Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: +QZDHFEwonHvLfvTyF9Qr51AgLG9o/DQoOYD6ZKwxTE=
Subject key identifier: 18:EB:0F:7D:CA:75:87:53:E1:03:87:9C:E4:3A:0F:79:93:C7:F3:05
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019D992B0B2A5367327739AFF3639EFD3C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0CBB
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: AVEpUsa15ahVvPoJzrYbtm9mvoOyiYGjRzEWHXZxK4o=)
2: c6e2woPNB04ZsyBinFv698qVT4o.roa (hash: +z15BNM7prrFn2O9ay18qeSx+nY/lsQt2tceRY1CHk4=)
3: kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa (hash: woEwD4aK5vmEAsvtUFsMtH0Vvs264WAeMxmjqmjfCh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0b:2a:53:67:32:77:39:af:f3:63:9e:fd:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=18eb0f7dca758753e103879ce43a0f7993c7f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:08:ef:6e:48:e6:f2:03:d0:ff:ea:25:db:
23:52:75:8b:3f:34:d7:de:5c:40:33:0a:fc:c6:5d:
41:f6:02:24:68:8e:00:89:d0:38:43:12:34:8c:3d:
de:8c:bf:2a:a7:8a:5c:43:4a:d8:44:16:a2:d9:1a:
89:09:1c:c8:c4:bb:cf:90:1e:38:15:d8:47:29:59:
7d:21:12:e3:a5:46:6d:d5:ba:a9:b0:42:83:48:37:
7e:7b:36:c6:ba:f4:9a:27:da:b4:9b:2c:46:c1:a3:
fd:99:8d:02:47:4a:18:52:39:2f:ff:56:97:a7:71:
e1:4d:53:a8:46:10:fe:95:88:51:f6:f7:0f:41:86:
24:9a:ac:b8:84:58:9c:54:e5:ab:e2:a8:81:44:ba:
ed:2f:07:e3:e3:11:18:5f:11:25:ae:c4:71:c9:99:
0f:29:65:4f:f4:be:6a:5e:40:aa:ae:02:5e:23:16:
ea:7b:7a:a8:65:58:82:47:38:c3:bb:ff:ae:cb:a2:
b6:28:49:87:6a:ce:f2:d9:b7:f5:01:08:46:1b:ea:
1c:b0:12:99:0c:2f:a1:8a:2d:a6:15:3a:16:40:a8:
72:71:94:3b:f8:6f:43:ee:25:19:bd:19:a2:a0:4b:
12:a9:48:b0:84:15:dc:7b:d2:59:89:61:24:35:2e:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:0F:7D:CA:75:87:53:E1:03:87:9C:E4:3A:0F:79:93:C7:F3:05
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7a:0a:70:51:98:d0:25:ba:c5:ce:3a:e6:2b:10:11:a8:66:
7a:ef:40:c6:49:56:00:75:62:fd:c1:6a:5d:a4:37:f5:07:3d:
2c:e0:05:06:39:26:a8:b6:b6:e0:6c:93:7e:57:6e:62:3b:87:
c7:36:30:59:1b:f6:d0:be:b4:37:1a:f5:b7:1e:c1:5c:93:33:
08:5d:3d:11:43:2e:b8:1f:8f:01:73:71:d0:c8:37:ec:44:44:
ac:5d:3d:ef:0f:4c:4b:5a:43:5f:68:db:d4:31:59:df:8d:a7:
94:ee:2b:59:59:e2:84:b3:0e:c5:ff:f7:91:21:be:39:20:ce:
13:6c:c3:40:ce:e5:b7:94:6e:fa:79:48:4f:f3:81:63:44:b3:
a0:e5:4b:72:5f:76:2f:12:27:ea:87:a2:90:7c:e0:9f:25:de:
ec:06:24:7c:39:c6:fc:ce:3c:e4:f8:01:b5:46:02:59:2e:8f:
00:1f:4e:b3:35:d9:ee:7b:82:24:f5:10:90:cf:50:1e:8b:40:
67:bf:13:26:f7:a6:cc:2d:8f:78:e0:75:49:7d:ed:d9:a6:f0:
c7:f7:28:9f:81:9f:f0:c1:3b:df:34:d6:09:56:01:d0:59:e4:
73:67:1f:0b:00:d2:d1:90:bb:ce:96:5d:33:99:2e:a6:d5:9a:
f6:bc:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:26 2026 by rpki-client