Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: M3JL0Dp5IxMcTM8QQk6RjGmEgI17i1LvlL5yDtq+KG8=
Subject key identifier: A7:46:FB:23:3A:9D:A9:67:47:1E:22:9C:76:5F:CD:EB:B8:55:D6:39
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 01A08B9F74A7DE64CCD8D7B9DDFE8B04BC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0875
Signing time: Thu 10 Sep 2026 14:01:18 +0000
Manifest this update: Thu 10 Sep 2026 14:01:18 +0000
Manifest next update: Fri 11 Sep 2026 14:01:18 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: CvmSb/tKyCFwAnnxszebpyeMRoHnAcg5Fmw2BCosqXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:74:a7:de:64:cc:d8:d7:b9:dd:fe:8b:04:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Sep 10 14:01:18 2026 GMT
Not After : Sep 11 14:01:18 2026 GMT
Subject: CN=a746fb233a9da967471e229c765fcdebb855d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:35:57:56:0b:c1:b3:7e:52:12:10:4b:d9:
d1:41:96:9d:51:81:98:1f:a6:9e:cd:4f:d6:5b:56:
3e:3d:8f:47:2c:82:7b:d1:ab:d0:e8:f4:12:0b:40:
ee:23:23:76:2a:bf:b1:d4:24:65:d2:49:09:c3:af:
c9:8d:93:ef:51:7d:ac:65:14:77:a6:cf:94:ca:45:
84:24:e5:ae:3d:d7:fb:ee:bf:36:fb:6a:b1:76:b4:
3a:57:7c:cd:5a:b3:84:cc:04:1d:20:04:67:06:fc:
49:a9:58:a3:b5:e0:3a:cf:95:b9:b2:aa:bc:63:eb:
dc:68:82:d6:29:91:50:d8:9d:4f:ab:2d:0e:ba:da:
4f:28:bc:82:9c:63:43:81:13:c0:f2:71:99:6e:27:
5f:da:6a:4d:f9:8c:a5:a0:36:85:bd:9a:13:e8:ea:
ef:9f:8d:cf:99:dd:61:33:e7:a0:51:77:1f:f5:db:
1d:67:bb:3c:32:5a:0b:d2:a0:45:23:88:bb:cc:ba:
aa:44:a6:22:f4:4f:e7:70:44:0d:14:3c:94:6d:fd:
4f:cd:b5:10:ff:e4:66:40:ec:5f:24:a0:c7:8b:78:
e3:22:08:a4:43:d9:9f:77:d0:80:38:38:48:59:83:
93:30:25:87:ce:cd:fc:08:df:54:de:6a:db:a9:2d:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:FB:23:3A:9D:A9:67:47:1E:22:9C:76:5F:CD:EB:B8:55:D6:39
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a4:c4:1f:aa:16:a0:2b:ea:53:f2:05:b6:13:9b:46:6d:f9:
67:57:ce:c7:fa:72:b3:a6:77:33:63:98:9c:1d:15:c9:eb:3b:
3d:97:7b:de:88:24:bb:24:19:1c:60:b5:49:5f:95:e9:3c:bc:
6d:fb:89:3d:3e:ce:c5:5d:c6:67:1b:3a:56:a3:a8:8a:3d:3a:
02:61:d7:41:91:36:cb:9d:fe:3b:39:de:38:82:b9:15:c7:5a:
25:25:31:70:88:31:9c:22:e8:45:58:9d:a7:b3:3e:23:b8:2c:
fd:dc:aa:c3:90:df:2c:c7:d4:1d:92:a1:53:ba:eb:b8:92:d2:
fd:e2:71:6f:5b:52:0c:a9:9c:1b:ea:23:28:17:fb:a2:4e:f3:
d0:cf:5f:bb:46:d2:09:24:14:4b:67:b0:21:d2:ab:0f:e1:5c:
28:55:e4:32:3f:aa:fb:ce:77:1b:45:4a:a5:a7:0b:ae:c6:3c:
7a:81:d1:3c:d7:67:a0:fc:84:b4:5e:23:30:34:9e:72:a6:73:
b8:4f:c9:b1:b2:f8:b8:56:af:f7:a2:09:25:ee:5e:ff:ec:e3:
f0:da:5e:2e:da:60:bf:08:01:06:25:19:23:ed:fb:8e:c0:a3:
fa:24:5f:1d:32:90:58:aa:6d:73:e5:94:ae:42:6e:67:06:a6:
b5:4a:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:42:02 2026 by rpki-client