Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: oBEpCbMcKSLJ+wmco4TG1K4bx6uMtpZYFy+MNDMmarU=
Subject key identifier: 29:C4:7E:34:59:EE:71:D6:40:4A:02:8B:4D:09:B6:57:EF:53:2B:E8
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019CAE34E53958241A7D82B7B91A7BAFBE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 0F56
Signing time: Mon 02 Mar 2026 11:00:27 +0000
Manifest this update: Mon 02 Mar 2026 11:00:27 +0000
Manifest next update: Tue 03 Mar 2026 11:00:27 +0000
Files and hashes: 1: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (hash: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik=)
2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: oAT3m3mcU0hwYNerDV/IiPZx0WYt1JXdzHHsfIv+hcA=)
3: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (hash: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo=)
4: unkGkB8qp1620UotFb6yhd6x1oU.roa (hash: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:e5:39:58:24:1a:7d:82:b7:b9:1a:7b:af:be:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Mar 2 11:00:27 2026 GMT
Not After : Mar 3 11:00:27 2026 GMT
Subject: CN=29c47e3459ee71d6404a028b4d09b657ef532be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:32:fe:f4:a3:2e:71:a8:c2:a9:24:db:c8:
38:39:d3:4f:39:48:34:80:e5:e4:d3:de:6b:71:48:
49:77:d3:4f:dc:df:26:40:f8:02:65:0d:fb:29:28:
b4:f9:1a:37:84:47:25:67:e6:8b:3c:9c:e1:d2:a9:
0a:02:c1:3e:d7:3d:11:2e:57:d4:af:fb:09:c9:02:
ab:d6:5d:46:ea:ae:19:44:b8:a6:d6:2b:54:c3:4a:
6c:8b:53:87:48:91:6c:e8:b0:e7:84:95:d0:d6:f2:
d6:00:df:c4:6c:5c:1c:c9:3b:fe:7c:37:3f:2c:29:
de:1c:2d:13:2a:22:55:f7:c0:7a:4a:31:49:cb:19:
17:0d:1c:a8:b1:7c:f5:aa:ed:d7:1f:0f:28:f5:f3:
48:9f:20:b6:a5:29:a5:b0:be:13:6f:74:a7:9b:09:
1d:b8:97:d4:1f:8b:ab:2d:88:79:6f:5a:dd:c2:bf:
2f:99:27:b2:c6:87:8d:7c:fa:97:c3:ab:7b:d9:65:
47:e5:c0:f8:b0:c4:ef:b3:b7:ef:c2:8c:bb:6c:e9:
88:df:26:20:af:53:9b:3c:89:b7:40:ea:7c:2e:32:
6c:e5:7a:5d:7b:53:3c:17:28:7a:26:6d:25:31:b3:
7e:fe:42:9b:17:96:02:2b:b5:d5:a1:10:f5:cc:7d:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C4:7E:34:59:EE:71:D6:40:4A:02:8B:4D:09:B6:57:EF:53:2B:E8
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1c:db:c9:6b:b2:e9:e3:64:4d:3e:fc:46:66:a7:71:4e:65:
82:93:b4:9b:f8:37:41:08:2d:4c:f2:02:70:ad:15:8c:2f:80:
fd:39:bf:35:0f:86:a0:16:75:6b:c5:f5:25:bb:7e:43:9a:f1:
32:26:48:3a:e3:74:b2:f0:9a:4c:62:6c:e8:68:a2:aa:6a:f9:
77:8d:b7:16:d2:7f:cd:67:c9:4a:e4:58:38:78:f2:18:64:1f:
33:01:3d:d3:6d:6c:76:6d:fb:d8:aa:87:91:14:23:76:d7:e0:
d3:27:80:d6:be:56:84:2d:62:5b:e4:02:82:93:5a:ca:09:fe:
1d:02:31:ab:5d:31:bf:3d:98:99:19:2d:1f:c1:46:f0:b5:f3:
e8:a9:fe:65:c0:5a:c5:9c:8f:2a:b9:da:4b:0d:77:07:bf:0e:
2b:a8:fd:e8:c8:ef:93:3b:9b:58:36:84:9a:e6:1e:9c:ac:e4:
f3:bc:ad:a6:6a:8a:af:d4:cb:bf:b0:5b:31:80:d2:d8:21:8c:
89:ff:3c:a5:b7:7e:15:36:f8:1f:be:d6:50:6a:bc:80:54:40:
00:70:42:e6:58:aa:49:3d:c0:e4:f3:d0:a5:63:54:cf:62:4f:
b8:b8:b8:47:2d:d8:7e:02:68:3a:e7:42:33:9d:9c:d5:58:b4:
c3:da:3d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:40 2026 by rpki-client