Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File: PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier: NpSRSUcXWcpWgJceSnfr7k5s2YGmZi+pJrITazomiLM=
Subject key identifier: EB:4D:2B:4C:69:47:21:4D:1C:7F:21:A1:FF:6E:F3:0F:7B:0B:01:3A
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer: /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial: 019EC17FC94C5BB7290C7FCFBFEF750B6F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number: 01DF
Signing time: Sat 13 Jun 2026 15:00:37 +0000
Manifest this update: Sat 13 Jun 2026 15:00:37 +0000
Manifest next update: Sun 14 Jun 2026 15:00:37 +0000
Files and hashes: 1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: KIsDsenVwdmEzAMgVkgU0qh7LcU9KY+8V2M0ODeqdJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:c9:4c:5b:b7:29:0c:7f:cf:bf:ef:75:0b:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
Validity
Not Before: Jun 13 15:00:37 2026 GMT
Not After : Jun 14 15:00:37 2026 GMT
Subject: CN=eb4d2b4c6947214d1c7f21a1ff6ef30f7b0b013a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:68:0d:ee:04:a3:6e:d9:40:35:c4:c8:58:
82:c6:92:03:aa:f6:46:d7:86:1f:d5:83:bc:49:da:
33:74:0c:74:a8:72:bf:b1:32:48:6f:18:ec:f4:e6:
2c:f4:a8:92:e1:fe:60:84:e7:8e:dd:e9:46:26:24:
bc:f2:0a:ef:71:8c:08:30:d5:7c:a2:d9:bf:af:79:
a1:b8:77:dc:77:97:98:6f:f5:91:34:24:a2:ab:df:
ff:b8:e3:db:a1:cf:91:96:27:ac:3f:cb:24:f6:90:
90:e5:8e:40:e9:0e:6d:e9:6d:b3:dc:69:19:37:21:
c1:d2:cc:14:33:8e:ba:89:03:de:ea:7c:55:65:81:
46:a0:05:33:bf:39:45:d1:dc:97:8c:68:40:b5:13:
d0:a3:49:ff:aa:e2:6c:55:9f:98:f3:e1:6a:3b:a5:
5b:6a:3a:f5:f9:d8:ed:16:fd:98:8e:8e:a5:0e:e2:
20:9e:44:23:84:b2:7c:e4:a6:ee:f8:63:52:79:35:
67:01:cd:b8:fb:49:c9:9c:e4:60:8c:11:a8:b0:05:
9f:a4:14:da:48:85:c1:8b:06:82:aa:25:84:54:d6:
97:e0:47:72:a2:d6:1d:a1:c0:65:c6:08:67:eb:cf:
75:c1:5b:ee:e5:38:f8:52:46:d3:db:76:63:8b:e3:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:2B:4C:69:47:21:4D:1C:7F:21:A1:FF:6E:F3:0F:7B:0B:01:3A
X509v3 Authority Key Identifier:
keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:29:ef:4a:2f:85:d8:a8:b4:99:02:58:56:3c:85:52:a5:da:
3a:d8:bd:17:ce:d5:4a:c2:43:14:e7:f8:ef:4b:b4:dc:26:22:
24:00:e2:49:ad:e3:89:58:34:0e:8b:2e:26:60:54:e4:c6:c3:
3f:c4:d8:96:99:ed:a2:c6:20:f1:0b:6b:f9:b4:8b:3e:50:04:
89:f5:93:f9:9c:10:57:4c:91:02:48:5a:08:e5:85:65:84:d1:
95:41:df:82:84:72:f3:94:46:c7:c7:e8:2c:bf:de:bb:1e:0a:
ff:d3:c7:77:25:39:6e:60:96:2e:1d:65:84:e9:de:dd:77:b2:
15:a5:f0:f7:9d:95:29:ff:60:fb:fa:7d:63:bf:52:60:fa:1b:
2b:b4:9a:e4:57:a0:31:58:8c:4d:ea:ac:45:4e:ee:2a:fe:da:
21:12:20:5d:31:64:ec:4c:ef:bb:6e:c1:49:e1:ca:1d:4e:a8:
75:a7:66:d1:90:47:f9:69:bd:f7:1d:79:4c:8f:86:7c:37:49:
d6:3c:7d:97:c8:b7:cb:11:58:01:24:b2:f2:08:51:c1:31:e4:
63:84:0c:7a:63:4b:c5:2f:e5:10:c1:64:76:2e:94:35:c1:2b:
97:9b:36:6a:c5:24:58:cf:c8:4c:db:1d:28:ce:33:02:c0:74:
f5:06:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:26 2026 by rpki-client