Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
File: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft (raw, json)
Hash identifier: r6/oVYQoeTvGfXOJuLEXLGyuZqRt8bTa1bytEZ8E3s8=
Subject key identifier: E8:73:2A:A4:FD:48:D9:91:7A:DB:C5:0C:65:B5:7E:62:8E:E1:EE:5B
Authority key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Certificate issuer: /CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Certificate serial: 019D27E022897CC1D1E58385229D7E29E466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
Manifest number: 24
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl (hash: hhoAI0VSm0CxOKnp5P0ftbdPSLWaNkd89H5jZ/hzowY=)
2: jgpzu-ESfiekXnmQsWtfxfFMnls.roa (hash: VKgBSq4j9tQnrdlFEiguu7TMFYsGEpDcXU1dHxHAkww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:22:89:7c:c1:d1:e5:83:85:22:9d:7e:29:e4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=e8732aa4fd48d9917adbc50c65b57e628ee1ee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:2b:cd:d0:4a:d4:2a:05:c6:83:ad:fc:45:
ba:87:4e:02:af:1b:44:c5:1c:40:29:ae:9d:67:29:
b6:65:91:95:10:33:a3:88:28:cc:78:52:61:dc:93:
ee:ab:a6:c0:52:8e:67:21:45:ca:31:25:55:81:8a:
c4:42:d9:05:d7:b2:3d:d6:a1:2e:87:84:8b:17:2b:
8c:b4:e1:b1:dd:80:66:fb:b6:52:62:9f:c0:c8:29:
79:59:f6:86:9f:1e:be:91:a6:ec:d9:eb:f5:67:76:
41:11:75:9c:92:71:d9:98:a9:e2:b1:20:5d:8f:ed:
02:a9:fc:40:9b:19:37:b9:3f:1a:6e:dd:c8:f5:a3:
91:e5:d7:8f:2c:75:94:97:e2:62:e6:d0:53:33:2a:
0a:2e:38:be:2d:1c:9a:1d:e4:fa:bd:05:26:ed:c4:
7f:a5:4a:45:82:e7:be:01:19:40:d9:6c:88:d1:ae:
ba:b5:c8:1a:8d:97:dd:2d:ab:c4:24:5c:47:96:38:
9a:22:4c:64:a1:f0:47:bd:c6:68:78:89:4f:05:29:
71:03:bb:51:48:33:0e:18:2a:05:81:17:a8:c3:39:
b9:ed:6e:22:70:a1:b5:c7:5b:42:e2:2c:d5:c3:40:
89:dd:d7:97:17:b0:e5:35:d1:64:f4:4c:51:23:a6:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:73:2A:A4:FD:48:D9:91:7A:DB:C5:0C:65:B5:7E:62:8E:E1:EE:5B
X509v3 Authority Key Identifier:
keyid:3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f9:7a:dd:e5:e0:4d:d0:1f:60:95:7e:f5:1b:6f:ee:68:64:
b7:d3:eb:8c:cd:b9:fe:32:3e:c8:f8:c6:86:57:ad:4e:31:93:
50:0e:d5:52:4e:b7:ae:c9:c0:31:42:7b:ac:da:3c:17:03:d8:
39:e2:6d:69:3e:8b:70:3e:38:d1:3e:ad:0a:a1:4f:e8:08:78:
cb:b7:fd:4a:e8:d6:66:88:38:b8:11:a8:89:b4:81:95:d4:81:
bb:e7:b8:e1:3a:1c:53:22:e0:f8:39:5a:6e:f3:b5:29:18:17:
c2:d0:7c:03:84:6e:a9:b1:76:01:ec:6c:d6:f2:0b:7f:68:69:
a9:b2:2f:23:3c:6f:5c:92:01:97:f1:ec:e5:02:42:75:27:d7:
44:e0:e5:5e:ae:04:c6:61:25:78:5c:70:81:ea:ae:d2:b2:db:
56:ec:1d:42:3a:b9:46:ec:38:1d:ef:18:da:d3:b2:78:00:87:
57:f1:e4:2f:4d:cf:ce:ca:ea:ed:77:31:e8:51:6e:af:6e:f0:
22:fc:df:1b:e0:73:f5:97:58:3f:bc:df:66:49:63:15:b8:18:
70:1a:1d:8e:f9:2a:b5:1a:83:28:52:43:7f:6f:60:f5:8a:5d:
b9:e4:ff:e5:9c:42:96:be:f4:ca:56:c2:f8:97:8e:5f:4c:ca:
82:a7:8f:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4CKJfMHR5YOFIp1+KeRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjg4MjBhNmIxMDIwZWM2ZTIyYmM3NzE2ZmVkOGU1MjBh
ZDI2NjQwHhcNMjYwMzI2MDIwMTMzWhcNMjYwMzI3MDIwMTMzWjAzMTEwLwYDVQQD
EyhlODczMmFhNGZkNDhkOTkxN2FkYmM1MGM2NWI1N2U2MjhlZTFlZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgYrzdBK1CoFxoOt/EW6h04CrxtE
xRxAKa6dZym2ZZGVEDOjiCjMeFJh3JPuq6bAUo5nIUXKMSVVgYrEQtkF17I91qEu
h4SLFyuMtOGx3YBm+7ZSYp/AyCl5WfaGnx6+kabs2ev1Z3ZBEXWcknHZmKnisSBd
j+0CqfxAmxk3uT8abt3I9aOR5dePLHWUl+Ji5tBTMyoKLji+LRyaHeT6vQUm7cR/
pUpFgue+ARlA2WyI0a66tcgajZfdLavEJFxHljiaIkxkofBHvcZoeIlPBSlxA7tR
SDMOGCoFgReowzm57W4icKG1x1tC4izVw0CJ3deXF7DlNdFk9ExRI6ZfeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhzKqT9SNmRetvFDGW1fmKO4e5bMB8GA1UdIwQY
MBaAFD24ggprECDsbiK8dxb+2OUgrSZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpQ0Ntc1FJT3h1SXJ4M0Z2N1k1U0N0Sm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mYzllMWYtNWZmMi00ZTgyLWI4MWMt
Y2Q0NjM5MjdmMGYwLzEvUGJpQ0Ntc1FJT3h1SXJ4M0Z2N1k1U0N0Sm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mYzllMWYtNWZmMi00ZTgyLWI4MWMtY2Q0NjM5MjdmMGYw
LzEvUGJpQ0Ntc1FJT3h1SXJ4M0Z2N1k1U0N0Sm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvl63eXg
TdAfYJV+9Rtv7mhkt9PrjM25/jI+yPjGhletTjGTUA7VUk63rsnAMUJ7rNo8FwPY
OeJtaT6LcD440T6tCqFP6Ah4y7f9SujWZog4uBGoibSBldSBu+e44TocUyLg+Dla
bvO1KRgXwtB8A4RuqbF2Aexs1vILf2hpqbIvIzxvXJIBl/Hs5QJCdSfXRODlXq4E
xmEleFxwgequ0rLbVuwdQjq5Ruw4He8Y2tOyeACHV/HkL03Pzsrq7Xcx6FFur27w
IvzfG+Bz9ZdYP7zfZkljFbgYcBodjvkqtRqDKFJDf29g9YpdueT/5ZxClr70ylbC
+JeOX0zKgqeP7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:18 2026 by rpki-client