Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
File: PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft (raw, json)
Hash identifier: vbeFCpsDT+cqdLfSlTOAh1bqPFQQa063woXdJKxAHLM=
Subject key identifier: 1A:E8:E0:63:75:A1:BA:5A:16:05:CA:47:34:87:44:57:1F:4C:6D:1B
Authority key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
Certificate issuer: /CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Certificate serial: 01A03FA9917596D197CC97CB2129673AC040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
Manifest number: 1A21
Signing time: Wed 26 Aug 2026 20:01:12 +0000
Manifest this update: Wed 26 Aug 2026 20:01:12 +0000
Manifest next update: Thu 27 Aug 2026 20:01:12 +0000
Files and hashes: 1: PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl (hash: 36yf1g7G8B/gTU4FX5SjEJE8TdnykRJUdimsQdT+8iA=)
2: jqrp4A2XhAiKpWgKz5AERQNPI2k.roa (hash: W7kzwYJcoOuticaS4HLbtKGL58iB45UYEoKBlIElr8o=)
3: oX-OGfjLClnMbhsOGADApxVNIMg.asa (hash: y/gF4Kes5UJIvpD5HboyFiUaBsGfj0UIbH39vBX7Shc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:91:75:96:d1:97:cc:97:cb:21:29:67:3a:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Validity
Not Before: Aug 26 20:01:12 2026 GMT
Not After : Aug 27 20:01:12 2026 GMT
Subject: CN=1ae8e06375a1ba5a1605ca47348744571f4c6d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:f8:8e:96:57:08:09:ed:8a:cc:9d:37:15:
47:f0:11:df:04:b5:fc:27:b7:52:25:09:ec:68:10:
45:da:65:a2:45:bb:f8:97:c1:98:f2:43:5d:08:b3:
be:51:ca:1a:c6:23:0d:31:69:f2:98:e7:e6:e3:62:
e7:dc:04:cc:46:4d:ae:b5:cd:64:ff:52:40:58:cf:
7d:82:52:9b:4d:7b:92:1e:9c:8a:7b:f8:6f:fb:2e:
96:3c:d3:9e:07:32:02:07:d1:39:58:64:74:06:fb:
37:47:d3:f9:06:49:71:49:1b:d2:03:2a:6c:a5:eb:
af:07:33:7e:07:3e:4f:42:41:3a:4a:4f:97:99:98:
9f:91:28:ed:5d:27:09:33:76:43:17:fa:16:84:76:
13:ee:cb:11:a7:0b:81:94:36:eb:60:68:fb:8b:c4:
a7:36:b0:7c:a8:88:c3:1f:34:2d:87:67:63:db:be:
15:bf:66:93:9a:36:77:a0:bb:3a:cb:6a:ec:62:c7:
f0:34:25:7a:4e:b6:0f:cc:93:60:f1:a0:ce:ca:4a:
d9:1c:94:82:18:59:a7:1c:b0:8b:8e:6e:43:ba:f5:
bb:eb:bf:c5:c5:a0:fd:81:a3:6a:a9:40:1a:63:52:
6a:c4:e1:87:01:8b:6a:8e:e4:d5:3b:18:99:ab:d1:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:E0:63:75:A1:BA:5A:16:05:CA:47:34:87:44:57:1F:4C:6D:1B
X509v3 Authority Key Identifier:
keyid:3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:52:08:64:76:7e:3d:b4:48:ff:69:eb:fa:27:ce:4f:49:
04:93:d2:07:d1:f5:fc:0f:a1:03:53:6b:3d:c5:8d:d3:ba:9c:
48:20:8d:41:fd:19:44:6d:74:da:46:5d:7d:2e:f6:63:41:e4:
6d:2b:df:30:9e:c7:8c:77:b4:9d:10:35:2a:ea:5c:89:62:64:
03:29:cf:bc:8f:3f:b1:3f:4f:3e:2d:db:96:e2:c0:e3:ec:04:
f4:8f:54:51:92:ce:32:34:63:ee:6d:84:67:52:f5:1a:a4:e4:
e1:0f:b6:ee:51:1f:72:0b:54:da:77:74:b8:27:bd:7e:c2:d5:
f9:ff:b3:83:67:60:88:42:3b:26:47:7b:6d:f2:6b:68:db:fe:
5a:1c:a7:7a:e0:58:ff:ac:aa:4a:6a:77:a9:94:40:5f:29:0c:
bf:11:91:d6:c7:bc:de:3d:48:bf:ba:4a:9f:36:36:69:ff:54:
a3:80:ae:67:10:f2:20:5a:8d:d9:b8:14:59:f2:b5:2f:5d:f1:
89:66:37:11:4b:23:5d:5e:21:1c:74:ac:c0:f8:a4:63:99:ee:
2e:9e:e0:e6:4d:ea:4b:44:a7:71:64:ec:02:27:6c:e2:68:5e:
d0:03:f1:69:8e:4c:4f:bc:31:f6:a3:bb:ac:34:0c:43:1e:63:
c5:06:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:35 2026 by rpki-client