
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: mu7zLQZzLfytD/JkUozDMs6M5+hVYq1/yyu2Q+tniFM=
Subject key identifier: 07:75:7A:6D:2B:4A:D3:EA:B1:75:B2:9F:7F:58:C7:72:4B:9A:61:D7
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019F97A65B727DB4BEC92B7CD4F75E52818C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 19D9
Signing time: Sat 25 Jul 2026 05:01:29 +0000
Manifest this update: Sat 25 Jul 2026 05:01:29 +0000
Manifest next update: Sun 26 Jul 2026 05:01:29 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: GCn6VLS11meCmTuE7rATbfDNKFZJ+uSdftTAtmuaTJg=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:a6:5b:72:7d:b4:be:c9:2b:7c:d4:f7:5e:52:81:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jul 25 05:01:29 2026 GMT
Not After : Jul 26 05:01:29 2026 GMT
Subject: CN=07757a6d2b4ad3eab175b29f7f58c7724b9a61d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f8:b5:98:50:fe:04:da:01:4d:97:02:dc:a5:
6f:20:6b:06:83:ba:7b:43:4b:75:44:6a:18:25:75:
25:19:e2:9f:c9:76:31:87:23:dc:16:b9:b7:ac:e8:
d2:76:90:8c:0f:57:ce:37:37:ce:55:6d:70:89:25:
c0:38:ef:ec:82:7e:15:65:3b:0c:2e:1b:86:34:c3:
11:d0:06:73:48:5b:8a:ed:2a:9d:11:2d:40:4d:40:
e7:32:e6:7e:c5:c2:4a:58:16:17:7b:a4:77:a6:5d:
ae:ae:4c:1a:53:8e:92:7b:46:8c:eb:b4:5b:ee:ba:
ef:7f:49:42:06:07:11:ab:fe:8d:ce:75:38:2f:be:
ef:81:e7:05:51:ba:e8:8c:e9:ce:d1:6e:32:08:42:
e4:0e:02:a8:ac:80:2b:30:65:b6:1d:8d:4b:95:4f:
f2:8e:d3:2d:4b:40:6d:cc:59:74:ad:50:e7:bc:6b:
dc:63:38:0f:43:c8:72:5a:a9:53:2d:ba:9d:89:0c:
fa:d7:6b:93:7d:a9:9e:2f:a9:2f:32:20:9b:16:2c:
99:3b:d4:ea:7d:b5:62:51:8a:46:3f:22:db:b8:a5:
38:bb:ee:5f:da:64:7e:bd:6c:f1:74:62:19:a7:74:
c0:14:9f:28:ca:9b:4e:2d:b3:be:36:94:01:c5:6a:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:75:7A:6D:2B:4A:D3:EA:B1:75:B2:9F:7F:58:C7:72:4B:9A:61:D7
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:42:8a:49:1c:e2:0c:e0:ed:ac:d6:11:b4:b2:68:e7:7a:9d:
d2:a1:e6:98:8a:f8:97:5a:7e:9f:8f:c4:74:fc:ef:d7:2f:f6:
f1:2d:d7:07:94:0e:a2:14:3b:13:48:ca:33:7b:d5:3b:90:9a:
1c:8e:d9:c8:66:ba:45:6a:97:9e:04:04:da:04:19:67:10:99:
c7:b6:73:07:cd:d9:36:28:86:0d:81:7a:e9:18:42:d0:47:bd:
d9:ff:7c:d2:46:28:68:75:fa:9c:2a:a8:6d:97:21:7e:30:08:
e5:e7:a1:f2:63:a2:f3:9c:19:bc:d0:c7:a1:41:d9:86:ac:a6:
34:d0:2b:cb:ff:9c:a6:57:01:b9:38:06:1e:ec:6d:86:ba:cb:
7d:d0:4b:dd:84:a6:23:39:de:5a:2f:e9:94:7d:a7:b1:dc:51:
19:f8:b0:41:a5:24:50:1d:55:2b:fc:59:fd:db:0e:70:92:00:
a6:bf:f0:f5:0e:ea:fc:5b:c0:46:4f:e8:32:4d:c8:85:f1:3a:
2c:94:58:dc:61:58:ac:95:fd:53:15:9a:92:44:3c:b9:14:cd:
f1:ec:09:98:62:1e:77:9d:e6:b9:29:ae:6a:77:f5:fc:fc:33:
93:85:58:38:02:4e:16:4a:00:90:17:2e:1c:24:a9:5c:4d:e0:
1e:e7:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 08:34:00 2026 by rpki-client