Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: qj8KWcVL1ZiPt5yc6pAzfHG2aR9s79Keyoh6SQjH+gs=
Subject key identifier: AA:B2:31:08:76:02:E8:AE:0E:CD:45:8C:89:96:F8:8C:25:F4:D7:B7
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019CE4EC90D0593586B964280DAEAE165C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0691
Signing time: Fri 13 Mar 2026 02:00:34 +0000
Manifest this update: Fri 13 Mar 2026 02:00:34 +0000
Manifest next update: Sat 14 Mar 2026 02:00:34 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: uYLQfQErKl5D8D7v0ngZdzucxFdXwDUlDMsb2ZXz7UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:90:d0:59:35:86:b9:64:28:0d:ae:ae:16:5c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Mar 13 02:00:34 2026 GMT
Not After : Mar 14 02:00:34 2026 GMT
Subject: CN=aab231087602e8ae0ecd458c8996f88c25f4d7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:9c:f7:d1:77:c4:a8:65:7c:d7:ec:7c:94:
96:0e:5f:b5:61:0c:b3:c8:30:c7:df:a5:91:8b:bc:
1e:23:2e:4e:a9:39:c9:8c:78:f2:4e:7b:23:79:1e:
d6:b0:42:3f:92:36:19:ea:56:fb:8a:65:80:42:f7:
00:2e:73:5a:a0:1d:ab:68:41:4a:e4:0e:35:b9:94:
e3:8b:f8:48:28:e4:33:c7:1b:06:84:a9:f2:28:a5:
7e:65:ca:71:a1:e3:f7:b4:89:55:1e:80:08:5c:36:
46:9c:07:e8:7c:4d:67:d9:b7:c7:02:20:fd:e1:01:
97:58:25:b9:49:5d:11:43:00:4f:34:78:00:7a:b0:
ab:b6:35:0e:8b:d8:31:78:8d:b7:a3:46:5d:31:44:
27:68:33:85:93:0f:a3:7c:a7:06:08:91:f4:95:bc:
38:a6:1b:ef:bd:56:0a:e0:00:78:e8:6c:c2:80:17:
32:65:5a:2f:2a:70:62:3e:2f:37:5a:75:f9:76:d4:
13:b2:8f:8e:99:b4:15:97:d8:a8:d7:7f:5d:0a:b1:
66:7e:13:9f:b2:e5:17:64:93:31:31:35:c2:14:5c:
b5:29:14:47:54:4a:0c:ca:94:17:3e:4e:cd:24:a8:
fd:9e:51:00:ed:e5:9d:86:35:1a:21:5f:26:58:8b:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:31:08:76:02:E8:AE:0E:CD:45:8C:89:96:F8:8C:25:F4:D7:B7
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:28:a6:d4:4f:73:96:ba:6b:b4:c8:5a:05:88:77:2e:70:22:
6f:3e:aa:62:5c:32:f2:99:7c:da:bf:66:bc:0b:39:86:37:26:
08:8f:ec:b4:fa:8f:c0:64:fa:80:6c:09:7d:85:84:4e:1d:1c:
ae:4c:48:4c:86:52:4c:49:7a:ee:d7:5c:82:b2:f2:29:30:c3:
36:30:5e:19:cd:a4:9f:0f:3f:6a:b3:f3:04:bc:62:3e:bd:07:
c8:51:9d:1b:4b:bb:33:2d:41:6a:e7:e0:d7:57:70:aa:48:42:
c5:d8:93:4a:d8:27:20:a4:a5:14:27:01:3f:7a:1d:8b:67:30:
2f:af:34:79:44:e6:99:e6:c8:78:b4:a3:91:82:9d:55:f4:3e:
fe:a2:ee:7b:f7:5b:a1:82:f5:65:34:b4:17:cd:b3:e7:55:b0:
67:1c:f6:db:ca:a6:d4:71:de:4f:16:49:e9:e5:42:20:00:2c:
e7:94:77:72:9d:eb:0f:3a:6e:e6:36:05:72:7f:bc:d7:1c:71:
0b:a6:f8:e6:88:51:9d:52:e5:8f:30:22:4e:3a:fc:55:7a:6b:
e5:a5:e1:24:21:d7:d3:ad:dc:96:10:a3:8a:9e:77:98:9f:03:
01:fa:46:35:af:51:7f:dd:2b:67:32:3a:f0:10:e9:cc:18:05:
5c:5b:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:29 2026 by rpki-client