Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
File: 1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft (raw, json)
Hash identifier: VKsl8O5g1EsQq90WkTsSv+nalSDmU5hiEt2/7Vzgt4c=
Subject key identifier: 91:A0:E6:32:60:83:43:0B:51:69:E7:85:F0:BF:46:55:F8:9B:C0:98
Authority key identifier: D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
Certificate issuer: /CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Certificate serial: 01A0CC351D180ECC5301B538CD1329CF297C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:27 +0000
Manifest this update: Wed 23 Sep 2026 03:00:27 +0000
Manifest next update: Thu 24 Sep 2026 03:00:27 +0000
Files and hashes: 1: 1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl (hash: 8fnPu97PHgSey//kNz8PWLE6L3LnfYGc/+j7eWxcN24=)
2: 5vAwcbdTRz-0U7GLJ6AIyLP61fo.roa (hash: JnIHeO8xvI7ywhZBlyvW36i3gSDsUsdWcdM+GZ8Te+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:1d:18:0e:cc:53:01:b5:38:cd:13:29:cf:29:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Validity
Not Before: Sep 23 03:00:27 2026 GMT
Not After : Sep 24 03:00:27 2026 GMT
Subject: CN=91a0e6326083430b5169e785f0bf4655f89bc098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:00:49:59:ad:dc:49:2a:26:23:6f:5f:d3:
35:a3:95:73:f8:35:cf:41:1c:90:85:6a:78:60:da:
2c:8f:35:ee:28:93:7b:12:83:ed:41:1d:e6:c1:ee:
0c:ba:28:d6:dd:70:c0:1f:69:af:bc:c6:0a:1d:9b:
09:d7:43:25:7d:de:50:c9:d5:9a:fe:e3:cd:0b:e0:
52:16:09:73:10:c6:44:a8:49:7d:ac:5a:94:d2:b6:
52:04:95:0c:eb:a3:9e:a0:df:c0:b0:f6:4a:e2:12:
2c:de:1b:fd:7b:40:f0:3e:f1:46:62:aa:b3:17:7c:
3d:c5:11:03:55:16:23:a7:cd:9d:74:d9:0f:70:31:
d8:c9:ac:49:e1:ac:2d:4b:d6:7d:c5:67:c1:7b:d1:
32:b4:c8:b3:72:47:55:d3:aa:29:1b:2a:1a:eb:14:
7a:ea:e3:5f:d0:7a:24:62:d7:03:2a:85:14:16:10:
2d:3a:48:39:a7:31:85:d8:b3:d7:b8:e7:6d:8c:95:
4c:44:14:43:c7:21:ab:dc:5d:17:9b:80:d6:6b:d4:
27:b1:eb:ba:6d:8b:48:c2:eb:f4:0a:b3:80:0f:50:
ab:79:14:8b:27:11:67:2d:62:76:3a:57:53:85:8b:
d9:06:a5:b4:64:85:0a:88:2c:74:0b:48:22:1c:21:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:E6:32:60:83:43:0B:51:69:E7:85:F0:BF:46:55:F8:9B:C0:98
X509v3 Authority Key Identifier:
keyid:D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:57:97:11:97:82:ce:46:83:96:c7:71:00:5a:5f:47:52:ac:
2e:43:5d:4c:e1:2d:80:25:2a:b9:ba:aa:5b:70:1a:bc:37:d8:
4c:ca:3c:a7:c0:7a:db:a6:8e:96:8b:8f:d0:7a:03:db:44:22:
24:eb:5e:e3:ea:5e:76:61:d5:3d:bf:09:14:89:71:60:c1:c6:
63:44:df:92:45:6c:24:31:3e:79:70:f2:92:62:91:48:fa:31:
21:ee:34:2a:95:6d:cd:ba:04:bd:c4:5c:5c:1b:ac:f4:d6:16:
fe:d4:91:54:87:08:db:7c:01:f3:1d:30:20:a7:20:4c:c6:99:
a5:6c:fa:42:35:6f:76:8b:e5:d9:21:6d:ed:64:3d:05:43:b6:
cb:1c:0b:ec:f5:f5:5e:97:f6:25:4a:1d:fb:32:6e:22:b2:11:
36:81:ae:fc:fd:e8:89:17:92:8f:e3:96:16:f8:2c:55:d4:9d:
f6:46:68:26:3c:11:c0:31:5d:47:85:30:d8:11:f3:98:a6:11:
fe:94:20:b6:63:c1:79:2e:59:83:15:3a:50:fb:7a:a2:32:8a:
76:ec:01:ac:95:6a:5d:e6:7d:ed:61:d7:12:47:17:6b:b2:f7:
fe:c9:f4:d9:d1:14:40:51:80:65:fc:90:35:65:ca:c1:ff:e7:
b4:89:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:35:00 2026 by rpki-client