Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: obJxqCegyYPfuZujnUNH3DxwpHieBbcI02xDJE1tI9A=
Subject key identifier: AA:AA:4A:A1:DE:80:C0:C7:44:73:64:B1:3C:7C:0E:83:25:3C:42:BC
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 019CAA8F5E3763C65F7F2BF6146886C50501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0BF5
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: 6rgFURHVt0UBsbF047cCKa38OkCqXAGb77WY7oUvR3g=)
3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5e:37:63:c6:5f:7f:2b:f6:14:68:86:c5:05:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=aaaa4aa1de80c0c7447364b13c7c0e83253c42bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:ff:c1:e8:a2:d0:81:b7:37:01:07:1e:9d:
df:b7:51:f5:c0:53:7a:99:0d:1e:f7:58:8a:ce:93:
09:60:78:a8:2d:89:5c:d2:cc:5c:b4:8e:ba:07:57:
d2:3a:8e:ce:a9:1d:2d:7e:06:11:67:89:91:43:4b:
50:ee:34:b3:5b:4c:d8:ab:a2:1d:ac:dd:79:b6:14:
e0:0a:f5:42:f5:6c:1b:4f:72:30:6c:ed:96:ba:53:
86:4f:02:4a:e1:71:dd:ad:28:4d:90:f3:58:6a:8c:
71:b0:1c:fe:1d:96:f3:8c:8e:f6:11:e7:f4:9a:40:
b2:7c:11:97:e7:66:86:c4:a2:53:24:6b:67:e1:78:
0f:01:3e:9f:1f:b0:98:af:06:7a:07:f7:7c:3d:fc:
44:36:cd:23:64:c6:71:17:76:0d:bf:b1:f6:de:89:
67:e5:76:de:1c:d4:07:d0:6b:da:e6:6d:e0:6e:73:
8f:c7:66:81:82:8c:35:1e:29:a4:41:b0:13:9b:a9:
96:c1:d2:83:c5:38:fc:28:e0:ba:b2:5a:97:e0:bf:
67:e4:3e:c1:35:be:0c:54:5d:d9:80:f9:74:a5:1c:
61:6a:5e:f9:a5:37:bb:bc:2a:01:65:cf:4a:de:6f:
63:4d:14:77:de:b1:e0:f3:1a:70:0d:18:6c:84:1b:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:4A:A1:DE:80:C0:C7:44:73:64:B1:3C:7C:0E:83:25:3C:42:BC
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1d:6e:aa:60:19:35:3c:2b:d0:ec:19:6f:0f:3e:b9:17:49:
02:db:25:62:3a:7a:34:7b:18:e5:65:89:b4:a3:ce:81:1a:f3:
d3:f6:5c:33:8d:1c:72:2c:94:d0:78:4c:9c:c9:d1:52:52:b2:
6e:8d:24:fe:03:ea:04:fa:30:f7:d7:61:6f:59:af:bf:1b:6e:
2b:40:e0:17:2b:20:ed:9b:9c:ac:e2:68:79:0a:06:9f:2f:24:
d9:19:fb:60:d2:d4:0f:6f:c0:41:2d:4e:bb:d7:b7:d3:36:2f:
99:a6:fc:55:77:77:1f:cb:b0:ac:f9:8f:c1:e0:b4:12:99:49:
30:36:39:1d:31:61:96:13:05:d9:58:26:e3:42:65:5c:7c:51:
5e:84:0c:51:bb:c8:a6:f7:04:46:05:76:ce:d9:8b:0c:43:77:
5f:30:7a:06:45:d0:d5:08:43:3a:d5:ab:60:1e:4b:8e:8f:fd:
9a:5d:b4:82:c0:b2:e3:8a:35:4b:5d:f1:29:0c:d8:e1:8d:a8:
cd:f5:aa:30:46:60:20:d2:e3:90:63:5d:5f:84:5b:36:02:24:
5b:f5:1b:71:96:04:56:06:e2:8b:c4:14:57:28:55:d7:9a:12:
a1:42:7c:87:1c:61:d3:26:61:6c:02:bc:20:7c:b6:10:50:43:
ea:42:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:47 2026 by rpki-client