Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: gHNNWtTmCf4VbEHT+ffKpXlSweItwFSh1PkbrC1UpxU=
Subject key identifier: 11:D3:8D:A4:AC:4D:AA:96:AA:D5:A1:5B:7C:E1:C6:4B:28:4A:E5:45
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 019D3865B717B4D6EB406DE95A57AC77D706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:23 +0000
Manifest this update: Sun 29 Mar 2026 07:01:23 +0000
Manifest next update: Mon 30 Mar 2026 07:01:23 +0000
Files and hashes: 1: 2Vs036RIRQoTV2qAx1ertXDI75Q.roa (hash: 3fM+Aj1+OVjee08EOwpC46t8Bux0tVGCFsexo6Rt54s=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: bRTyQx7rSX3cyKGLAmtmDJo35ZViFppRQKk8c+ISRAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b7:17:b4:d6:eb:40:6d:e9:5a:57:ac:77:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Mar 29 07:01:23 2026 GMT
Not After : Mar 30 07:01:23 2026 GMT
Subject: CN=11d38da4ac4daa96aad5a15b7ce1c64b284ae545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:0f:92:b1:da:b7:f5:89:f0:b7:0f:0e:80:
33:72:30:0c:d7:1d:ad:73:74:94:92:13:09:8f:e0:
6c:af:01:3a:19:59:5d:78:fa:e5:89:b7:00:ab:f9:
23:a2:04:1b:13:5b:95:fd:9e:77:01:6d:19:5c:88:
67:2e:41:ec:55:69:a3:75:53:71:94:d9:b2:14:21:
2d:98:39:53:94:e2:26:1b:96:b6:3d:b0:b8:3a:6e:
12:ba:04:03:17:aa:e8:f4:3e:b8:40:44:37:8a:e3:
4e:c1:75:57:e4:d9:3d:b3:57:f8:8d:2a:f8:5b:0c:
d3:52:38:39:dc:46:d1:02:19:71:39:c8:6f:d0:f6:
0b:fa:ae:96:f8:a5:42:b9:d2:e9:8a:6a:af:15:31:
4d:26:e5:72:17:7e:3b:19:98:ce:46:fe:b2:78:89:
db:fa:36:be:c6:ae:55:c5:9e:47:3d:f8:92:4b:39:
e7:b5:5f:f2:b5:ab:4c:e7:eb:91:86:ea:98:2b:50:
a3:69:6a:9c:1c:a1:51:fb:dd:ed:3f:13:ef:88:23:
42:6f:92:68:bd:6b:95:15:2c:93:4a:b2:e7:88:1a:
7c:e3:19:66:56:e2:a2:01:0a:74:cf:d4:50:60:16:
47:6b:b5:6e:d2:ae:34:0b:b4:0b:e0:54:a5:69:9f:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:8D:A4:AC:4D:AA:96:AA:D5:A1:5B:7C:E1:C6:4B:28:4A:E5:45
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ed:b6:7b:b4:5b:83:d6:23:10:f0:68:cd:2c:d5:09:64:dd:
85:c3:cf:1b:68:11:69:25:25:f4:30:bf:49:d6:91:3c:77:ad:
07:1a:e3:54:e7:b8:4b:1f:e2:87:3d:2e:aa:cb:7d:94:1f:7e:
da:42:d9:c7:6c:78:ee:d5:3c:69:97:13:1c:0d:9c:d8:b0:40:
a3:d7:05:73:31:68:73:47:97:27:87:e6:13:88:db:d2:01:5c:
c6:09:d9:c7:06:43:76:4d:e1:2f:d1:43:fb:b3:85:21:26:33:
ae:7c:ac:fe:58:75:e0:c9:fe:59:43:2e:9a:18:f7:c0:4b:75:
ff:d0:0c:b7:7c:07:34:a0:91:e4:87:a4:e2:d6:b1:6d:44:f1:
fb:a2:fc:29:77:29:9e:ef:33:f8:cc:2e:53:22:79:58:28:56:
24:f3:3a:9a:40:e1:38:2c:73:c4:86:ba:dc:7a:78:b9:ac:9a:
36:91:7c:8b:bf:84:2d:9a:27:cf:60:91:28:eb:ab:f4:3f:58:
5f:52:bb:0d:d3:77:e3:17:1a:ca:bd:b3:f0:9e:39:ff:07:47:
e7:93:d1:11:ff:d9:42:81:a3:b4:29:17:0f:cf:35:8f:33:43:
26:c3:a5:76:c0:66:0a:31:db:02:24:df:d4:cc:b1:e2:e3:11:
96:d7:fb:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZbcXtNbrQG3pWlesd9cGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzA4OWM0NWM1NTA4OGZlOTBlYjYxMDAyZjA3ZjBmOTU4
NjI2NzIwHhcNMjYwMzI5MDcwMTIzWhcNMjYwMzMwMDcwMTIzWjAzMTEwLwYDVQQD
EygxMWQzOGRhNGFjNGRhYTk2YWFkNWExNWI3Y2UxYzY0YjI4NGFlNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hoPkrHat/WJ8LcPDoAzcjAM1x2t
c3SUkhMJj+BsrwE6GVldePrlibcAq/kjogQbE1uV/Z53AW0ZXIhnLkHsVWmjdVNx
lNmyFCEtmDlTlOImG5a2PbC4Om4SugQDF6ro9D64QEQ3iuNOwXVX5Nk9s1f4jSr4
WwzTUjg53EbRAhlxOchv0PYL+q6W+KVCudLpimqvFTFNJuVyF347GZjORv6yeInb
+ja+xq5VxZ5HPfiSSznntV/ytatM5+uRhuqYK1CjaWqcHKFR+93tPxPviCNCb5Jo
vWuVFSyTSrLniBp84xlmVuKiAQp0z9RQYBZHa7Vu0q40C7QL4FSlaZ9jtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHTjaSsTaqWqtWhW3zhxksoSuVFMB8GA1UdIwQY
MBaAFKVwicRcVQiP6Q62EALwfw+VhiZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYt
ZDkyZDY0YjlmODAxLzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9jM2Y0YTItOGI4ZS00OWEzLWFhOWYtZDkyZDY0YjlmODAx
LzEvcFhDSnhGeFZDSV9wRHJZUUF2Ql9ENVdHSm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGe22e7Rb
g9YjEPBozSzVCWTdhcPPG2gRaSUl9DC/SdaRPHetBxrjVOe4Sx/ihz0uqst9lB9+
2kLZx2x47tU8aZcTHA2c2LBAo9cFczFoc0eXJ4fmE4jb0gFcxgnZxwZDdk3hL9FD
+7OFISYzrnys/lh14Mn+WUMumhj3wEt1/9AMt3wHNKCR5Iek4taxbUTx+6L8KXcp
nu8z+MwuUyJ5WChWJPM6mkDhOCxzxIa63Hp4uayaNpF8i7+ELZonz2CRKOur9D9Y
X1K7DdN34xcayr2z8J45/wdH55PREf/ZQoGjtCkXD881jzNDJsOldsBmCjHbAiTf
1Myx4uMRltf7jA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:12 2026 by rpki-client