Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: rRcXfPuQj3Xdp3GKDwDYnI2jww5VbzklF/ZFCcYwVvA=
Subject key identifier: 02:EA:9B:59:4F:78:57:01:EF:CB:0C:D4:B1:BE:21:0B:7F:67:12:A1
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019D9A3ED69D5DD27E5CB0BB913D87C4A512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 061E
Signing time: Fri 17 Apr 2026 07:01:42 +0000
Manifest this update: Fri 17 Apr 2026 07:01:42 +0000
Manifest next update: Sat 18 Apr 2026 07:01:42 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: YcQqrt4wniCGRGE9ioC4SlmSNbSw5j9/eqsBdJZlQZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d6:9d:5d:d2:7e:5c:b0:bb:91:3d:87:c4:a5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Apr 17 07:01:42 2026 GMT
Not After : Apr 18 07:01:42 2026 GMT
Subject: CN=02ea9b594f785701efcb0cd4b1be210b7f6712a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:52:94:84:a2:e5:d7:b1:e2:2e:59:18:60:
47:f6:56:7f:f3:e0:3b:78:cd:f7:42:5e:af:be:75:
ae:60:ac:9e:a9:8e:f4:27:22:6d:12:ce:10:8f:79:
b0:3f:0e:55:73:ee:c9:1a:15:79:67:cb:6e:1f:83:
b5:b3:e2:82:57:e1:a8:52:01:b3:d2:a3:1e:c8:67:
58:d0:43:79:91:18:c6:05:76:01:5b:11:97:fd:e5:
bf:11:b5:1e:20:24:fd:f2:6b:24:54:0d:f3:9e:f5:
30:4e:a7:cf:02:ae:f6:1e:18:ff:12:7f:04:d1:c6:
e9:07:1c:e1:d5:e9:6d:73:fc:37:a5:8e:f5:74:f5:
95:e4:09:a8:ce:b7:84:ce:82:51:20:7d:7c:8e:e4:
43:b2:1d:9a:cc:35:70:f9:6c:df:d7:d4:40:31:1c:
60:35:9d:72:de:e8:1d:fd:4c:91:2a:56:47:4d:23:
2d:2b:bf:e9:52:7e:c2:72:3e:ac:9f:69:90:fb:9e:
ea:45:13:23:7b:3d:d4:2c:d1:0c:96:7d:55:4e:43:
6f:78:35:4e:c9:b6:3c:0a:f9:32:a9:a9:08:68:37:
41:44:51:5c:41:20:5b:16:51:5e:c9:45:58:ac:3f:
d7:57:3a:b0:a5:5e:8b:d5:ad:a0:b0:28:57:15:dd:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:9B:59:4F:78:57:01:EF:CB:0C:D4:B1:BE:21:0B:7F:67:12:A1
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:7c:fb:a7:52:ab:72:e9:dc:ca:29:d7:56:c2:18:94:29:
df:6a:72:d1:ce:9e:8f:e3:83:1c:e0:5e:be:c2:97:9e:76:61:
d7:e9:23:2f:6e:2d:7b:60:27:27:8e:0c:c8:99:35:36:62:44:
2b:04:f0:c6:19:d3:db:1a:46:77:1b:02:d1:18:01:b7:e2:c2:
d2:f2:ef:d6:9b:21:cf:84:58:7d:dc:cd:80:8c:ab:7d:e7:b5:
14:64:c3:20:0b:9c:c6:1a:73:3b:5e:ab:75:4a:19:d2:54:c0:
ae:0b:d5:f2:c4:b4:5a:d7:e5:3c:5a:ca:b2:3a:ff:bf:6c:8d:
a1:d1:59:44:fe:a5:a8:1b:a9:0a:29:26:19:ac:78:83:22:20:
49:24:ce:2b:74:48:91:e7:1b:3b:b6:92:0e:27:13:9a:2f:d4:
bb:d2:38:a3:0e:c8:90:ff:3d:de:be:cb:76:38:10:54:72:e0:
15:79:8a:18:01:78:00:15:7c:7c:2f:b3:20:b6:83:b7:87:9f:
e5:8f:80:24:09:f2:da:73:25:96:e7:25:b7:22:1e:e7:4a:11:
e3:65:d5:43:90:72:cb:47:05:04:e4:13:20:35:f8:c1:f5:2a:
66:a1:c7:79:b9:13:08:d4:c3:f4:30:b1:32:09:0f:ff:a0:47:
74:65:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:34 2026 by rpki-client