Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: uN45qS6YQDAKYVimJ4r5rojFeiP5zvDr7uX5VlDWZzo=
Subject key identifier: 14:B1:DE:0F:FB:AC:AE:C1:3F:48:CC:5D:2C:E3:38:FE:EC:0E:2B:90
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019DCE9939D13444813B738D278F60C50856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 070A
Signing time: Mon 27 Apr 2026 11:00:41 +0000
Manifest this update: Mon 27 Apr 2026 11:00:41 +0000
Manifest next update: Tue 28 Apr 2026 11:00:41 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: pYmdf+ULg0pRCgJGh7tPGsmU/jEI7h4hKqk9zVtmJiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:39:d1:34:44:81:3b:73:8d:27:8f:60:c5:08:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Apr 27 11:00:41 2026 GMT
Not After : Apr 28 11:00:41 2026 GMT
Subject: CN=14b1de0ffbacaec13f48cc5d2ce338feec0e2b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:74:68:f8:b2:5b:0e:96:f7:ff:f5:02:94:
12:9f:38:7c:f5:79:66:38:f5:26:ff:3c:91:d3:de:
9c:bd:40:fb:33:0d:7f:14:25:b4:ae:c9:05:6f:73:
37:9b:1a:69:ed:ac:17:09:4d:c0:71:ef:2b:0a:64:
9b:02:e4:5c:1c:1f:8e:0b:3c:80:54:ca:d8:28:b7:
e7:d1:94:8d:01:1b:69:d2:3a:d6:8e:23:eb:3d:f0:
af:ee:ae:53:d5:c6:cd:49:9a:5d:37:a4:28:e1:9e:
fb:54:85:ad:1c:62:bc:14:e0:28:c1:fd:be:8d:03:
cd:ab:cb:1d:b1:34:ce:64:34:b3:48:08:24:98:cd:
30:b8:4c:17:70:ca:74:01:d2:3b:7d:48:6f:14:e7:
d0:26:e4:dd:d3:8d:a0:ac:20:2e:02:21:8f:a1:ab:
14:7f:bc:3c:ed:a5:f2:ab:33:fe:e0:96:47:40:5b:
7e:25:2f:31:de:dd:f2:43:27:2b:0c:0a:70:c5:3e:
aa:1f:89:fa:f6:0f:de:77:e3:89:0c:1d:eb:a3:03:
97:66:5f:38:04:85:9e:fd:a3:af:b7:f6:33:4f:01:
cb:fc:f4:ec:6d:07:4b:51:84:dd:7b:21:2e:7d:c5:
1d:17:54:bb:bf:14:e0:9f:48:84:ab:c6:c8:ae:98:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:DE:0F:FB:AC:AE:C1:3F:48:CC:5D:2C:E3:38:FE:EC:0E:2B:90
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f4:15:9a:9f:5b:71:e0:71:41:e2:ad:e6:c1:ef:50:f0:60:
76:45:ab:ad:8c:71:13:c1:bc:73:8a:98:8a:fc:e7:0a:83:b6:
1e:23:2e:64:9b:54:53:17:dd:3b:a9:7f:9d:27:22:d2:c1:c5:
7e:d1:b2:83:1d:c8:7d:37:ac:20:3f:fc:33:a9:6d:a6:56:1e:
70:a1:3c:8d:f4:f4:b3:66:2b:6d:d7:b9:bc:89:57:48:1b:d1:
f4:d4:3e:8f:7c:d6:19:a0:2e:43:d0:1b:46:36:a3:77:80:37:
63:b5:84:34:73:43:ff:d4:fa:f8:b2:12:d9:0b:8a:15:64:95:
45:6c:86:77:63:dd:67:93:08:de:fd:70:f6:a4:10:46:53:32:
22:bb:7f:91:b0:83:29:f6:e0:6d:b6:89:4e:96:be:f2:23:1f:
17:c9:d8:56:f1:f5:92:b9:65:39:2b:13:f0:1b:97:28:c8:74:
e2:fc:ee:19:02:5d:7d:83:62:7f:ad:f7:b1:fa:f3:13:0b:2f:
fe:e8:4d:ac:bc:55:f3:d3:d3:dc:15:1a:d9:88:58:33:3c:ad:
76:25:22:65:d3:02:3c:25:00:27:f9:dc:9f:3f:4d:01:05:f5:
a6:2b:2f:0f:4c:95:d1:ad:7a:55:de:8c:43:bb:b5:49:a0:37:
53:2a:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:53 2026 by rpki-client