Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft (raw, json)
Hash identifier: SD/84cpztz7720o20ZWjO4MzGm8hxm2FU+nmjRU6TsE=
Subject key identifier: DD:78:4E:44:4D:FF:54:FB:9B:AA:5B:83:7E:67:D7:73:92:55:1C:48
Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Certificate serial: 019FF9ECCE49411F6829FB0159197E5FCF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
Manifest number: 19F9
Signing time: Thu 13 Aug 2026 07:01:13 +0000
Manifest this update: Thu 13 Aug 2026 07:01:13 +0000
Manifest next update: Fri 14 Aug 2026 07:01:13 +0000
Files and hashes: 1: PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl (hash: dcq4I1H1SIWnK6vXny1Owp2BgvlBl2ptsx0qApUKDH8=)
2: aG1wC2y3Q6pluT4bomzfriW6qO8.asa (hash: y5OiOJ4JCn8oykPDM8IMuk0COHtj+uOEVrLwak92ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ec:ce:49:41:1f:68:29:fb:01:59:19:7e:5f:cf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Validity
Not Before: Aug 13 07:01:13 2026 GMT
Not After : Aug 14 07:01:13 2026 GMT
Subject: CN=dd784e444dff54fb9baa5b837e67d77392551c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:d9:9c:c9:12:df:4e:62:59:97:09:1b:ba:
2c:76:45:be:8f:b5:10:8b:1a:09:c7:3f:72:b0:9e:
89:3c:e4:42:aa:f1:de:bb:5a:4d:6f:46:2e:76:8e:
7c:0b:74:61:6c:ff:51:42:40:7c:27:c3:54:bd:e9:
e7:1e:70:aa:c8:59:eb:1a:58:b3:ec:31:94:ab:82:
99:95:5d:c6:81:cf:cf:e6:e8:b4:9a:52:4d:2c:64:
1a:7b:9c:f4:64:07:20:0e:e1:92:bf:04:cf:35:14:
78:28:e4:11:40:d8:ca:f9:f8:c3:60:a5:5c:fd:97:
9f:89:01:5f:ae:e8:a4:03:96:e0:d4:a2:be:ed:19:
bc:b8:45:31:8b:97:99:62:a6:92:99:6d:cd:46:8c:
09:70:29:be:19:c6:f3:23:e5:b6:64:8e:a8:d1:9e:
37:ed:8d:dd:6b:15:5c:3b:e5:2d:21:b3:66:31:34:
22:9e:60:8b:cc:19:89:3b:83:05:02:1d:2f:29:09:
1d:11:9a:64:d4:dd:55:ed:33:c0:9a:2b:4b:cc:6d:
61:ca:9c:82:da:fb:71:85:28:f0:6f:c4:12:38:1b:
cc:15:e2:3d:77:e5:d1:63:1a:fc:10:32:30:1c:c2:
49:f1:55:04:a3:0b:2c:41:1c:4c:bf:08:7d:79:b4:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:4E:44:4D:FF:54:FB:9B:AA:5B:83:7E:67:D7:73:92:55:1C:48
X509v3 Authority Key Identifier:
keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:20:cd:9e:70:f7:bc:2d:83:71:b5:13:45:d2:f7:90:74:fe:
d8:b5:b8:5b:e8:d1:f2:21:65:3f:8c:55:f3:d2:7e:19:52:94:
21:e3:dd:e4:0d:d0:db:ca:39:7a:e1:bb:2c:f7:c8:45:ef:e2:
54:2b:9f:2a:08:a5:d6:c4:b7:61:26:75:97:fe:7a:f7:f7:35:
92:b1:29:4a:42:f9:ea:bd:01:b8:2b:f6:26:b7:55:64:e5:51:
ee:28:1e:c3:16:22:d1:d6:2f:5c:45:08:4f:64:68:f4:dd:52:
97:91:e9:cc:49:04:70:17:31:54:3f:f2:37:f8:37:57:a4:48:
d7:c2:c2:e0:c3:cd:84:47:85:3d:80:a1:8f:12:58:76:eb:32:
81:21:80:10:fc:9a:ad:85:65:f7:79:f6:b1:71:0e:a6:b1:b6:
b9:df:fa:71:89:0f:33:d1:36:d3:4a:4e:7b:3f:bc:88:45:fd:
c8:54:e1:9f:53:aa:92:e8:99:7a:96:3e:28:ad:20:2b:a4:da:
3c:aa:45:75:9b:d7:fd:2a:e7:5e:2b:40:fa:69:f5:96:f7:57:
47:f6:77:27:c4:0f:14:74:3e:1a:47:9b:26:58:b4:a2:6d:26:
e9:83:bf:d9:65:82:16:5e:a4:6f:c6:56:03:83:ff:fa:d7:47:
e7:4f:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:20 2026 by rpki-client