Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: /ZDZyX7k59b/jpuyuGrsS1X39ozfI1y/9o5s1fOIC+Q=
Subject key identifier: 8E:60:05:24:AD:D8:D8:6E:42:62:CC:EA:77:0F:56:3A:26:AA:5D:1A
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 019FAC75BDD0588D14035BA9C80DB545C073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 04E8
Signing time: Wed 29 Jul 2026 06:00:25 +0000
Manifest this update: Wed 29 Jul 2026 06:00:25 +0000
Manifest next update: Thu 30 Jul 2026 06:00:25 +0000
Files and hashes: 1: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (hash: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI=)
2: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: ypoBxln3JpPDFGpECQh62jTVYfDawKPJvB8sJQJOI+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:bd:d0:58:8d:14:03:5b:a9:c8:0d:b5:45:c0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Jul 29 06:00:25 2026 GMT
Not After : Jul 30 06:00:25 2026 GMT
Subject: CN=8e600524add8d86e4262ccea770f563a26aa5d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:90:64:a3:20:64:2d:4d:ae:b4:ad:50:b8:
53:c9:7d:97:f9:29:9d:d3:44:88:50:d8:12:76:95:
bc:33:0a:35:2a:4b:cc:79:e7:a6:bf:89:dc:59:3a:
23:ef:b1:af:a9:89:b0:fc:0a:8d:7e:33:f7:37:55:
a9:6c:30:e3:b8:5a:06:83:87:41:f8:3d:d8:cf:c3:
15:4e:df:06:97:d8:ab:b6:64:13:1e:41:2d:07:8b:
ab:d6:4d:e6:50:e6:cf:68:d8:ec:42:24:04:06:6a:
d1:f4:95:4c:97:31:7d:54:4c:50:be:69:f6:4f:4d:
b0:2a:6a:6d:e6:39:53:fa:79:83:80:ac:fa:79:d2:
1e:07:80:0e:d2:03:d2:e6:c7:3f:b6:64:c6:01:7f:
1b:c9:a7:88:05:a7:4d:b5:9c:96:d7:f8:54:0b:82:
4a:fb:c4:36:8c:90:aa:17:83:ba:58:cd:1d:57:e1:
7b:01:c6:f1:49:11:d4:5c:e2:fa:ae:8c:16:9d:a3:
ed:66:8b:f9:70:18:b5:e2:2d:93:ef:6f:8b:e8:3c:
de:1d:63:f4:dd:69:5b:f2:76:05:75:d5:8a:bc:23:
c5:25:8f:21:53:e4:7a:0c:bc:98:fd:54:f6:f7:ef:
d9:32:d9:7d:bf:e7:37:76:7c:2c:6f:ec:f4:a5:a1:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:05:24:AD:D8:D8:6E:42:62:CC:EA:77:0F:56:3A:26:AA:5D:1A
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c7:17:e5:f1:75:8b:5c:05:38:4c:1a:a4:1f:23:03:55:a8:
01:76:41:7c:cc:46:14:c5:b9:fe:d9:68:e8:ca:49:80:68:04:
2d:7f:b4:8d:e4:47:1f:f8:01:06:5f:11:d9:7b:eb:97:0e:47:
78:ad:ed:f1:25:04:64:04:f0:11:7d:4d:b2:76:f0:d2:57:ab:
a9:0e:d1:c5:74:fe:14:99:8b:40:e9:e5:2a:be:c6:69:d1:5c:
77:24:9d:a9:a4:1f:47:49:48:e9:4d:9c:9c:9d:33:4b:0f:86:
05:a0:58:5d:e7:6f:05:27:44:d5:73:2d:62:b8:b3:fd:5c:aa:
f5:e5:84:3c:59:70:69:c1:c6:db:46:64:79:eb:6c:53:92:b6:
e2:31:ea:39:9a:35:68:03:97:ff:97:da:e8:89:3d:85:49:22:
98:09:ec:46:2d:f0:2e:fd:38:10:bd:67:ef:b0:32:7c:db:41:
72:7a:bc:42:f6:b4:26:b4:ed:3d:d3:55:dd:e4:50:b7:14:73:
e7:b0:e1:e4:f1:79:2f:6a:28:ab:7c:5a:69:30:23:a6:a6:95:
87:22:11:08:03:17:70:15:2d:37:cd:2d:46:38:1a:6d:d1:96:
d3:1d:0d:6f:92:c7:b5:3e:ba:6a:7e:61:c1:0d:cc:e2:e0:b5:
48:83:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:46 2026 by rpki-client