Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: Ffh5dQ49TfQWS+oyokJ0EZQpRjSf2Ucfg/SYJSg0iUo=
Subject key identifier: F8:E2:84:00:61:E3:5C:D2:86:B6:2C:7D:4B:88:27:FE:A2:D8:03:19
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 01A0D34B05BEDBBFAB696AA64CEB98FEB82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 05A4
Signing time: Thu 24 Sep 2026 12:01:44 +0000
Manifest this update: Thu 24 Sep 2026 12:01:44 +0000
Manifest next update: Fri 25 Sep 2026 12:01:44 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: D8Xlqtr7Pjc1RrTHZL5xxu53E0Y489b9sMEBTq5Di5g=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:05:be:db:bf:ab:69:6a:a6:4c:eb:98:fe:b8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Sep 24 12:01:44 2026 GMT
Not After : Sep 25 12:01:44 2026 GMT
Subject: CN=f8e2840061e35cd286b62c7d4b8827fea2d80319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:4f:c0:24:c4:55:47:9e:ad:a0:33:ec:e6:
56:6c:d0:78:a7:e8:7a:c1:79:35:b5:36:30:ce:6a:
84:3d:11:74:2d:a5:c8:d8:7d:af:f8:b9:a0:cb:e6:
a6:b8:7c:28:20:5c:13:66:56:08:c3:d7:bf:82:f4:
3f:a6:fc:2f:ed:12:3b:e3:56:8a:2e:38:38:a8:1c:
98:f0:34:a7:50:ea:52:70:c7:ec:ca:bc:6b:cc:13:
96:1d:26:50:34:c4:17:82:7b:89:e3:d7:3c:3e:26:
23:c0:92:5b:0c:dd:11:7e:6f:9b:db:81:ac:90:3a:
ec:80:47:ec:57:45:a6:81:93:ca:e9:b5:06:8b:0f:
3d:67:cb:51:68:d2:8c:be:7d:7c:48:71:b1:aa:35:
8f:6b:d8:60:81:d5:1f:0e:e7:bb:a3:32:74:1b:5b:
fd:18:e2:68:6c:8e:46:93:1a:c1:62:10:c8:9b:a9:
37:18:4f:21:69:96:67:9d:e5:ce:d7:ca:fa:17:30:
d6:26:a9:ca:8c:3d:53:cd:a2:a7:99:95:27:29:c4:
95:82:b1:d5:bf:f6:b7:cb:f1:b8:7d:97:4d:0d:fa:
0f:25:cb:03:14:0a:0e:03:3c:b9:e0:a4:23:a1:56:
92:1d:b6:6b:9f:c1:7d:34:da:dc:09:d4:41:8e:fa:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:84:00:61:E3:5C:D2:86:B6:2C:7D:4B:88:27:FE:A2:D8:03:19
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:ea:73:6b:0b:dc:74:94:c8:04:0d:e1:04:ce:54:b4:64:
1b:9f:45:a4:a6:e3:1f:ab:be:4c:77:74:fe:85:b0:06:7d:54:
6a:ce:b4:f8:f3:4e:c0:1f:ff:db:a1:09:e7:2c:24:02:32:73:
71:11:a9:63:4d:70:2b:2e:50:b0:c4:25:57:2f:68:21:88:f7:
a3:e4:90:ec:d8:24:40:fb:7d:54:ab:24:09:75:7d:b3:e5:aa:
04:25:be:1e:c6:0c:ea:1c:8a:e3:6c:0e:2d:98:ef:02:80:c4:
61:ca:7c:15:95:bc:7a:58:93:8e:a6:fa:a5:a4:28:51:7f:ad:
5c:3c:37:8f:a5:a9:ef:c0:7a:3c:2a:02:18:86:46:d0:5b:91:
12:ec:65:4d:f7:43:fa:e2:97:ae:4c:63:54:f3:93:27:78:dc:
ed:77:bf:9a:b2:6b:80:55:66:ad:8a:55:22:f1:67:30:65:82:
bd:9b:db:b8:2c:c2:f9:77:a5:50:da:c0:2a:8b:54:81:bd:e7:
49:b3:20:d8:2f:b3:ed:c2:1e:e0:b6:b2:09:af:6d:75:44:ad:
f6:e1:cb:b1:57:a7:a4:fc:24:9c:4e:ff:cb:c8:42:12:52:f4:
6c:0b:48:0a:29:7b:a5:33:20:e0:c4:f5:51:22:f1:07:a6:8d:
c3:2e:74:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSwW+27+raWqmTOuY/rguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4
YmZkZjMwHhcNMjYwOTI0MTIwMTQ0WhcNMjYwOTI1MTIwMTQ0WjAzMTEwLwYDVQQD
EyhmOGUyODQwMDYxZTM1Y2QyODZiNjJjN2Q0Yjg4MjdmZWEyZDgwMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmpPwCTEVUeeraAz7OZWbNB4p+h6
wXk1tTYwzmqEPRF0LaXI2H2v+Lmgy+amuHwoIFwTZlYIw9e/gvQ/pvwv7RI741aK
Ljg4qByY8DSnUOpScMfsyrxrzBOWHSZQNMQXgnuJ49c8PiYjwJJbDN0Rfm+b24Gs
kDrsgEfsV0WmgZPK6bUGiw89Z8tRaNKMvn18SHGxqjWPa9hggdUfDue7ozJ0G1v9
GOJobI5GkxrBYhDIm6k3GE8haZZnneXO18r6FzDWJqnKjD1TzaKnmZUnKcSVgrHV
v/a3y/G4fZdNDfoPJcsDFAoOAzy54KQjoVaSHbZrn8F9NNrcCdRBjvoqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjihABh41zShrYsfUuIJ/6i2AMZMB8GA1UdIwQY
MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct
OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3
LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr3qc2sL
3HSUyAQN4QTOVLRkG59FpKbjH6u+THd0/oWwBn1Uas60+PNOwB//26EJ5ywkAjJz
cRGpY01wKy5QsMQlVy9oIYj3o+SQ7NgkQPt9VKskCXV9s+WqBCW+HsYM6hyK42wO
LZjvAoDEYcp8FZW8eliTjqb6paQoUX+tXDw3j6Wp78B6PCoCGIZG0FuREuxlTfdD
+uKXrkxjVPOTJ3jc7Xe/mrJrgFVmrYpVIvFnMGWCvZvbuCzC+XelUNrAKotUgb3n
SbMg2C+z7cIe4LayCa9tdUSt9uHLsVenpPwknE7/y8hCElL0bAtICil7pTMg4MT1
USLxB6aNwy50VQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:10:17 2026 by rpki-client