Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: 5EpTvU0yWDPRfUMPm2fZQDuj7n/fSLtgdy02+do+x30=
Subject key identifier: F7:59:D0:F7:1C:91:ED:66:61:9A:2B:EB:F6:39:21:C0:68:A4:E9:FA
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 019CAD5A1FAAD83FB9E2E6C582EA963A1BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 0C4D
Signing time: Mon 02 Mar 2026 07:01:30 +0000
Manifest this update: Mon 02 Mar 2026 07:01:30 +0000
Manifest next update: Tue 03 Mar 2026 07:01:30 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: Q35ZJrDonO5LnS5UklAQgNtdhVQOofJcerhMJIAl3h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:1f:aa:d8:3f:b9:e2:e6:c5:82:ea:96:3a:1b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Mar 2 07:01:30 2026 GMT
Not After : Mar 3 07:01:30 2026 GMT
Subject: CN=f759d0f71c91ed66619a2bebf63921c068a4e9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:1c:8d:c9:43:6d:fa:1a:53:fb:f4:91:9e:
fe:0a:73:d9:5e:46:fc:1c:46:d7:cb:7b:72:c5:fc:
76:ea:b3:12:75:42:b3:56:fb:40:27:3f:61:f7:2f:
41:45:0d:3e:f9:48:58:71:47:ef:79:d5:e3:2a:96:
11:b2:5a:35:8f:e5:99:d5:38:96:c2:37:cb:3b:97:
86:75:f4:3e:87:0f:4c:0f:8b:9b:48:42:5f:3b:da:
25:03:a6:f3:63:e4:6f:51:38:f0:b7:91:0a:e4:c8:
06:6c:ec:49:5b:10:f4:e8:2a:82:73:c2:52:d9:2d:
53:86:37:77:d4:13:a9:5a:96:a8:e9:14:db:40:47:
54:11:ad:48:43:12:4f:02:93:96:aa:64:55:64:80:
41:0b:2e:d0:54:f2:a5:a8:5e:ca:6d:da:22:20:91:
8c:ab:84:e8:fb:90:65:65:ba:20:7c:60:b5:0d:36:
69:19:92:42:1f:80:5a:fe:7c:11:00:ff:f4:41:cb:
fa:60:29:09:9b:e9:c1:ba:f1:d8:7d:f7:1d:ad:2a:
75:9e:e4:8a:9c:c5:e4:57:92:48:ff:55:d7:4b:1a:
8c:ba:42:33:18:ba:4c:b9:50:98:f2:43:5a:c9:23:
e0:fa:eb:bd:bd:d2:7d:dc:55:98:62:3d:7d:d6:fc:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:59:D0:F7:1C:91:ED:66:61:9A:2B:EB:F6:39:21:C0:68:A4:E9:FA
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7a:0a:e1:cc:ff:73:90:d4:da:f3:e3:a2:9e:8c:4b:55:27:
07:c9:01:92:99:8b:ca:49:27:26:2f:35:6f:3e:dd:18:6d:6b:
18:bb:dd:fd:e0:11:62:35:fb:04:2a:98:85:88:79:0e:ee:ef:
45:2a:8e:0d:91:95:60:1e:7d:eb:6e:ab:31:46:db:00:e6:a2:
de:60:2b:5e:03:75:4d:f8:ae:c3:4c:86:44:12:31:4b:49:c0:
29:e3:48:1e:f0:0a:84:1d:9f:28:05:a7:f0:10:48:97:d6:3f:
ff:62:f8:c0:4b:06:83:68:18:ad:3e:30:52:8c:8a:50:9f:f6:
71:30:2d:ad:51:bb:09:e3:f6:88:ed:71:83:c4:97:5d:21:e5:
62:97:d7:3e:19:28:fa:54:a1:1a:52:06:c0:ae:28:f8:8c:05:
99:0b:fc:b4:d6:ab:1d:60:58:65:0a:0b:09:5b:13:7b:17:0b:
0c:7b:d9:66:b3:73:62:d8:69:d7:4b:1b:99:65:14:12:85:a0:
4a:bf:51:a9:3b:07:6c:ed:02:e8:86:bb:c1:2e:56:78:81:65:
d7:a0:71:25:d9:e5:94:74:63:7f:e6:ea:80:4d:90:22:1f:ef:
11:5f:bc:66:0d:9e:69:d4:8a:cf:4e:50:2e:a4:6d:91:1e:46:
54:7e:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:38 2026 by rpki-client