Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
File: PBJHYkowBcb89mErrJnKsExgEmo.mft (raw, json)
Hash identifier: w5dw8kgtMf4OIUVYIONWSMhe8AUG1fyd6rhCsAVngqg=
Subject key identifier: 10:F2:E9:79:3D:24:66:58:3A:E9:5A:17:19:A0:0B:AE:94:B6:6F:C9
Authority key identifier: 3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
Certificate issuer: /CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Certificate serial: 01A0CD47DF0A7DC486699C5159A76BBF3D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
Manifest number: 02FD
Signing time: Wed 23 Sep 2026 08:00:34 +0000
Manifest this update: Wed 23 Sep 2026 08:00:34 +0000
Manifest next update: Thu 24 Sep 2026 08:00:34 +0000
Files and hashes: 1: PBJHYkowBcb89mErrJnKsExgEmo.crl (hash: W84LaIfKzkTzN5vm88KhDolcNiQs7ftZP4Bb+GPAkUI=)
2: xBTFrNqE5n1a31XsQMAD6sbQOYM.roa (hash: zRWJGHJjyWJeaAgeQYSPsfHjC7tcss/AD8IKE1T7RF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:df:0a:7d:c4:86:69:9c:51:59:a7:6b:bf:3d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1247624a3005c6fcf6612bac99cab04c60126a
Validity
Not Before: Sep 23 08:00:34 2026 GMT
Not After : Sep 24 08:00:34 2026 GMT
Subject: CN=10f2e9793d2466583ae95a1719a00bae94b66fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:a3:a9:3d:88:dd:d7:73:fb:40:da:3b:41:
fa:4b:71:6b:66:fd:4c:26:17:61:4e:64:a1:24:34:
9b:7b:8b:44:cd:a7:9b:c3:9a:46:50:02:0a:48:b2:
17:d5:64:0e:b5:79:d8:f7:60:7b:57:7a:10:8c:5c:
19:12:75:c5:ff:20:52:e4:1a:cd:84:22:b0:01:c2:
c1:4e:d5:a1:a8:6f:39:0b:c0:ff:45:a5:f5:12:87:
21:af:2d:0d:de:fb:8c:a5:43:fd:df:f0:31:71:cb:
f9:af:8a:13:7c:92:01:60:71:34:68:24:19:49:e3:
fb:42:cb:cc:c5:2e:03:ad:fa:79:2e:58:3d:9f:cb:
20:4b:3e:1a:4d:30:08:de:b2:7f:fc:26:d5:8b:50:
4d:0e:37:44:3f:86:46:a3:d6:84:2e:02:8f:24:ba:
d4:24:f1:61:7a:d8:7b:d2:9c:b0:a9:1e:48:ff:16:
e9:8a:55:c3:b0:12:36:35:21:4c:06:3e:af:c5:2f:
b9:af:c9:2f:28:55:52:b1:50:63:53:f6:20:3b:36:
57:25:f1:b2:d2:f6:9c:ba:10:5d:b1:b9:9b:dd:92:
24:21:cb:b5:c1:c8:25:b6:3c:63:e3:e4:b2:ae:65:
9c:5f:d3:77:b7:93:55:ba:cb:65:ae:4e:58:51:e6:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:E9:79:3D:24:66:58:3A:E9:5A:17:19:A0:0B:AE:94:B6:6F:C9
X509v3 Authority Key Identifier:
keyid:3C:12:47:62:4A:30:05:C6:FC:F6:61:2B:AC:99:CA:B0:4C:60:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBJHYkowBcb89mErrJnKsExgEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/0363f0-ec0d-48a6-9ceb-e8bd2dba97ab/1/PBJHYkowBcb89mErrJnKsExgEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:b2:58:55:df:57:52:cc:c9:1c:1c:a4:69:34:9f:13:71:
ae:f1:61:a6:a5:55:cc:52:70:7e:66:43:c9:f8:c4:ba:23:f2:
f9:d3:dd:7a:80:61:a3:3d:dd:ae:3e:d1:f7:1c:80:d4:75:5a:
ba:26:99:ad:2c:eb:85:6a:c0:7e:d4:d4:a3:10:dc:9e:c6:64:
4f:67:0f:74:a2:be:7a:a7:af:cc:85:2b:00:09:11:50:4c:c3:
78:f7:2f:24:e9:54:62:a3:6f:1f:6d:c8:48:f5:ce:5c:17:35:
59:38:51:ff:c9:12:2c:e4:84:53:64:2d:ec:87:6a:76:ee:b0:
3f:9f:fd:5b:e0:b5:09:c1:e6:bd:7d:fb:ec:58:3e:8f:94:9c:
2c:64:87:52:1c:79:21:95:fc:83:ff:1e:ce:20:b9:0c:18:f2:
6a:c9:c6:b7:a8:60:d6:6a:43:40:43:36:d1:23:6f:d3:1c:0c:
77:6d:e4:95:7a:fe:d1:39:42:9d:d4:b4:96:24:05:cf:d4:8a:
a8:30:29:ce:92:5b:71:62:17:b0:3e:ec:1d:fa:74:4d:ed:2d:
9a:67:8c:2a:eb:21:08:3b:be:72:41:98:24:4b:66:73:76:88:
ba:bf:19:8a:9d:a3:50:8b:b0:f6:49:35:73:1d:7c:95:88:aa:
5e:21:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:27:42 2026 by rpki-client