Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: VwmBU5hCkuCKpKVKkSpP9E0o20b6z1KGGmW2pfOBQJ4=
Subject key identifier: 4B:07:03:6E:C5:2C:6D:32:6A:8B:AE:13:45:B1:69:A4:47:CE:4F:93
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 01A0890C9AE11A289B3BC57586813E87D9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 19D8
Signing time: Thu 10 Sep 2026 02:01:39 +0000
Manifest this update: Thu 10 Sep 2026 02:01:39 +0000
Manifest next update: Fri 11 Sep 2026 02:01:39 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: lgI70d9jgShtVidNQe/ntffvjPYbKGP1DRmwEIXTeLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:9a:e1:1a:28:9b:3b:c5:75:86:81:3e:87:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Sep 10 02:01:39 2026 GMT
Not After : Sep 11 02:01:39 2026 GMT
Subject: CN=4b07036ec52c6d326a8bae1345b169a447ce4f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:df:25:0d:9c:94:41:4b:ce:49:8c:68:40:
f2:df:91:68:e1:06:1d:03:72:aa:ba:aa:48:f9:99:
13:66:4a:aa:89:b5:33:fa:d0:17:2e:93:fe:7d:f8:
02:fc:86:cc:18:b2:12:32:25:68:2f:17:18:6e:75:
b4:8e:22:d7:16:75:d3:4c:02:f5:20:26:af:d6:d7:
18:5f:10:ea:c7:1d:62:8d:47:ed:fd:84:27:55:fe:
9c:a0:a2:b7:0f:cf:b2:40:15:13:2a:4d:ba:7f:58:
7f:0c:6e:ca:fa:28:ee:9d:67:2e:cc:aa:1f:a9:f8:
21:1c:00:06:29:ae:b1:6f:7d:a2:dd:8b:1d:67:41:
3d:a6:ba:6a:af:b3:a8:e4:6d:32:f5:ee:0c:21:4d:
c4:da:39:a0:e4:e7:db:15:e9:d9:9d:64:0f:9c:a0:
10:48:44:b9:a4:0a:11:7c:cb:fe:6b:b9:87:2b:18:
a5:1d:1c:a7:bc:3d:db:29:67:dd:8d:b5:ce:70:02:
a5:dd:15:0f:58:27:ff:6a:5c:74:91:fc:90:77:5e:
c0:c3:27:23:d1:7c:64:ec:e9:89:e1:72:ba:21:ac:
18:01:06:15:98:3b:b9:10:e0:f9:71:63:01:cf:4b:
66:d0:31:d0:93:d6:c9:89:3c:8d:15:31:ae:63:57:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:07:03:6E:C5:2C:6D:32:6A:8B:AE:13:45:B1:69:A4:47:CE:4F:93
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:75:04:36:5e:68:55:58:3d:e4:b8:9b:f5:e8:c7:54:8e:
6d:1e:57:3d:e1:a4:00:64:99:6a:13:06:f6:bd:f5:6b:03:14:
68:17:b6:26:32:a7:74:ba:4e:69:53:b7:99:4e:9b:ef:ff:e7:
19:f6:ec:46:81:32:43:b1:15:b4:c4:59:a5:22:6a:53:3c:5a:
fd:9e:71:4c:82:a1:25:b3:28:6a:cc:d5:2d:2c:c9:7b:3f:cb:
ae:dc:c4:74:ba:8d:c5:84:95:46:cd:3d:a3:a7:57:b7:ea:67:
5d:b1:9b:98:28:ed:4f:2f:d3:2f:60:c8:4e:4e:a2:01:eb:54:
11:70:e1:29:4b:e2:e1:61:ad:56:cf:19:4e:8a:48:e2:e9:26:
b9:1c:c2:26:ec:9a:02:b6:13:10:e3:74:ce:bd:f1:41:a3:42:
f4:c3:c0:e1:e0:1b:6f:74:0b:7b:0b:84:59:c6:b3:e2:27:28:
4f:1d:bd:b0:b9:e3:1f:55:8d:cf:f2:52:63:87:5d:b7:29:50:
ff:8b:3a:4f:9c:d9:a7:70:0a:57:35:aa:39:ce:56:96:0d:bd:
77:be:86:1b:d4:8e:4a:68:48:13:c2:6a:80:07:ff:a2:31:bd:
2d:85:42:65:f6:36:10:50:50:20:0c:5e:6a:2a:36:07:ac:f4:
82:03:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:51 2026 by rpki-client