Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: ZtDU66RPlQrsLKXErZUmsqvlpPDOEW7CphVnFhahmHw=
Subject key identifier: AB:8D:9A:68:5D:03:1D:4B:0B:FC:F1:91:83:0D:72:74:42:D6:CB:66
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 019E53DA016949182F598E732010A7E6E9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1921
Signing time: Sat 23 May 2026 08:00:56 +0000
Manifest this update: Sat 23 May 2026 08:00:56 +0000
Manifest next update: Sun 24 May 2026 08:00:56 +0000
Files and hashes: 1: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: iRJtfHvZ0Z1gunz2lAL627sH6w9yCUctJnWd6nCUdEI=)
2: p8BGzkeZTXu6qLWOB4ZXBUN3ORs.roa (hash: OVtfVKdOOl/LSMO1Y47imdhBsBHfrXhcCR6Y3Lh7Lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:53:da:01:69:49:18:2f:59:8e:73:20:10:a7:e6:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: May 23 08:00:56 2026 GMT
Not After : May 24 08:00:56 2026 GMT
Subject: CN=ab8d9a685d031d4b0bfcf191830d727442d6cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:6c:c5:ea:c2:14:d2:fd:95:a7:1c:11:8e:
d4:a5:6f:70:13:fc:4a:48:58:c5:78:2b:18:04:7d:
df:65:96:cd:be:d3:fa:76:49:98:34:d0:5f:78:71:
17:d7:0b:a3:cf:e7:d3:fb:66:6f:9f:cd:8b:65:92:
a7:f3:93:b5:b5:0c:f3:92:6e:0d:29:1a:6e:54:bd:
2e:06:37:94:ce:71:10:dd:11:12:cf:76:a1:2d:5a:
07:0e:95:2f:7f:5a:84:79:21:4b:39:46:e1:d8:25:
f1:0e:4b:79:c2:91:53:32:85:99:92:d9:7c:5b:33:
d5:b7:ae:78:aa:08:e3:a8:50:28:d7:6d:ec:0b:74:
98:5b:5a:14:58:1a:1a:2b:ad:57:db:f7:91:11:21:
31:b4:29:e6:27:9e:36:56:c4:83:33:59:9f:94:97:
67:af:1c:ad:45:8d:bb:86:8b:6c:c3:69:08:cc:46:
00:16:bd:14:95:90:62:97:48:33:ae:b3:82:f1:1c:
ca:70:9b:9e:7f:d8:2c:87:71:f6:49:50:f8:ac:6a:
bd:64:5f:62:4c:11:70:73:35:3b:c7:39:ef:80:10:
4a:fe:90:c0:42:46:37:8b:ae:9f:da:6c:82:3d:3b:
51:2b:22:cf:b1:02:a5:5c:d2:5a:03:d9:51:c6:6e:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:9A:68:5D:03:1D:4B:0B:FC:F1:91:83:0D:72:74:42:D6:CB:66
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9f:67:44:b0:aa:e6:a8:b9:1e:a6:0c:a0:53:0e:61:5f:30:
0c:a6:3e:49:94:36:9a:56:e9:1f:5c:dd:d1:44:4c:7f:e5:28:
c6:6d:2e:93:e9:76:76:a6:29:6e:4e:02:35:fe:7a:f6:af:ea:
38:ca:ef:13:5e:b7:fb:8b:b4:27:11:37:f3:ab:3b:39:a5:ff:
56:d2:81:4b:27:58:49:a5:70:db:0a:1b:27:e0:09:78:8d:2f:
b9:13:46:e4:7a:8b:51:6b:8e:96:cb:bb:6a:65:2b:3f:06:49:
26:c5:e7:48:eb:38:5d:7b:21:a5:a4:2c:c6:12:78:99:8f:c9:
f4:b3:0d:e5:72:b7:e1:d9:4a:22:a9:77:d1:bb:9e:ef:b0:98:
1a:38:d8:6f:08:03:2a:d8:cf:76:37:5b:26:4c:41:f9:aa:a5:
9f:b3:f9:60:41:91:51:c5:bf:fe:72:1c:bc:8b:b7:5f:c7:fb:
aa:60:03:23:e6:13:22:d1:fc:ad:68:28:75:14:59:6f:49:1b:
41:68:82:bb:3c:86:a0:8c:77:a3:04:58:a0:5d:a1:f3:8b:5f:
e7:0f:a4:e5:aa:c8:d0:7f:b2:fb:0f:0c:90:78:f5:f4:c7:4d:
fc:36:32:51:56:1f:ff:b3:fa:06:e3:62:06:11:35:61:de:27:
40:6a:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 18:08:23 2026 by rpki-client