Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: wYWMmGLIeIHZb3bPWgWUspk+eVChOONCAVqEcDh+Y20=
Subject key identifier: 74:80:19:3E:2A:7C:F0:96:FF:55:B7:DA:4D:22:65:80:A9:9D:A8:B8
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019CACEBB3397E67B24CF65DDA474C72D1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: DA
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: rQWm6yu6QNqxMVMfwGz1kf3aNJYN01xHNlXFwuXi8W4=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b3:39:7e:67:b2:4c:f6:5d:da:47:4c:72:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=7480193e2a7cf096ff55b7da4d226580a99da8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:a4:3d:85:9e:29:6c:f5:37:e1:0f:fd:7c:
b8:00:eb:f2:da:91:2b:c3:cb:5e:e3:f9:ea:60:2f:
ef:77:36:4b:ce:37:ff:26:ef:8b:5a:b8:89:41:f9:
9b:05:10:9c:19:b4:b6:b8:70:f9:be:a5:93:95:a3:
91:af:6a:ec:b6:95:b5:d5:e3:f8:0c:77:df:f7:1d:
6f:43:7f:0b:0f:6f:8f:b4:6d:a0:46:a3:6d:32:5d:
54:bc:d0:6c:84:7f:84:a3:cb:5c:45:23:b8:49:08:
4c:3b:c3:f1:e8:17:7b:0a:74:10:fe:c4:3b:88:9e:
6e:51:e3:7c:0d:a2:b5:bf:4f:6e:12:da:bb:24:a7:
f0:4a:41:66:f0:fe:99:e6:ea:fc:e8:17:c6:02:92:
7c:34:17:84:d7:8d:cb:58:ce:dc:8e:5a:71:ee:4b:
dd:ce:e1:f2:3c:3c:72:e9:20:80:07:3c:25:81:c0:
15:0d:be:fd:d7:77:e1:72:28:b5:a4:e3:18:36:bb:
a8:ad:e9:38:c9:5a:7a:56:4c:b6:b1:ef:2e:c5:7e:
53:de:e8:58:ed:06:a8:7e:09:3a:0b:9f:ca:25:53:
1b:f5:ac:ee:2a:3c:aa:22:20:92:3e:d5:d3:43:54:
ce:e0:2e:9e:ef:0f:94:8d:6b:15:be:cf:49:56:8e:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:19:3E:2A:7C:F0:96:FF:55:B7:DA:4D:22:65:80:A9:9D:A8:B8
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a7:95:c4:90:c2:4b:a6:31:0c:3d:98:37:98:b7:71:62:0f:
1e:4b:0e:07:4e:c3:ef:ea:d2:96:71:f7:56:5b:81:ef:bb:3d:
cb:7e:90:1f:09:e6:0d:62:90:dc:0d:c0:bb:ab:2a:60:f5:55:
bc:13:40:94:2c:f7:35:af:ff:d0:b7:b9:a3:d2:25:9b:7f:fb:
7f:01:5b:46:6d:f2:b6:24:76:a1:ed:c3:c8:da:9e:f3:e2:a5:
f0:5a:9d:e5:db:18:9f:86:85:eb:9b:88:81:5a:93:39:98:57:
f0:1b:87:c9:51:57:73:bd:e7:47:b1:24:87:3e:9a:f3:1a:88:
d7:29:8a:9b:fb:11:45:3c:4d:24:5f:b2:ac:7e:85:29:c9:27:
80:de:50:19:b6:7f:9e:3f:0e:60:fc:7d:df:21:a0:eb:fe:d8:
20:a0:6e:c1:04:5b:b3:34:7b:d7:a7:20:d4:40:8f:66:e5:97:
38:34:c7:06:aa:c4:55:2e:63:86:ff:8b:a5:66:02:59:6e:53:
53:a8:cf:9a:9a:5c:28:b8:57:3e:e8:90:d8:a3:bb:bd:3e:95:
05:f5:b2:00:68:62:d2:7a:81:24:a5:9b:47:cb:d8:52:1c:84:
96:7a:e4:e8:82:e3:22:95:b0:df:d4:78:b8:26:8b:fc:7b:41:
ac:65:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:54 2026 by rpki-client