Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft (raw, json)
Hash identifier: 00gdLA/UGuXeUYgtRrZBkFS8xYjNBH0TB+2QJ+QLY38=
Subject key identifier: 8E:D3:F1:07:66:7B:DD:D9:62:8C:CF:9A:55:C3:09:C4:E7:CF:9D:EB
Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Certificate serial: 01A1746FB4321786AE80DF65C4A5DE07B09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
Manifest number: 1ABD
Signing time: Sun 25 Oct 2026 19:00:39 +0000
Manifest this update: Sun 25 Oct 2026 19:00:39 +0000
Manifest next update: Mon 26 Oct 2026 19:00:39 +0000
Files and hashes: 1: PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl (hash: bpQ0ndK/33HzhyCgckH4gOqsbgAHXsUzXNKoisYwQhw=)
2: aG1wC2y3Q6pluT4bomzfriW6qO8.asa (hash: y5OiOJ4JCn8oykPDM8IMuk0COHtj+uOEVrLwak92ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:6f:b4:32:17:86:ae:80:df:65:c4:a5:de:07:b0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Validity
Not Before: Oct 25 19:00:39 2026 GMT
Not After : Oct 26 19:00:39 2026 GMT
Subject: CN=8ed3f107667bddd9628ccf9a55c309c4e7cf9deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:7c:30:b8:da:12:68:33:57:96:6b:24:ee:
dd:2a:4e:ff:07:a9:04:ec:cc:1b:1e:59:77:11:a4:
31:92:c1:5d:04:78:68:e0:11:1d:f0:16:5f:2c:62:
29:f3:b0:9c:e9:6f:9e:71:49:89:1b:77:e3:47:b1:
f4:b4:27:c9:f3:2f:72:05:fc:5f:2b:76:bc:62:48:
56:ef:6b:1c:f3:db:38:34:36:1e:bb:a8:96:13:a5:
56:b3:99:bb:34:4d:78:42:30:0c:11:fe:ea:5c:05:
57:d4:79:2b:52:e0:f2:e5:eb:79:4e:aa:aa:b0:ad:
08:c6:4d:76:ff:f5:c6:3a:e0:cf:83:07:3d:9f:e1:
1c:98:ba:a4:c0:a2:67:86:b2:dd:48:e2:c8:bc:d7:
b0:34:30:c3:cf:ae:43:31:cd:0c:98:4a:69:d7:eb:
e6:77:d1:2f:10:df:4d:4b:38:c7:dc:ea:c9:30:c5:
c5:7c:f4:a8:1c:9a:70:3e:09:02:e3:54:58:6f:21:
25:0b:93:aa:d4:d0:11:48:8b:cf:9b:99:14:14:a6:
85:a3:8e:fb:62:0b:a5:b8:45:38:a4:22:a6:6d:5d:
63:dd:13:08:32:c2:dd:6f:36:be:cf:f6:38:42:50:
ba:18:42:65:77:08:cd:4c:ed:2d:da:56:2b:58:a5:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:F1:07:66:7B:DD:D9:62:8C:CF:9A:55:C3:09:C4:E7:CF:9D:EB
X509v3 Authority Key Identifier:
keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bb:a7:19:0d:3f:33:c0:21:dd:26:9b:07:11:73:40:02:11:
61:7c:82:4e:7d:08:94:07:0f:ac:8d:dc:52:2a:82:c2:86:6c:
fd:1f:af:a7:2b:55:c1:37:74:ed:8a:f4:58:3a:ed:98:22:8f:
1c:94:6e:88:46:85:53:ef:dd:fe:30:b2:d4:0c:93:ac:14:87:
88:0e:b1:19:39:36:6a:f1:4c:58:66:5b:75:87:6d:d6:ad:e2:
38:cf:e7:b5:e0:21:86:dd:7d:18:ca:b8:47:42:9e:58:de:6a:
70:d9:32:95:80:11:a5:f7:37:92:11:06:d7:6b:97:ef:c9:b3:
b7:8e:c1:72:b9:76:9e:ad:6d:fb:14:8a:70:93:0c:32:07:93:
d3:0a:a2:4c:25:dc:d5:38:be:e7:7f:b8:96:ae:3c:ac:45:d0:
cb:3a:1e:39:0d:a8:03:7f:24:55:de:80:bd:27:83:e3:3b:c1:
a7:df:12:97:3b:c0:5b:f4:28:eb:1b:21:76:65:1d:16:18:7e:
da:1e:a0:24:93:09:31:08:95:e3:90:c7:63:72:2e:c0:ef:9e:
b1:86:ee:42:d8:d1:2f:91:66:7b:81:f3:5f:63:c8:2c:21:87:
59:5d:49:a5:3e:22:f9:36:31:c7:92:8e:9e:4d:6c:a6:8a:2f:
b1:4f:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:33:13 2026 by rpki-client