Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: oWB9FJvleTyMthDZh45zWELSlaMmS4ADJVa0rXAiTXQ=
Subject key identifier: E4:62:A8:A9:56:F5:77:31:F8:8B:37:20:23:B2:66:57:5B:7A:A5:72
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 01A1889B0AC95684876742F0714561BA874F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 08F8
Signing time: Thu 29 Oct 2026 17:00:24 +0000
Manifest this update: Thu 29 Oct 2026 17:00:24 +0000
Manifest next update: Fri 30 Oct 2026 17:00:24 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: nkyP4Fkblk36q68b7fT+oDMNsR7u44a4k8keQtfVB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:0a:c9:56:84:87:67:42:f0:71:45:61:ba:87:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Oct 29 17:00:24 2026 GMT
Not After : Oct 30 17:00:24 2026 GMT
Subject: CN=e462a8a956f57731f88b372023b266575b7aa572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:23:b1:7d:eb:ef:b5:88:31:8f:35:75:1d:
9a:21:69:16:c9:2b:87:d5:18:f5:d7:c3:d2:ea:c2:
ca:43:a0:49:ef:de:d4:da:1c:4b:05:a0:d3:14:4a:
01:c8:d5:a6:04:38:ad:52:22:bf:93:6f:70:87:09:
56:ed:3c:82:bd:6f:e0:59:08:6a:dd:b1:5f:83:c3:
e6:0a:49:96:69:ad:21:5b:c2:01:da:46:a8:b5:fd:
cd:03:48:d4:16:91:4d:25:ad:c5:c6:24:bd:10:b8:
8e:54:f6:1a:57:5c:4d:9f:63:30:45:f6:ed:e3:69:
0e:a2:73:19:fa:53:82:38:3b:6c:65:13:2f:59:97:
97:61:54:b9:89:3a:0e:7d:c5:c3:eb:13:a5:80:17:
96:fd:5a:31:8a:ad:10:83:c6:33:46:ce:a1:2f:e9:
4b:f5:8c:f8:aa:24:ba:62:f1:f7:e2:65:cb:99:16:
56:8a:39:85:0e:21:7c:90:1f:d4:71:e2:ab:02:ae:
43:a1:06:2c:b0:72:ac:d5:d4:e8:3f:6c:de:8e:1f:
b4:b5:c0:3e:7a:7f:7a:6b:8d:b3:4b:cf:08:d1:51:
07:04:29:61:2e:b4:c0:9c:fa:2c:b4:10:eb:f1:6a:
fe:1c:0c:56:32:d4:d0:7d:3d:00:0d:fb:bd:bf:e1:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:62:A8:A9:56:F5:77:31:F8:8B:37:20:23:B2:66:57:5B:7A:A5:72
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f4:41:1b:b6:1a:0e:10:f0:5d:95:11:4d:c7:aa:98:64:0a:
09:c7:96:54:a6:d9:86:7c:cb:61:87:c2:75:b0:e4:45:36:6a:
db:65:95:48:19:4d:42:a2:53:26:13:41:34:1e:85:43:ae:23:
a5:dd:31:b0:65:9e:e5:85:99:f2:99:0b:2c:67:13:56:9b:60:
6f:10:59:24:98:4c:b4:a7:57:04:28:db:16:bc:7e:86:46:2b:
29:3b:69:99:33:c5:c7:7e:ad:23:78:19:90:19:a8:c5:c7:28:
71:f6:f8:2e:76:cd:56:c8:f3:31:36:7c:0d:db:6e:c3:a1:35:
17:c0:33:1a:04:7e:46:c4:06:4c:fe:cc:70:f3:02:ea:7c:20:
c2:a7:31:7a:87:8c:0f:9a:3a:96:d7:67:43:50:00:52:8a:41:
cb:77:7c:88:df:4c:be:5b:4e:07:e3:60:73:f0:e5:21:16:02:
8a:8f:0c:c1:74:ac:54:7d:c0:69:9c:10:7f:4c:56:a1:2e:0a:
8c:8e:93:63:54:4f:5a:a0:fe:3c:25:9d:75:bb:a5:ae:06:28:
a2:82:c6:28:49:43:ca:c5:eb:63:ec:0c:4a:1b:5c:30:c9:14:
2c:69:8a:87:a2:04:32:f0:50:b1:be:5d:27:c4:cf:2c:de:95:
71:e3:f8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:08:57 2026 by rpki-client