Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: i6PmnLziX+tEOMbB3LPGwQyKWcQwKNsdVxdN2rYfFGQ=
Subject key identifier: 76:A1:DC:B5:35:56:BF:A1:D3:4B:74:CA:EC:71:1F:24:1D:32:5B:EC
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 019DA41D2905C8C68CF778F2088A6FF516A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 015A
Signing time: Sun 19 Apr 2026 05:01:07 +0000
Manifest this update: Sun 19 Apr 2026 05:01:07 +0000
Manifest next update: Mon 20 Apr 2026 05:01:07 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: cJrbfl+ubOA8CTlREUtxdvRF0NaraTkNcVrL2OEPKeo=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:29:05:c8:c6:8c:f7:78:f2:08:8a:6f:f5:16:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Apr 19 05:01:07 2026 GMT
Not After : Apr 20 05:01:07 2026 GMT
Subject: CN=76a1dcb53556bfa1d34b74caec711f241d325bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:89:9f:d0:70:0a:49:de:2b:ee:5a:6e:3f:
5f:e8:29:c6:cd:f5:38:77:31:81:01:c4:29:26:a6:
d8:28:3a:a7:a8:57:4e:96:d4:10:ee:dc:19:dd:ed:
2e:26:10:3f:55:a2:35:c4:f5:3a:3f:51:3e:e8:75:
25:03:8a:9a:36:a0:20:6f:6f:ef:ba:a7:86:80:6f:
54:48:04:a4:a2:13:5e:c6:6d:48:53:09:88:66:29:
18:9f:b2:f8:10:d1:1c:53:7f:2d:c4:a4:43:d0:ac:
92:a6:b7:fe:bb:85:1a:aa:c5:32:c4:e0:f3:6a:a8:
36:a6:1a:15:b7:e3:3f:22:6d:99:ff:b7:71:f8:3d:
6a:41:8e:52:ff:e0:92:cd:59:40:3b:df:06:c2:36:
5e:c7:b8:f7:d0:cd:ff:90:e7:a6:84:8a:7d:5d:57:
77:62:ab:5c:d5:0a:32:f0:5c:a7:2d:dd:ec:b7:cc:
b3:07:d5:2c:d1:8b:38:c1:0a:77:6b:a3:86:0d:03:
99:ed:b7:53:8f:37:c9:60:d3:9a:30:2c:8c:81:95:
67:2a:27:8d:b6:a6:d7:51:a9:ec:e7:c7:07:2c:f0:
8f:ba:13:74:e7:eb:76:ab:39:e9:bd:1b:bd:3d:78:
ee:d0:c9:58:b7:f9:f0:da:17:31:a3:10:99:d8:00:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A1:DC:B5:35:56:BF:A1:D3:4B:74:CA:EC:71:1F:24:1D:32:5B:EC
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d7:ae:28:a2:8e:f2:93:ed:b0:2f:32:51:22:91:fb:bc:08:
4e:53:72:d0:22:3f:4c:79:5b:89:fc:fe:b9:f2:d9:9c:9a:97:
d2:3e:6c:5c:ee:f4:13:85:0b:54:4f:a1:8a:3d:e0:16:df:75:
ce:9d:a1:90:de:cf:31:6c:c8:89:c3:f6:1f:47:9b:30:4c:ee:
90:af:88:eb:21:ff:9f:a3:f2:b6:85:9c:c5:41:b0:e4:14:b5:
34:16:9c:d2:f9:20:56:73:db:61:a2:5b:dd:78:9d:a3:82:22:
ea:75:d9:a0:0c:9a:26:11:f3:19:47:f1:90:1d:fa:b3:45:04:
b6:69:88:97:2b:55:54:27:f3:0a:6c:26:55:e1:49:13:3a:e8:
44:3e:a0:94:af:a4:56:85:31:53:48:48:8c:31:02:70:87:29:
48:99:27:88:3b:e6:a0:d9:e9:26:af:6e:1e:21:5e:0a:60:d8:
b5:6a:af:be:02:b1:05:44:a0:53:4b:88:6a:81:35:46:75:e3:
7c:03:64:8a:b0:c3:64:f0:2c:98:5b:1b:c9:17:d3:83:32:d4:
03:98:f7:7e:f4:9f:56:b7:e7:ee:77:d4:74:a5:d2:2b:af:95:
f4:6f:d6:2c:1d:f9:2b:fd:35:ce:e3:a6:ea:15:42:b3:26:69:
6d:cb:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:47 2026 by rpki-client