Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: tuouow+LrJbhNWEyGpiLZcjSgbc0SjJMMNEjvi4aHww=
Subject key identifier: F0:56:ED:9A:6F:41:B9:A4:99:D2:B6:D5:8E:01:65:98:62:2D:5D:C3
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019D99D08EAFDD84D58A300B797223BEFB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 0FD0
Signing time: Fri 17 Apr 2026 05:01:14 +0000
Manifest this update: Fri 17 Apr 2026 05:01:14 +0000
Manifest next update: Sat 18 Apr 2026 05:01:14 +0000
Files and hashes: 1: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (hash: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik=)
2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: tYts+sEza7so+Q+pb3TZr1E05eM21fiKLhfAu5O3joQ=)
3: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (hash: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo=)
4: unkGkB8qp1620UotFb6yhd6x1oU.roa (hash: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:8e:af:dd:84:d5:8a:30:0b:79:72:23:be:fb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Apr 17 05:01:14 2026 GMT
Not After : Apr 18 05:01:14 2026 GMT
Subject: CN=f056ed9a6f41b9a499d2b6d58e016598622d5dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:21:b4:35:62:ed:d7:1b:87:23:cc:e4:0f:
21:90:18:f5:c6:8f:d6:b7:17:80:50:2d:44:43:74:
0b:8c:d6:35:1b:0c:4f:5d:87:73:20:20:af:05:61:
ac:b9:85:18:0f:d5:dc:2f:7f:f6:1a:9e:f7:04:5e:
51:ae:1c:53:96:f4:91:6c:e3:67:c2:ef:09:9e:01:
da:c1:2b:1a:0a:70:86:03:c9:3b:20:43:95:6b:51:
96:49:50:a7:80:be:d0:aa:e0:3a:05:01:32:62:bf:
ad:9f:9d:b7:cd:43:e4:ca:90:48:24:89:9b:e8:c5:
ca:36:a0:ce:e0:54:8a:4d:35:96:16:e0:db:bd:41:
41:b1:29:d5:91:9f:e6:a6:3b:62:f1:9c:95:92:e1:
c0:3d:fe:f9:69:70:bb:d1:e9:1c:7e:c6:bf:5e:bb:
84:96:aa:22:61:ee:40:b4:b6:02:e8:65:ed:3e:de:
5a:e4:25:e1:43:ee:c0:ae:a7:c6:05:52:8d:73:94:
b2:05:83:cc:83:1c:b9:d7:5d:98:fb:02:8d:98:86:
99:7b:ba:4c:64:e3:9a:26:94:bb:90:d2:f7:e9:5c:
60:dd:3c:c4:24:56:c4:a8:9b:0c:2b:b2:af:87:1e:
f9:d6:e8:44:6f:20:78:26:35:14:3a:31:d3:03:25:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:56:ED:9A:6F:41:B9:A4:99:D2:B6:D5:8E:01:65:98:62:2D:5D:C3
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:10:74:a7:0a:a8:15:1b:76:cb:7b:fe:96:f8:62:36:14:aa:
a1:43:b3:4f:d1:b1:ab:09:b8:32:c2:a2:7f:0a:d0:59:55:97:
4f:32:ec:ce:4f:98:fc:de:47:1d:5d:27:14:ab:78:4e:0f:6d:
00:5d:cb:31:b6:5c:5b:7b:cf:a2:c8:aa:e6:7b:5f:e4:43:51:
39:37:9d:f6:d4:84:8d:08:fe:82:66:d7:e4:a7:4d:58:18:7b:
ee:4e:c0:b3:77:b8:c7:c9:25:55:b6:30:0a:a6:5d:20:70:92:
57:e7:cf:a5:88:a8:63:60:cc:ea:3d:59:ed:c9:26:53:ae:82:
0e:8e:c9:5c:9b:52:d3:0e:a8:21:78:e9:4a:d3:51:27:90:74:
c1:3b:b4:61:63:37:bf:73:b0:3d:8b:30:c5:11:77:f9:24:3b:
4b:f8:cd:76:ae:6e:fc:89:bc:f7:14:98:12:4f:7b:0a:ad:aa:
b2:30:0a:46:1d:6c:2e:af:17:3b:47:df:6e:eb:00:27:de:4f:
76:19:b1:f6:06:51:f5:e9:87:e5:e3:6b:dc:7a:c2:4e:03:55:
ed:f4:9a:aa:26:bf:55:13:2a:f8:65:11:71:07:47:2d:45:96:
d3:a8:a8:ac:be:8b:b4:50:9f:34:4c:4f:7b:76:15:ba:59:86:
4f:75:af:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0I6v3YTVijALeXIjvvtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2
MjUwZTYwHhcNMjYwNDE3MDUwMTE0WhcNMjYwNDE4MDUwMTE0WjAzMTEwLwYDVQQD
EyhmMDU2ZWQ5YTZmNDFiOWE0OTlkMmI2ZDU4ZTAxNjU5ODYyMmQ1ZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyYhtDVi7dcbhyPM5A8hkBj1xo/W
txeAUC1EQ3QLjNY1GwxPXYdzICCvBWGsuYUYD9XcL3/2Gp73BF5RrhxTlvSRbONn
wu8JngHawSsaCnCGA8k7IEOVa1GWSVCngL7QquA6BQEyYr+tn523zUPkypBIJImb
6MXKNqDO4FSKTTWWFuDbvUFBsSnVkZ/mpjti8ZyVkuHAPf75aXC70ekcfsa/XruE
lqoiYe5AtLYC6GXtPt5a5CXhQ+7ArqfGBVKNc5SyBYPMgxy5112Y+wKNmIaZe7pM
ZOOaJpS7kNL36Vxg3TzEJFbEqJsMK7Kvhx751uhEbyB4JjUUOjHTAyU8QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBW7ZpvQbmkmdK21Y4BZZhiLV3DMB8GA1UdIwQY
MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt
OWU4MmRhNzMxNWNmLzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm
LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhB0pwqo
FRt2y3v+lvhiNhSqoUOzT9Gxqwm4MsKifwrQWVWXTzLszk+Y/N5HHV0nFKt4Tg9t
AF3LMbZcW3vPosiq5ntf5ENROTed9tSEjQj+gmbX5KdNWBh77k7As3e4x8klVbYw
CqZdIHCSV+fPpYioY2DM6j1Z7ckmU66CDo7JXJtS0w6oIXjpStNRJ5B0wTu0YWM3
v3OwPYswxRF3+SQ7S/jNdq5u/Im89xSYEk97Cq2qsjAKRh1sLq8XO0ffbusAJ95P
dhmx9gZR9emH5eNr3HrCTgNV7fSaqia/VRMq+GURcQdHLUWW06iorL6LtFCfNExP
e3YVulmGT3WvZg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:31 2026 by rpki-client