Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: 19mrUez7a0a1yxbA0ZKQHnJhDTN072VHwlqu5PdXCZY=
Subject key identifier: A4:13:EA:D0:8D:D8:3A:A4:14:F8:2D:B6:72:1C:7F:78:16:1D:F2:7F
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019D9BBEB7825C1A803CA2A404FAD7CE3B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 0FD1
Signing time: Fri 17 Apr 2026 14:01:00 +0000
Manifest this update: Fri 17 Apr 2026 14:01:00 +0000
Manifest next update: Sat 18 Apr 2026 14:01:00 +0000
Files and hashes: 1: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (hash: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik=)
2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: PpeJdBCaywT05NFFLHArTSK7yY7mgbsW9FF1fc7ev7c=)
3: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (hash: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo=)
4: unkGkB8qp1620UotFb6yhd6x1oU.roa (hash: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b7:82:5c:1a:80:3c:a2:a4:04:fa:d7:ce:3b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Apr 17 14:01:00 2026 GMT
Not After : Apr 18 14:01:00 2026 GMT
Subject: CN=a413ead08dd83aa414f82db6721c7f78161df27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:2e:f8:ae:78:44:65:1b:5c:e2:f7:cf:38:
79:40:94:c2:31:18:84:19:5b:b9:2b:3b:e3:90:ff:
a0:71:67:8e:e0:10:43:5b:2c:84:76:a0:7d:5f:a2:
29:30:07:01:9c:50:f7:44:6d:9b:02:9f:7f:53:9d:
e2:51:ae:6c:63:13:2f:cc:2b:17:52:76:a3:55:dc:
7f:06:c8:28:93:e4:33:56:aa:cd:56:29:ed:8c:a0:
1d:29:0d:df:3e:ce:a8:80:69:47:bd:fe:2e:e2:67:
66:5c:39:66:9b:6a:d2:ea:b8:8d:60:2c:04:45:9f:
22:38:61:8f:93:1a:7a:62:4a:2e:9d:30:30:10:8a:
ac:9a:30:88:bb:33:87:76:58:74:df:c0:1f:36:ad:
97:e3:91:cf:6c:f4:1f:88:c5:ae:f5:c2:42:93:65:
53:85:07:c3:65:47:51:34:bc:8e:28:c1:73:7a:8f:
8e:1b:dd:1d:84:d0:04:2a:46:0a:39:1f:80:da:31:
12:21:d2:43:1b:ad:35:3f:a6:ae:25:7f:9b:51:fc:
89:8c:c7:84:cc:7a:69:f9:4f:7b:30:28:88:6e:36:
ab:ed:cb:d9:02:d1:e3:10:32:9e:5a:5f:e1:10:82:
d7:1a:53:e7:d5:9a:d6:ac:d1:90:bd:67:30:df:20:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:EA:D0:8D:D8:3A:A4:14:F8:2D:B6:72:1C:7F:78:16:1D:F2:7F
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:5b:f7:8d:a0:68:61:21:97:28:0c:53:72:0b:72:78:5e:
a6:5f:cd:1c:57:cb:17:a9:fe:35:d1:de:46:ef:2e:2b:73:f5:
ac:cf:e8:18:dc:dd:8b:3e:1e:ee:ba:b3:8b:1d:d3:a4:21:ce:
6d:60:b0:91:07:a6:66:2c:a0:b5:52:95:24:24:6a:2a:63:34:
38:29:65:67:3a:77:99:18:20:3f:e3:ff:98:c1:38:7b:b0:a8:
0e:eb:4c:3a:3a:9a:c7:60:c3:78:a9:d4:a4:31:a0:f6:04:d1:
41:8f:4e:9f:9f:39:9c:30:70:41:e4:c9:30:be:8b:0c:09:43:
46:ee:fe:1c:aa:6e:4b:0d:14:2b:8d:c8:29:f1:9d:4c:b9:65:
1f:c2:39:ab:71:36:7b:46:5a:81:2c:a5:58:d4:31:8c:8a:d5:
aa:c0:73:dc:1a:25:e0:50:26:ff:78:a6:0d:a6:7a:a7:5e:3e:
f7:97:12:0b:4c:6b:77:1b:9b:a0:e4:c9:00:37:d9:66:3f:aa:
19:3a:88:2c:40:1c:1d:cd:22:0b:0e:b5:8f:d2:90:57:f1:a7:
f4:d1:b7:7f:33:d3:08:56:7a:30:e6:9c:fd:d6:a0:d5:b8:96:
4a:27:7e:cb:93:3a:77:af:66:c7:70:d4:7e:8f:68:b2:a8:67:
22:fc:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:26 2026 by rpki-client