Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: Z+knFmratRRCRXqu3PE9dzhvdm/zCT6saBgOg1qGY/0=
Subject key identifier: DD:C2:EF:C2:27:BB:37:37:A3:D5:72:3A:11:83:A9:DB:04:DB:78:D0
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 019CA8A0B809A20629282A1C4319AA0C2C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0BF4
Signing time: Sun 01 Mar 2026 09:00:30 +0000
Manifest this update: Sun 01 Mar 2026 09:00:30 +0000
Manifest next update: Mon 02 Mar 2026 09:00:30 +0000
Files and hashes: 1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: ulYdZ/UHGZaB6N2Es7KXQlgIMNyH5jS8MrsK7/MP7L0=)
3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:b8:09:a2:06:29:28:2a:1c:43:19:aa:0c:2c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Mar 1 09:00:30 2026 GMT
Not After : Mar 2 09:00:30 2026 GMT
Subject: CN=ddc2efc227bb3737a3d5723a1183a9db04db78d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:2d:6c:de:20:57:19:f7:2a:b4:f0:2c:a2:
51:8f:2a:ed:2e:4d:29:fe:fd:1f:8e:ee:aa:a1:4c:
38:28:39:30:ec:fd:e5:03:40:fb:62:9e:98:d5:74:
66:c0:e9:2a:e8:31:1e:e8:76:b0:b1:74:66:6d:db:
68:c7:6d:f4:96:83:31:a5:ce:dc:20:45:02:49:b5:
4e:b1:d7:bd:e8:17:56:02:4a:ec:39:34:ba:91:b5:
95:81:62:04:c2:d9:17:c1:44:72:82:ab:76:2c:af:
36:ed:a4:a1:fc:7b:51:b2:dd:79:a5:eb:11:cb:2b:
45:4b:76:5e:5a:b9:c2:07:c0:c8:39:ad:f0:5e:87:
34:99:2b:d9:50:a0:22:a9:97:eb:d9:12:50:6f:fb:
78:e5:5a:97:54:f7:6a:11:a7:11:bf:a4:03:5e:ee:
a7:fa:d7:92:6d:0a:49:03:5d:86:e5:1e:56:34:a0:
a3:df:2f:9b:b8:8c:d4:22:cb:81:cd:ec:84:b7:3a:
50:93:c0:37:8e:cc:e0:65:e3:16:3c:e2:a8:48:95:
23:01:47:04:6c:b4:24:c6:50:66:21:6c:97:85:b1:
af:e2:bb:ce:4c:fd:b3:6e:12:ea:8e:ed:81:50:12:
a3:97:15:1e:7b:b9:1c:d9:8f:8d:94:00:bf:0c:e3:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:EF:C2:27:BB:37:37:A3:D5:72:3A:11:83:A9:DB:04:DB:78:D0
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:63:10:3c:e8:27:c6:8a:7f:6a:e0:57:3c:65:e1:65:44:23:
f0:70:2c:73:70:41:c9:9d:9c:ac:99:dd:70:a7:f8:61:21:3e:
e3:ce:74:e0:5d:e4:58:44:3e:f8:d7:b5:e6:1f:36:72:62:a7:
d3:34:67:50:20:58:ca:fb:34:fe:49:fa:f2:6d:da:4e:e2:2d:
dc:3e:7b:00:9d:cd:68:b6:47:78:16:6b:53:f5:38:8d:c0:d4:
0d:73:f9:8e:e6:b0:ec:47:3b:09:73:74:50:40:85:40:80:ff:
cb:60:5d:82:98:3a:eb:81:3b:32:2a:9a:e1:21:87:ae:54:2a:
89:fe:13:19:ef:da:50:c5:05:5f:65:31:77:b3:73:b8:5c:a9:
8e:99:27:eb:0e:c5:26:9a:a7:21:71:6a:79:7f:13:75:33:6a:
41:25:3a:c7:dd:4b:7b:44:f9:be:93:f5:65:48:5e:db:16:8c:
59:c1:3b:91:c4:34:5a:fa:27:3a:aa:a5:7b:c8:83:ef:d8:72:
a3:65:7a:96:66:80:e7:39:00:4c:34:09:4c:cb:49:fa:13:48:
24:3d:56:04:03:cb:2e:01:1c:b3:21:d6:30:f7:a0:19:f2:32:
e4:95:ed:2a:a5:f2:a6:b9:28:b8:9d:7f:70:21:d4:90:a4:c5:
92:4e:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:40 2026 by rpki-client