Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: aRyG7NILZJS1uwcoH6TTcSl25p1+kTBlntLH2+QenYE=
Subject key identifier: E6:FF:56:7B:8F:24:CB:67:B6:70:D2:61:26:87:95:05:90:5B:4D:DB
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019CACB51546FC11D0EB5FE717356835546C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 05A3
Signing time: Mon 02 Mar 2026 04:01:14 +0000
Manifest this update: Mon 02 Mar 2026 04:01:14 +0000
Manifest next update: Tue 03 Mar 2026 04:01:14 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: obRGixNFJ2hEYg22JLCGQP+H1942cZvet1Wirpk6sYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:15:46:fc:11:d0:eb:5f:e7:17:35:68:35:54:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Mar 2 04:01:14 2026 GMT
Not After : Mar 3 04:01:14 2026 GMT
Subject: CN=e6ff567b8f24cb67b670d26126879505905b4ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:8f:cc:b7:7a:56:34:de:7b:7c:41:dd:58:
7b:aa:e7:9f:b4:e6:d7:c5:4b:58:d5:8f:70:b2:62:
df:eb:9c:6a:b3:13:3f:67:95:8f:ff:a8:87:dc:4e:
5e:1d:b0:35:22:d0:4f:08:3b:bb:c6:91:e2:85:36:
ca:b0:61:5e:aa:3c:de:9c:dc:fb:69:03:f2:b6:12:
4f:b5:31:4d:77:3a:a0:7e:72:cb:5d:3f:23:89:4f:
a5:57:87:f8:45:b2:b0:b1:66:29:b5:59:e1:28:b2:
67:e1:eb:4c:58:a6:d6:5e:3c:32:4f:48:c6:fa:6e:
76:38:eb:43:7c:5a:fd:a4:60:bb:a4:0b:26:e9:65:
d9:ab:ca:8d:d2:55:1d:5d:67:62:2c:09:bd:bf:82:
62:12:c7:f9:64:a4:d2:77:fa:08:9e:7d:fb:80:9d:
f7:ff:98:4c:7e:d7:6f:7e:f4:21:e9:36:f2:b0:32:
0b:72:8b:00:96:30:d9:1a:21:da:8b:be:54:08:89:
a9:1b:82:0d:00:7f:cd:79:48:47:f3:1b:36:8d:12:
5e:a4:a5:18:24:6f:33:9e:4a:b4:54:6f:55:43:66:
28:14:69:e8:0f:91:3e:4d:87:46:62:cb:ce:72:e0:
bb:e4:f6:92:6c:74:36:6e:70:b1:93:19:85:e4:f2:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FF:56:7B:8F:24:CB:67:B6:70:D2:61:26:87:95:05:90:5B:4D:DB
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:39:40:17:98:fb:c9:9e:dc:56:32:38:8f:17:a2:56:45:68:
8b:bb:d7:60:10:80:98:c1:fe:33:2d:e2:ed:81:e4:9c:cf:d4:
2d:a9:c1:7c:d3:b5:ac:89:80:67:c7:c4:88:5b:fd:ff:1d:6a:
3a:88:69:91:e7:37:f9:3d:7c:70:9b:15:f0:e7:7c:69:57:97:
45:7d:4b:3f:7c:de:ea:83:c3:73:f8:02:f3:cf:c2:be:68:6c:
f2:63:2f:3a:5b:ad:b1:63:f7:d0:a6:72:b9:70:c2:fe:f3:7b:
51:92:4d:d4:74:c7:6c:fc:80:61:c0:89:8b:c9:59:a0:65:c5:
e0:04:87:4b:ea:10:b9:93:da:d0:b1:68:55:7c:65:d5:80:74:
bd:54:6e:f4:b4:27:99:b1:a4:4a:4b:e5:76:a9:b5:df:e0:98:
93:e4:ec:ba:39:a5:e9:20:c5:79:bd:65:b7:1a:2a:d3:05:27:
a2:78:62:2c:8d:eb:df:ef:99:10:0c:76:b8:1a:44:f6:c7:70:
0b:ec:6e:0e:2f:e1:48:37:a3:fe:63:a4:5f:f2:75:91:73:31:
49:80:6b:a6:4f:5a:fa:db:49:d7:98:2d:89:9f:8c:0c:0b:64:
0a:4d:63:dc:d3:82:47:d6:40:cf:be:15:e6:f6:6a:2e:cd:1c:
3f:56:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:38 2026 by rpki-client