2026 14:00:32 +0000
Manifest this update: Wed 23 Sep 2026 14:00:32 +0000
Manifest next update: Thu 24 Sep 2026 14:00:32 +0000
Files and hashes: 1: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl (hash: 7bYSTofnGV1dFXUZ0CkivpHosYLLBDcLMwpQOoh7AOE=)
2: jgpzu-ESfiekXnmQsWtfxfFMnls.roa (hash: VKgBSq4j9tQnrdlFEiguu7TMFYsGEpDcXU1dHxHAkww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:6f:63:d4:82:c3:b7:b0:11:58:49:6a:a6:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Validity
Not Before: Sep 23 14:00:32 2026 GMT
Not After : Sep 24 14:00:32 2026 GMT
Subject: CN=2318f6ab9e2d57eb54ae8e0069022712b6bb655a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:b0:93:28:5c:7b:78:fc:de:36:6e:ba:ff:
48:aa:f5:2b:5c:61:8e:07:08:dd:9f:da:6a:aa:91:
1e:46:cf:ea:52:85:57:b7:5c:da:df:0b:c7:87:32:
66:6a:c3:51:c3:7a:24:f5:26:b4:86:6d:6c:cc:af:
e9:4c:fb:e0:9d:40:ab:44:2e:d6:e3:f4:c7:58:d2:
e8:ed:bd:65:b3:74:b4:7b:d5:b4:f5:6c:d1:78:46:
b9:d4:80:1b:8c:59:7f:72:e6:cc:01:45:5e:36:d0:
cc:b2:aa:51:55:83:ef:cd:ed:5e:e0:f6:36:05:fa:
68:8a:75:f0:69:c3:96:0b:b7:39:58:a1:14:b5:aa:
87:f2:8b:ae:82:f6:26:3f:3a:42:a6:82:77:27:f7:
cf:22:e5:76:14:0a:11:ae:d3:f5:25:0e:c3:32:4a:
16:d8:42:2a:f7:35:70:be:5f:6d:8d:67:f9:ac:75:
48:e2:9c:00:3e:e0:87:9b:40:54:aa:e9:b0:4a:54:
f2:e5:2f:c3:17:01:9a:2e:22:76:69:16:34:5b:2d:
b9:c3:37:3a:97:94:50:02:42:29:2e:94:18:47:4e:
4c:9f:c6:83:0b:84:2d:ef:2c:ec:f2:01:f5:fc:0a:
a3:db:d2:a1:9a:6a:02:69:c4:c5:c3:e2:88:47:6e:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:F6:AB:9E:2D:57:EB:54:AE:8E:00:69:02:27:12:B6:BB:65:5A
X509v3 Authority Key Identifier:
keyid:3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:8b:dc:40:18:8d:da:bf:58:48:66:bb:e5:55:0c:cc:ae:
d3:3d:2f:99:35:f9:e7:8b:bc:bc:5e:94:b4:c4:b3:c3:67:82:
10:aa:4b:d4:41:b2:58:ec:d7:18:6b:3b:1e:3e:3e:d9:fd:db:
5e:c8:07:a1:20:10:3a:cd:2e:22:47:ff:02:55:a9:93:bf:6d:
a2:f6:e9:ad:df:11:0b:f3:2e:c7:ef:14:ac:10:dc:41:3e:f8:
e8:57:86:03:3a:8b:74:d7:aa:a1:7c:7a:8a:40:c4:bd:53:c6:
94:1d:09:c2:91:07:c5:76:a4:e7:0d:8e:fc:36:1c:c6:de:0f:
a1:6c:a8:1e:20:e7:03:a2:59:10:bc:ce:42:7d:8d:05:9f:68:
e2:fe:dd:a5:5a:55:88:56:61:d8:fb:5f:2e:0d:c5:42:50:67:
5a:ac:b4:43:27:01:37:1f:51:9a:87:60:97:a6:18:52:18:9f:
d8:54:b3:6d:d6:2f:8d:39:42:f5:ed:ea:0a:8f:66:21:b2:cd:
ba:65:91:50:f2:e0:a6:7d:d6:ad:30:9c:e3:e3:21:34:8d:6a:
47:c2:d8:f7:1d:a8:32:bf:da:fc:d9:85:74:a5:54:e8:a2:a6:
5f:b9:d0:0a:a4:e0:9a:5f:f2:c1:16:25:fe:ad:c7:80:32:39:
b8:a1:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:21:32 2026 by rpki-client