Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: KLMi2QWTcI/CpDA1spibGpfPIxxDc//mjrZr7zjMao4=
Subject key identifier: F7:22:9C:24:37:6A:1A:C6:6C:73:71:2E:AA:70:01:31:40:F0:B6:D5
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 019D9A072B0B98DA9BF66B85CC3A4A8797DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0C71
Signing time: Fri 17 Apr 2026 06:00:54 +0000
Manifest this update: Fri 17 Apr 2026 06:00:54 +0000
Manifest next update: Sat 18 Apr 2026 06:00:54 +0000
Files and hashes: 1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: ouTPJuzCkIwcX45jIBBah9bOEw+mJnecirQv0oWYFTQ=)
3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:2b:0b:98:da:9b:f6:6b:85:cc:3a:4a:87:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Apr 17 06:00:54 2026 GMT
Not After : Apr 18 06:00:54 2026 GMT
Subject: CN=f7229c24376a1ac66c73712eaa70013140f0b6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:fe:65:46:a0:94:58:ee:17:b7:1b:b3:d1:
9e:89:ec:18:7b:22:2b:28:fc:f4:ed:3d:ed:fb:a4:
82:b8:9b:f4:df:e7:9b:01:89:8f:9f:79:bf:19:1c:
03:f9:52:5a:9b:c1:2c:71:68:2f:c7:81:1a:3f:7a:
3f:77:d3:14:cd:75:b0:d1:3b:87:cf:1d:03:be:f2:
81:61:fa:bf:b6:78:76:04:c6:2d:b4:b6:34:6c:2d:
97:ab:57:60:31:8f:ec:89:7f:54:82:7c:32:bc:31:
f8:a6:ea:bf:49:91:59:39:d8:85:7b:37:4f:44:44:
04:24:f5:75:cd:b4:c2:e1:c5:cf:8c:24:02:e1:2b:
bb:53:fc:11:d2:6d:11:e7:ca:e0:17:c0:2a:c7:0e:
50:d6:a2:b2:06:af:a9:d2:61:3e:44:61:bf:59:c1:
ee:3b:f3:d2:5b:24:e8:1e:8e:fd:aa:e1:b5:4a:76:
a3:86:57:90:7d:b4:8b:36:b1:84:2f:6b:3e:79:31:
67:51:3d:e3:f7:3e:40:69:33:9a:eb:0a:7a:c5:29:
33:58:78:1b:dd:18:6e:7a:99:15:57:13:20:ca:cd:
d2:17:e9:e2:81:34:f6:7c:9d:9e:27:f5:8c:e9:e1:
81:2e:05:64:5f:22:e2:10:6b:ce:b9:25:92:e4:60:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:9C:24:37:6A:1A:C6:6C:73:71:2E:AA:70:01:31:40:F0:B6:D5
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:25:c1:9a:2b:df:57:f9:68:27:88:2a:8b:ad:bf:8e:c5:93:
6f:fd:a7:80:97:51:2a:35:6a:72:a1:7a:aa:14:14:76:95:ff:
35:c6:83:5f:7c:c1:db:d3:3f:c1:e0:3c:ff:3d:08:f9:d2:dc:
3b:66:65:96:26:d7:6d:50:cd:ec:e8:f1:e7:ad:e7:7f:fa:d7:
5f:f8:5f:3b:65:8b:a1:4b:28:2f:d3:ea:e7:df:5b:46:03:f6:
38:b8:db:de:c6:92:12:13:15:95:82:68:f2:66:1f:ba:b6:59:
1b:2b:3b:f6:28:26:ec:8e:cb:34:fa:7f:bc:34:9f:ad:e0:31:
e1:ad:f3:5b:2d:7d:0b:8e:94:25:94:47:44:e4:da:cd:d5:3e:
7c:69:35:79:15:ba:d0:cf:85:ab:18:a3:4c:e0:55:0a:bd:94:
9d:46:da:45:3e:4d:8f:c1:bb:c9:00:eb:d6:af:c8:9d:bc:e4:
a9:2b:6c:09:fa:ad:e7:47:ab:7f:29:1c:e2:6d:7b:98:a5:22:
73:c4:75:23:0e:84:9e:a7:b9:e4:ed:f3:26:ca:01:45:1d:bb:
f7:ff:b4:88:8f:94:1c:da:e9:6e:48:85:86:47:15:25:da:09:
8c:6e:d1:a8:e4:4d:26:b6:1c:82:b7:2a:6b:2b:54:83:69:61:
8f:d3:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:14 2026 by rpki-client