Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
File: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft (raw, json)
Hash identifier: AC2cIhP+u+4QqWF67T/GU5hktctLAycNMKosI5XMhuY=
Subject key identifier: 92:02:33:F9:93:EF:FE:AB:7A:EE:68:FB:E1:2A:F4:45:EE:73:9C:30
Authority key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Certificate issuer: /CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Certificate serial: 01A0C10CB5905C4995DD40DADB8FF139C6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
Manifest number: 0201
Signing time: Sun 20 Sep 2026 23:00:30 +0000
Manifest this update: Sun 20 Sep 2026 23:00:30 +0000
Manifest next update: Mon 21 Sep 2026 23:00:30 +0000
Files and hashes: 1: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl (hash: CJLIfABmfc2s+o4hHbIol+aFEryNMKC9elpL8z+FQJc=)
2: jgpzu-ESfiekXnmQsWtfxfFMnls.roa (hash: VKgBSq4j9tQnrdlFEiguu7TMFYsGEpDcXU1dHxHAkww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:b5:90:5c:49:95:dd:40:da:db:8f:f1:39:c6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Validity
Not Before: Sep 20 23:00:30 2026 GMT
Not After : Sep 21 23:00:30 2026 GMT
Subject: CN=920233f993effeab7aee68fbe12af445ee739c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:ce:8e:ac:53:1e:f0:a3:7a:db:6a:9b:67:
3d:67:ef:9a:11:38:b5:6e:33:d0:5f:fe:82:82:87:
bd:5a:f5:94:62:33:44:25:ff:48:44:c5:10:28:3b:
db:38:8a:0f:b7:64:e6:e0:56:4e:1f:99:fe:da:17:
cc:bf:26:53:18:e1:7c:a8:ff:eb:db:6c:84:60:c1:
c7:b6:e0:c1:3e:0d:3c:48:f6:99:b8:45:bf:56:e8:
ed:10:f2:2a:05:41:a1:7e:d8:71:ed:4f:50:d5:9a:
19:eb:cb:b0:4c:88:4a:28:48:c3:2a:dd:4a:9c:7a:
e8:89:0d:b6:7a:dc:2f:38:34:46:08:86:93:dd:f2:
9a:42:2c:10:e3:dd:e7:87:d8:c6:ec:62:e4:9e:bf:
1f:b2:55:77:42:e1:74:a5:08:b2:2c:47:8d:09:84:
71:2a:1f:7f:98:8b:2b:94:17:39:e4:f4:cc:68:09:
1b:c4:f8:95:fb:e6:d4:df:64:88:26:42:89:ee:0a:
d5:df:84:06:a7:d4:a5:54:3e:03:34:88:40:f4:d9:
be:8f:0c:d5:ee:31:2c:7a:ec:47:99:77:41:b6:85:
6b:f7:3e:6b:bf:8a:fc:a0:35:45:af:aa:f7:a1:00:
5d:ed:cf:85:05:9e:14:29:3e:81:d5:40:7e:cd:e8:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:33:F9:93:EF:FE:AB:7A:EE:68:FB:E1:2A:F4:45:EE:73:9C:30
X509v3 Authority Key Identifier:
keyid:3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:f6:d2:7e:03:39:d2:d7:db:5f:b5:cd:60:10:3a:91:66:
a0:15:4b:70:e1:45:5a:02:bb:6d:f3:d7:20:87:8d:45:d3:1d:
31:65:0a:aa:24:54:86:38:86:56:56:c7:ac:14:ea:08:fd:38:
92:77:26:72:8f:e6:bd:3a:cb:5d:84:11:90:e8:0a:9d:02:10:
26:3b:1a:1d:18:1d:ed:57:1b:5e:c3:ff:f4:83:f4:8a:4b:f1:
7a:b5:24:67:f0:76:f1:32:c2:3b:42:c5:bc:2c:a6:22:c1:8e:
14:06:de:b7:dd:ab:55:a1:20:8f:2d:51:18:e2:e7:d7:41:b3:
95:9a:61:47:1c:8d:7a:18:6c:2d:0f:1d:19:b1:98:35:b1:94:
a5:ef:b9:a6:fa:a2:ed:93:7d:99:e3:48:e6:f9:07:5b:f7:71:
28:cd:c1:21:49:cc:6d:10:a8:f7:17:95:45:7d:c0:e7:cf:55:
e9:36:e7:0b:3f:d1:6f:d3:84:f4:25:8b:0f:d0:19:03:2f:97:
1d:fe:22:a5:fb:64:1e:f9:66:b2:54:ea:b2:53:2f:77:07:b0:
ce:d3:81:e4:29:5b:82:d7:a7:d6:13:94:3d:c7:05:f2:f0:6a:
67:69:ea:25:2b:b4:dc:88:ae:42:02:35:ab:c9:e3:39:7f:f7:
dd:2c:b6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:24:19 2026 by rpki-client