Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: mWqft/RrB3MiDWWmDhE6gWWIZ4iQiDwR5BgGAsXmM3g=
Subject key identifier: F8:87:24:25:2A:EA:89:DD:65:90:FE:A7:F1:5D:4E:DB:74:A8:97:4F
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019CA9B3A9CA85E23FC6AFE6CAD5362049FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0C3F
Signing time: Sun 01 Mar 2026 14:00:49 +0000
Manifest this update: Sun 01 Mar 2026 14:00:49 +0000
Manifest next update: Mon 02 Mar 2026 14:00:49 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: IdoXd2d0JoSv/FTda+nviYiIZwjR3MNsyGbmIzKDVDQ=)
2: c6e2woPNB04ZsyBinFv698qVT4o.roa (hash: +z15BNM7prrFn2O9ay18qeSx+nY/lsQt2tceRY1CHk4=)
3: kuWO3UDifrZzCfC3CKNLSU2oGZ0.roa (hash: woEwD4aK5vmEAsvtUFsMtH0Vvs264WAeMxmjqmjfCh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:a9:ca:85:e2:3f:c6:af:e6:ca:d5:36:20:49:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Mar 1 14:00:49 2026 GMT
Not After : Mar 2 14:00:49 2026 GMT
Subject: CN=f88724252aea89dd6590fea7f15d4edb74a8974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:38:f7:63:82:41:0f:85:b7:1b:30:c7:08:
bc:5e:3b:9b:cb:33:4a:25:fb:ef:3d:3e:1e:1c:52:
6c:42:76:06:10:22:59:b5:a1:a5:ae:18:c6:59:b8:
b6:7d:3f:64:ba:e2:0d:6d:0d:26:29:24:4d:2e:27:
72:f9:94:59:ab:2f:19:12:e4:10:01:97:13:41:53:
ee:98:65:7b:42:ea:c2:ec:82:b4:58:f6:ad:e2:5b:
4e:9c:4d:02:43:dd:1a:50:07:5b:44:ca:17:d4:14:
f6:68:b5:c7:11:cf:d1:98:48:17:a0:b8:da:6a:4e:
d3:13:39:55:4a:d2:4a:10:09:09:2b:d1:4d:85:80:
21:c2:74:64:ea:b5:5d:5b:4f:5a:03:05:0e:71:55:
8f:44:cd:19:5d:a7:7d:05:fd:56:c7:5f:85:90:54:
23:44:bb:68:0f:e3:06:f4:17:7f:c8:88:36:46:ab:
0b:80:36:f6:3a:0f:76:a2:d1:f2:d2:37:20:79:df:
39:96:62:f1:1b:ed:7c:09:5e:47:4a:0b:8e:83:f7:
15:f3:4f:b1:58:d9:2e:fa:39:78:d2:e6:e8:ef:9f:
af:28:ea:7f:53:d3:2a:5c:61:c9:5e:5d:8f:0a:0d:
b4:5b:1b:ea:b2:13:77:a7:9d:a2:92:be:c0:8e:94:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:87:24:25:2A:EA:89:DD:65:90:FE:A7:F1:5D:4E:DB:74:A8:97:4F
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:58:ef:cb:65:31:a5:e2:90:e0:01:f7:0a:75:33:cb:63:
e0:10:1d:f4:0f:25:e8:71:79:4f:8a:1b:27:bb:23:d4:cf:e5:
f4:30:96:af:0a:74:87:35:c7:b2:2f:1b:cb:98:ca:b3:c8:b5:
7a:aa:3b:b2:07:3e:0f:e7:d3:88:29:cc:7c:56:75:5f:a7:4e:
56:09:07:ef:ba:2e:d8:a7:ec:6c:5b:ce:05:0e:73:e3:00:0e:
a0:59:fc:a1:b5:44:47:44:6f:53:9b:a1:fd:57:01:20:7e:09:
45:9e:7a:58:fa:4a:71:60:0e:d8:9a:4c:a5:83:84:d8:8e:e6:
67:f1:13:14:21:db:f7:ce:f3:76:4e:04:bc:bd:3d:d3:93:89:
60:27:d4:61:ad:f8:31:18:02:dc:b3:1f:d5:9a:4c:bf:81:50:
f7:b2:38:85:8b:27:f7:95:b6:09:e4:57:3b:86:02:22:2d:aa:
84:98:19:83:81:9a:b9:eb:f1:e1:ca:f5:15:68:43:68:c2:09:
d0:4a:2b:d8:ea:ec:c4:45:d4:92:35:e1:ce:7e:07:91:b9:cb:
92:9a:61:b4:0f:4e:86:db:13:2b:42:05:d9:2e:01:b4:06:6b:
7d:d9:d5:2a:0f:5b:e8:64:40:1a:40:42:22:4f:ff:7e:a3:30:
50:24:8e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:05 2026 by rpki-client