Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: lSfmJn5fTtmDE8iNnYOeodJMuY2L6DvPSY/c+1z8eUs=
Subject key identifier: F7:1C:53:F3:C7:1B:61:83:96:DB:FB:4E:13:5E:67:D4:D1:6D:7D:3A
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019FA9AC69F8ED7DDB1C5DF03B79B817D921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 0266
Signing time: Tue 28 Jul 2026 17:01:16 +0000
Manifest this update: Tue 28 Jul 2026 17:01:16 +0000
Manifest next update: Wed 29 Jul 2026 17:01:16 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: EqFHC7A1pVCQQN/xJPNRnf2H3LNcNsLY1iocErFbgAY=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:69:f8:ed:7d:db:1c:5d:f0:3b:79:b8:17:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Jul 28 17:01:16 2026 GMT
Not After : Jul 29 17:01:16 2026 GMT
Subject: CN=f71c53f3c71b618396dbfb4e135e67d4d16d7d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:8b:f6:33:de:29:f9:a2:3f:64:e2:23:64:
e9:32:bf:90:75:07:97:5f:3a:7e:de:88:81:99:61:
1f:5e:4d:51:d7:e5:69:fb:2b:6c:fe:6f:12:8a:28:
5c:2a:db:8c:94:10:97:2f:a2:04:a4:f7:57:26:8c:
81:ed:b3:8a:2a:cd:5d:22:82:eb:28:98:81:1e:e2:
23:87:de:8a:c4:9d:22:c2:2c:1d:17:a3:e2:c7:da:
25:fe:94:18:e7:ab:94:d4:65:cc:82:d5:4a:1e:56:
b2:02:2a:76:34:1d:f1:4e:e9:09:7c:ed:a2:dc:54:
ea:13:b9:06:25:ae:51:3f:ea:97:40:d1:6c:5f:1c:
e4:29:65:e5:53:65:b5:09:d5:f1:91:db:b3:6f:d9:
58:b9:20:f5:e6:b5:04:66:c7:d6:65:70:f0:f0:95:
71:d4:27:02:0e:07:6d:1f:dc:77:ea:c9:30:3c:d5:
1b:c8:23:f3:b8:c2:68:7a:1f:19:63:ed:e4:b7:5d:
35:47:34:f5:ee:fc:29:40:7a:f8:94:cd:71:1f:06:
b5:cc:12:30:03:3d:d5:47:09:de:80:c4:97:cf:23:
5a:aa:3f:37:38:2b:9f:c8:91:48:db:4e:02:be:06:
d2:b4:c2:ed:f8:28:0d:9b:f4:0d:c5:d2:2b:e7:81:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:53:F3:C7:1B:61:83:96:DB:FB:4E:13:5E:67:D4:D1:6D:7D:3A
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6e:87:78:a5:55:f6:99:a8:45:95:39:ad:2f:63:8b:13:71:
16:19:42:fc:5b:f7:82:bf:7f:77:8b:d9:89:4f:35:4a:81:9b:
12:d3:6c:50:48:17:aa:ed:e3:4e:ce:16:3d:4c:8e:74:22:3d:
82:60:e4:84:c2:a3:c5:ed:d9:9f:16:44:75:f2:6d:9a:bc:6b:
40:01:bb:41:e3:52:db:00:58:29:58:36:78:d4:40:07:76:d7:
7c:2b:e6:0d:79:c7:f4:82:50:0d:04:37:64:aa:fe:d3:bb:5c:
be:08:e3:27:46:80:cf:61:9c:0e:d8:96:63:77:3f:c4:3a:5f:
1d:21:7d:14:90:ac:e4:b9:5e:5f:8e:ec:2e:cd:3f:d2:1e:43:
08:a5:e0:db:ad:2a:0b:9f:11:07:6f:eb:83:34:16:a3:bf:fc:
73:7f:fd:a7:81:fb:14:b5:bb:68:fe:e6:77:ad:2b:c0:6f:d9:
b4:51:e3:9e:f3:57:a6:65:a0:74:b1:5f:73:dc:fe:48:d2:59:
85:4b:97:51:c4:75:85:07:31:78:5f:4b:d9:5f:30:bd:b1:dd:
60:fe:5d:3c:9e:31:b4:c0:c0:e8:7e:16:78:a0:7b:f7:ad:1c:
f9:42:3c:8c:3c:fb:67:73:a3:88:23:98:47:cd:50:3b:2e:db:
58:45:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:24 2026 by rpki-client