Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: cYjrzY6u2b/jilk4SzKkFzSeuaLp5p6LPxxzhvAIu/A=
Subject key identifier: 01:50:5B:BA:14:ED:F9:9F:AE:A0:6C:CC:54:1D:1A:EC:08:12:7E:68
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019CAF10AF9D86E51FCAB71D92F4B7E949BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 037F
Signing time: Mon 02 Mar 2026 15:00:32 +0000
Manifest this update: Mon 02 Mar 2026 15:00:32 +0000
Manifest next update: Tue 03 Mar 2026 15:00:32 +0000
Files and hashes: 1: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: +bVQQGZ+wIjFupXv4TlBGC1iiz28XRbCsCh/hXvV8DA=)
2: UUAHI_7SIhKcVzW9olEU3hr90P4.roa (hash: 1Mr7LwrS72G42+UhnAG6LuOalIKM9llRzMme5qGk16o=)
3: X0orZvAnpH23wTY0Q4gXoTzt8KI.roa (hash: VF40dmzH/cRgFMsp6KEMnD9BlOVNc71M0tqY5JA5SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:af:9d:86:e5:1f:ca:b7:1d:92:f4:b7:e9:49:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Mar 2 15:00:32 2026 GMT
Not After : Mar 3 15:00:32 2026 GMT
Subject: CN=01505bba14edf99faea06ccc541d1aec08127e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:30:06:37:0b:96:5d:14:4a:7c:66:46:42:
a2:45:c9:fd:08:24:fe:9f:14:24:91:c8:c4:49:05:
8e:23:f4:57:8b:6c:84:9f:51:1b:f1:10:e2:de:98:
5d:f2:8e:87:68:a9:93:d7:19:a9:5d:87:ff:93:bf:
92:54:d1:d0:9e:9e:72:13:47:d2:4a:73:1a:80:c7:
a7:ca:96:02:39:6b:74:ed:cb:67:98:64:21:3d:87:
9b:22:4a:7d:4f:47:82:cc:04:3b:ec:4a:dd:aa:63:
6f:02:99:d9:75:15:fc:f9:d9:4a:dd:c8:70:02:68:
26:c0:3d:84:a6:fc:0a:58:ec:a8:a0:aa:4c:20:0f:
b8:36:0c:52:07:38:3a:b4:4e:3f:93:fc:b5:73:f6:
fe:6d:55:c6:67:e4:bb:1c:01:6e:26:8e:bf:b6:20:
3d:8c:07:0b:be:eb:18:c1:ac:be:2d:2d:99:31:ea:
d0:47:47:28:42:5d:56:2f:2e:6a:d1:89:fc:10:b5:
cd:92:f6:ae:1f:fd:b7:04:a5:55:13:1d:cd:5c:5a:
9c:c3:3b:43:4f:73:a2:27:be:57:ca:0d:cc:cc:cb:
3b:4f:1d:16:06:ba:39:70:7a:0e:86:64:56:db:a3:
2d:93:78:29:3f:76:de:3b:56:37:9c:8d:49:11:5c:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:5B:BA:14:ED:F9:9F:AE:A0:6C:CC:54:1D:1A:EC:08:12:7E:68
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:63:3a:9e:06:b1:5d:87:53:52:ea:d1:db:f3:42:10:e3:1d:
c0:82:91:1d:91:4a:2a:62:84:98:a6:b5:d3:80:09:46:f2:47:
fb:41:ba:96:c4:e8:1f:95:9f:6b:fc:c5:e0:71:0a:fd:16:fd:
e8:a7:dd:bf:1c:de:50:ab:7e:78:85:5c:b5:6a:7f:7f:ff:9d:
f8:86:4f:44:bb:b4:59:0c:15:93:cf:4a:1e:fc:c8:70:e4:91:
35:9f:ed:48:40:4b:bf:79:02:e0:22:73:9c:9b:99:d7:79:0a:
ab:8d:05:22:3d:59:66:c0:06:a0:06:6e:6a:22:a1:54:e0:04:
fc:cd:6d:5b:8c:6a:4a:d6:9e:7c:73:9a:81:6b:c5:40:af:2d:
95:4e:f3:33:a6:c7:9d:25:16:e3:b4:05:13:95:70:a9:73:8f:
bd:13:07:44:7f:d3:a6:8c:1a:7d:50:65:7e:eb:4c:7c:f3:43:
0d:5a:ac:38:57:47:4d:18:f5:53:39:52:72:aa:a9:c6:10:a6:
e8:74:c1:45:db:60:76:92:29:16:0c:31:c9:35:a3:20:5f:98:
17:a7:79:1d:1b:e8:8d:ac:da:c9:b9:44:0b:b2:64:cd:c4:08:
fe:13:f4:e9:14:d4:30:ac:fc:e9:76:82:b5:fe:d3:d9:84:da:
a1:31:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:35 2026 by rpki-client