Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: A6kZTp8Bm/kxqtMRXaMpqE5ON7F0URFB5su/IhjnRno=
Subject key identifier: 94:80:D5:B1:6C:01:44:C3:2B:16:BA:88:2C:66:5E:25:16:DC:E6:41
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019D26281537DF237DEEB10F04EF66B998EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 057D
Signing time: Wed 25 Mar 2026 18:00:54 +0000
Manifest this update: Wed 25 Mar 2026 18:00:54 +0000
Manifest next update: Thu 26 Mar 2026 18:00:54 +0000
Files and hashes: 1: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: AiIxz/JLKy8LKmFVIcXs7Kh7jkZUY1Wpud9eKXMxsxg=)
2: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
3: ao20WTlIdybEK7OORASxFGQHj5g.roa (hash: Bp9zWQUGEQfw9+EW5ojP9Kn3oyy71raM8WkHF/muXnE=)
4: xPUKnE5air9RWIE875_uAzahZ3k.roa (hash: WlB4PuFKngSEx9SC4lG9bAjuKu7PHJdrrtLtNhRjc6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:15:37:df:23:7d:ee:b1:0f:04:ef:66:b9:98:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Mar 25 18:00:54 2026 GMT
Not After : Mar 26 18:00:54 2026 GMT
Subject: CN=9480d5b16c0144c32b16ba882c665e2516dce641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:ed:16:77:c8:71:41:8a:42:c3:ac:75:03:
4b:ad:50:39:63:91:3f:01:9d:47:71:7b:92:0a:7a:
65:39:36:73:bf:57:e2:af:f2:65:57:6d:ac:b0:49:
46:ee:2e:7c:95:f4:34:e4:99:dc:69:80:43:8f:a2:
29:ca:3c:1e:23:5d:02:e5:cb:20:c9:a2:be:03:7f:
2f:28:82:9e:75:cc:99:60:bd:f2:72:6c:1d:c3:e2:
43:4b:01:e8:88:40:99:2f:1b:47:15:16:30:cd:ef:
99:b7:fe:3e:4a:f0:79:89:b0:fc:96:17:0a:b2:a0:
9e:b6:6f:a6:8c:14:f5:8f:53:05:8e:57:e3:14:b8:
22:b1:5e:ef:a2:f0:75:0a:1d:34:77:69:4f:f3:88:
f8:89:8d:36:a4:a4:d3:10:98:96:d5:ee:32:e8:ae:
7d:54:8a:a5:c3:e5:d9:82:86:ea:b1:29:f0:cc:b0:
28:6b:33:15:52:00:0e:5b:89:88:8c:c4:9a:df:dc:
82:4b:90:1d:86:db:ec:bd:14:6b:4b:dd:a9:a1:42:
44:3d:85:fa:e9:0e:d1:e6:7a:bd:53:a5:f1:b9:66:
6f:be:10:4c:a2:90:d8:90:7c:f2:6f:72:39:8f:4e:
40:9c:52:f7:b6:a0:12:e1:d7:38:66:c1:57:c1:f4:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:80:D5:B1:6C:01:44:C3:2B:16:BA:88:2C:66:5E:25:16:DC:E6:41
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ab:4d:49:49:9c:39:53:bc:45:aa:fd:32:8c:d2:71:13:6d:
9e:cb:1d:df:d4:83:4a:10:d9:6d:26:49:43:f6:fc:5e:36:55:
6d:e1:67:d3:c5:ee:c1:4a:6d:86:42:e8:48:e7:06:01:4e:6d:
72:13:05:44:81:c5:ab:46:c1:85:70:f3:c8:3a:2f:7c:53:94:
97:b8:f9:f2:dd:6d:13:2a:ad:ef:14:27:bb:8a:03:08:d3:ba:
06:25:12:f0:4a:8a:cc:89:7e:33:0e:7a:93:fd:ad:e1:aa:74:
fa:18:d5:c6:08:ed:7e:07:a4:fd:5d:66:b6:84:7b:3a:64:e8:
2d:42:7d:94:1e:53:be:7c:17:80:b7:5b:b6:e6:7c:df:9a:21:
14:e4:d4:5a:05:17:33:3d:24:c2:8a:40:d9:96:7a:e1:b9:9e:
1c:54:84:d3:9c:e3:e9:70:26:18:c7:7e:dd:db:f7:f9:ee:9c:
65:da:d0:16:3a:9e:01:33:2e:d6:a8:dc:3d:a1:a5:41:78:9d:
ca:c2:cb:c6:ab:8b:58:d4:41:c5:e7:41:72:20:4c:06:de:7e:
01:6f:d7:f7:e3:af:91:e1:73:8d:28:ad:1d:1a:f7:b7:13:c0:
96:5f:05:4e:3a:50:93:32:80:a6:c7:60:ef:41:64:58:a1:26:
42:43:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:39 2026 by rpki-client