Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: pvPVIfPm3r3wlGmlGc2uHzrJZlCy9S/ZX6joOERZncQ=
Subject key identifier: A6:85:BF:69:2D:B6:EF:51:B8:D4:5D:08:E1:2B:9F:30:8F:61:95:D4
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 01A0E92E1FAC0855B4A6848188DC00E4A8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 058C
Signing time: Mon 28 Sep 2026 18:01:49 +0000
Manifest this update: Mon 28 Sep 2026 18:01:49 +0000
Manifest next update: Tue 29 Sep 2026 18:01:49 +0000
Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=)
2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: l5IoXVTLf4FP6Dst26O+AFi4Ue2zecjjIYw8X61ihpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:1f:ac:08:55:b4:a6:84:81:88:dc:00:e4:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Sep 28 18:01:49 2026 GMT
Not After : Sep 29 18:01:49 2026 GMT
Subject: CN=a685bf692db6ef51b8d45d08e12b9f308f6195d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:70:d1:82:f6:2d:f6:87:b7:f0:c8:a0:7d:
dd:e6:f1:c9:04:59:c3:bc:a4:0d:a0:82:06:66:b1:
60:6d:fc:7b:09:9e:fb:4d:7e:09:f9:c6:e5:2a:06:
96:09:a0:ba:6d:ed:04:b4:24:ff:5e:4e:a1:0b:f4:
e2:09:c2:c7:f5:13:27:63:33:f6:ac:9e:ad:6b:7a:
f1:33:4b:00:37:d2:ef:88:7a:e1:d6:66:85:e9:8d:
2f:53:b9:e3:10:c4:3d:49:eb:b8:ef:2b:8a:87:e3:
e0:06:a2:cb:04:5a:f3:f8:7b:b4:44:34:cc:66:a5:
bf:3e:4c:c2:db:33:ba:94:1c:57:5b:09:21:e2:51:
4b:1b:97:c7:59:a0:91:e9:5c:8b:38:d5:44:2e:2d:
e9:9e:06:93:01:75:4a:0e:84:aa:55:98:18:c5:bc:
1c:c1:2c:93:54:97:c0:f8:f2:44:6a:23:ca:71:85:
57:cd:80:6d:37:ab:51:1f:a5:20:64:d4:a5:14:95:
c2:ca:bc:83:e6:d7:f3:3b:76:22:e0:43:b8:ce:c9:
1f:09:06:a3:21:00:cf:55:1e:6f:40:06:3d:d6:2b:
cf:79:b3:30:7b:69:9d:6d:80:cb:ad:5c:0d:67:37:
5e:70:0e:e8:b0:58:c5:df:6e:74:15:00:0f:26:09:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:85:BF:69:2D:B6:EF:51:B8:D4:5D:08:E1:2B:9F:30:8F:61:95:D4
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:59:33:db:12:a5:5a:b6:3e:39:e1:26:49:4f:b3:3b:32:
ef:96:4b:57:a6:ed:11:75:5b:ae:86:e8:00:1a:4d:4e:a3:34:
4e:f9:85:c0:e1:23:60:80:10:18:36:1e:84:17:fe:a6:70:3c:
cb:88:22:e2:ca:af:b9:e8:e5:26:0f:cf:2a:1f:c1:22:50:2e:
5e:51:ea:ef:37:c5:54:10:35:e0:b1:32:42:3b:55:e5:46:4f:
90:89:00:53:4e:9d:af:63:e2:a5:9e:6b:c0:ef:7e:f6:51:1b:
e7:3e:0b:a9:93:95:64:cf:74:29:46:95:9d:e5:c5:16:2d:95:
f2:71:20:38:c2:47:58:1d:dd:2d:64:2a:ca:e4:7d:36:13:09:
40:88:0f:68:e0:25:5f:18:5e:f6:43:ab:45:88:79:a7:1f:1e:
fc:e9:a5:b1:2f:e8:c5:a9:8c:81:b3:76:fb:ff:a0:44:53:7b:
f6:18:ee:50:d4:a9:96:53:c4:74:43:b8:d8:bd:b1:cb:24:df:
f7:2e:bc:cf:2c:cc:4d:41:21:e8:fe:e2:21:97:0c:27:c6:48:
01:ac:ca:cc:a0:fa:b1:27:ac:14:49:a3:4c:8b:a9:76:b4:55:
eb:10:60:61:7e:b4:dd:42:42:6a:eb:74:27:89:47:60:5d:0d:
a7:7e:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:30:43 2026 by rpki-client