Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: 36E1lLFw4OZ+JcpioIhsbMedvu8vbtp58RKJwz83rbU=
Subject key identifier: 01:D3:D5:5A:8E:1D:67:6C:35:E9:FA:F2:42:72:EC:58:DC:9F:9B:6B
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019E1CEB642923618AB8086444E44DE971F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 05FD
Signing time: Tue 12 May 2026 16:00:49 +0000
Manifest this update: Tue 12 May 2026 16:00:49 +0000
Manifest next update: Wed 13 May 2026 16:00:49 +0000
Files and hashes: 1: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: Rpbghf7xtXGGrDmEWQ2TQOFvu0pFahYtXDNNlHPInFE=)
2: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
3: ao20WTlIdybEK7OORASxFGQHj5g.roa (hash: Bp9zWQUGEQfw9+EW5ojP9Kn3oyy71raM8WkHF/muXnE=)
4: sR1RaWXS_5l1a2IX6LHUiU-d2pA.roa (hash: S4pTQrYhG8r3f9SFHV88NAichr1el296Kbb8q2csBdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:64:29:23:61:8a:b8:08:64:44:e4:4d:e9:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: May 12 16:00:49 2026 GMT
Not After : May 13 16:00:49 2026 GMT
Subject: CN=01d3d55a8e1d676c35e9faf24272ec58dc9f9b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:3b:9d:a7:5f:e4:71:b7:57:87:de:e9:aa:
bc:22:e7:9d:e3:5c:eb:36:bf:ac:f5:1b:55:3d:cd:
65:9b:e8:e2:f5:7b:86:a4:ba:fc:4f:4d:21:25:35:
50:d4:b7:39:de:ca:87:22:98:5e:68:fe:e6:27:7c:
6d:05:5f:ce:e1:c0:ec:43:c4:7b:9b:76:54:d8:5f:
1e:01:37:5f:0d:a1:55:a8:36:12:85:e6:e9:9b:90:
bc:fd:46:46:f3:53:87:30:eb:79:cb:93:22:71:4c:
84:e2:d5:78:75:95:08:c6:43:82:42:4d:8e:70:e8:
a7:be:a5:a8:7f:35:5d:86:4d:ff:66:01:b5:c6:19:
b3:34:8c:43:d2:9e:c4:d2:77:2d:22:1c:f6:0f:ce:
a9:91:af:86:69:cd:a6:26:20:51:5a:04:90:ae:2a:
2b:c0:c8:ee:8d:59:30:78:83:43:bf:ff:88:d8:2e:
fc:35:cc:9b:a6:33:2b:dc:ee:a6:7d:da:66:d1:70:
e3:c2:be:1f:32:07:d5:3a:04:75:25:a0:33:36:40:
b8:05:81:4f:7a:67:bd:79:5b:4d:ac:f9:4a:39:14:
59:dd:ef:d4:81:ca:fa:5c:6f:63:0b:b5:9f:c4:fc:
96:7d:1c:d0:88:04:bc:46:35:fb:aa:19:90:c4:b7:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:D5:5A:8E:1D:67:6C:35:E9:FA:F2:42:72:EC:58:DC:9F:9B:6B
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:34:0e:33:2f:6e:5b:0d:dd:82:9b:d5:f6:ae:d6:5e:94:
5e:ab:56:70:44:ab:cb:40:dc:e8:95:25:ed:89:2d:2c:2a:6e:
10:37:df:82:59:24:0f:46:c3:a7:55:a8:93:63:8f:9a:47:29:
29:f2:a1:da:87:40:0b:87:b5:bd:2f:76:03:d6:42:57:8b:e9:
75:c5:47:3e:8c:a5:f4:95:8f:45:ca:fb:ab:84:84:c6:32:b1:
34:f0:5e:4f:56:a9:64:4b:f3:b4:2f:47:30:8e:3b:de:f9:4f:
a2:49:75:9b:a4:3d:0a:d4:cb:0b:ae:a6:36:88:49:ee:5a:93:
06:7f:2c:a2:d7:2e:56:86:77:1d:70:f0:45:cb:3b:ef:a9:d4:
3d:92:57:88:00:8d:03:03:0e:08:28:be:6d:05:e2:3b:c1:ba:
3f:ee:01:1c:4b:40:50:01:1a:8a:d9:14:a4:00:c5:03:d5:37:
60:b0:ae:db:df:80:ff:e2:36:db:4d:63:97:bb:8b:87:c1:d1:
93:28:06:5e:3e:d1:58:9f:b5:6c:c9:21:a3:66:d1:ab:a9:27:
4c:13:69:7b:5b:6c:1f:a6:62:5e:c9:d1:99:2b:75:de:2b:ed:
b8:6a:3d:ac:bb:13:7e:69:32:7e:bd:42:4f:23:40:6e:cf:a7:
5e:ad:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:24 2026 by rpki-client