Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: G2FASCJnXRzUWqsptC8rOjaNxkteC9+3veFpskC/y0Y=
Subject key identifier: 9F:31:21:2F:11:F6:21:9F:6C:93:31:32:E9:12:71:C7:DB:CB:43:F1
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 01A163B3FDBA744E08E06B96EB4D22028307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 170D
Signing time: Thu 22 Oct 2026 13:01:42 +0000
Manifest this update: Thu 22 Oct 2026 13:01:42 +0000
Manifest next update: Fri 23 Oct 2026 13:01:42 +0000
Files and hashes: 1: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: nmJ02iS2RZDYAwrWnVOwKr6N1HwhRikSpT2qjx1RLEw=)
2: vkkU5qcNwif85YuYYkMvPwpF9bE.roa (hash: +Rt0rHoLRBoQoqjRxvI3wCxV42/UQj2q4M4W5+EOc3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b3:fd:ba:74:4e:08:e0:6b:96:eb:4d:22:02:83:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Oct 22 13:01:42 2026 GMT
Not After : Oct 23 13:01:42 2026 GMT
Subject: CN=9f31212f11f6219f6c933132e91271c7dbcb43f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:74:2d:d9:a1:7f:64:f7:e2:4f:53:d2:51:
e3:7f:f9:ad:86:0f:e6:0f:ca:c9:11:4d:49:a2:55:
8d:c2:3e:c2:2f:86:bd:8d:24:62:45:29:69:35:e5:
b5:20:44:8a:40:8c:77:03:c4:d7:93:df:dd:bb:45:
7d:07:ce:55:a4:86:16:d2:3c:f6:bb:ba:7a:37:3c:
0c:c0:a6:59:94:ca:02:fe:44:8c:b0:40:96:b7:e6:
33:da:1c:d1:01:c2:07:99:54:55:fe:51:9a:fa:1b:
40:f5:16:5e:0e:b6:cb:db:a9:c8:3f:44:31:05:b9:
d2:90:73:95:52:4c:5d:36:db:4c:99:f0:e7:69:13:
0a:0a:1c:51:a6:12:c5:85:a6:e9:82:c8:10:d5:e1:
49:36:ed:f7:73:93:50:99:3a:d8:96:ab:64:08:2c:
d8:b8:fb:87:4a:b7:76:ac:43:0e:0d:05:b4:61:1b:
c1:27:5b:9c:35:d8:ae:8a:b2:fb:44:94:4f:d5:14:
68:91:83:9f:85:71:82:6e:b6:b3:b7:6d:4d:52:bd:
21:92:c2:6c:9d:39:56:b6:5f:26:db:51:08:87:be:
33:b8:57:ad:1d:36:ab:66:3a:64:6b:09:74:60:0f:
21:92:ab:be:e9:c6:4f:6b:e7:0e:aa:a1:49:1b:26:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:31:21:2F:11:F6:21:9F:6C:93:31:32:E9:12:71:C7:DB:CB:43:F1
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:13:78:48:27:79:64:63:e4:d0:1d:84:04:57:ca:72:7c:07:
df:08:89:99:57:60:4d:22:9e:ea:40:69:48:d8:65:82:64:6f:
40:7c:48:ad:e2:54:69:d6:52:0c:85:36:0b:40:16:ad:fd:52:
a2:b7:72:e5:4a:51:77:c1:5b:b3:4a:3d:64:2d:bf:3a:cc:ef:
89:39:1f:8a:d5:64:9a:3c:25:3f:72:02:e9:c5:d9:91:8c:4c:
22:da:81:02:61:14:be:57:ff:ca:19:2d:66:dc:d8:8f:5d:1d:
e4:14:57:4b:2f:bb:09:22:35:7b:b4:a8:1a:fc:61:a9:d7:3f:
44:8c:9d:8d:8c:bd:ea:0b:56:0f:cf:90:1e:3c:eb:b5:5c:ad:
ab:6f:76:3c:66:cc:61:4a:87:45:d2:da:fc:03:b6:a6:94:18:
73:a4:3e:ae:fe:14:94:41:47:48:82:48:77:a8:5c:41:57:81:
b7:4a:01:ec:87:4d:41:87:0b:90:76:9a:bf:a5:3f:59:6c:32:
e4:84:fe:7e:79:07:ec:59:dd:9e:5e:38:11:46:5c:f5:da:e1:
62:f6:c0:1e:e7:8c:d1:d8:dc:dd:60:75:df:a7:9e:21:9c:18:
50:77:68:d4:e4:e6:7f:e4:36:60:21:3e:ff:4c:8e:87:02:15:
27:c2:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:08:43 2026 by rpki-client