Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: Lf8cdqsluf3/vnOJgFrOxZlUfvo7jbcV1yTcYKuWac0=
Subject key identifier: 58:67:94:F1:E8:21:90:BA:D5:26:08:FF:F9:C3:9F:C8:2D:37:E4:1E
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 01A0CCA351DDB4C0CBC272EF0C297C8E7BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 19FB
Signing time: Wed 23 Sep 2026 05:00:50 +0000
Manifest this update: Wed 23 Sep 2026 05:00:50 +0000
Manifest next update: Thu 24 Sep 2026 05:00:50 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: 51D7Lqz110JjjVWo+8I1qGFttw1az5u46JdsPba9WBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:51:dd:b4:c0:cb:c2:72:ef:0c:29:7c:8e:7b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Sep 23 05:00:50 2026 GMT
Not After : Sep 24 05:00:50 2026 GMT
Subject: CN=586794f1e82190bad52608fff9c39fc82d37e41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0a:f4:5b:42:8a:24:56:5d:2c:06:e6:4d:8d:
9f:a9:25:db:82:ed:d8:dc:42:99:84:85:c3:a0:03:
f3:8b:0a:89:99:7b:27:4c:d9:35:77:2a:54:bc:89:
28:e5:a2:36:83:5d:a4:2f:2a:82:29:3f:c7:c5:34:
c1:28:c2:6f:46:76:17:c7:78:1d:75:98:f8:da:b1:
68:64:e3:29:9d:ef:d5:dc:1e:71:e5:43:4c:f8:09:
33:6e:b8:f7:f2:33:66:e8:42:58:fe:43:ce:1f:6a:
b8:4e:1d:74:cd:e4:fe:a3:29:07:eb:8b:62:9e:39:
7b:e8:f6:bf:49:cb:50:1b:51:e6:e7:95:41:04:fd:
c9:a0:08:93:ce:db:cb:c4:2b:66:d7:b8:dd:be:cb:
08:d0:f4:29:12:a2:ea:df:52:dc:1b:37:d2:4d:d7:
6c:bd:bf:15:e5:8b:37:a0:2f:17:c0:3b:de:53:da:
63:96:e2:44:da:6e:28:02:76:3f:23:bc:49:a5:d8:
eb:16:bf:dc:ac:b3:9f:52:ce:1b:9a:d5:01:dc:11:
8a:1d:db:5e:e8:69:6a:13:9c:28:d1:8d:c0:af:b4:
89:10:fd:dc:e6:8a:af:dd:06:4d:cb:55:01:29:a2:
c1:94:af:e4:50:95:91:01:52:0b:33:41:32:16:a6:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:94:F1:E8:21:90:BA:D5:26:08:FF:F9:C3:9F:C8:2D:37:E4:1E
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e6:07:9d:95:65:e5:d7:b1:6d:10:e2:9b:b1:39:c7:b9:cc:
8f:d5:2c:7b:23:ce:97:21:bc:46:cb:91:60:38:99:96:ce:5c:
4e:c0:34:5a:b2:ef:54:55:28:0e:47:41:e1:22:ca:86:28:81:
c5:b8:22:68:c6:cd:02:6e:7b:51:e4:0c:f1:05:16:bc:18:cf:
ff:00:6c:33:8e:c4:89:91:ed:78:86:ab:89:44:38:30:13:4f:
e2:c4:e3:8b:0c:82:8f:b4:e4:58:d4:33:95:88:0c:d2:c8:4a:
4a:95:6b:63:d6:d2:0e:7e:6b:24:05:cd:7b:0b:e0:0d:3a:de:
9d:99:8b:d6:09:c6:83:f0:14:30:93:a4:61:91:79:c4:e9:ba:
f7:f0:47:50:3f:b2:fd:63:c6:5f:f3:77:17:11:bf:fd:ec:bd:
2a:e2:92:cc:09:85:71:a6:b9:35:66:e4:74:af:3c:4b:ae:bd:
16:e8:ab:a7:c7:84:38:4b:ab:d4:e7:06:ae:a5:75:48:d7:f6:
51:66:f3:3f:ce:67:a1:f7:82:86:e2:b6:c2:54:56:63:9d:45:
29:0e:9b:82:1c:f5:6d:46:76:bd:9f:6f:84:3a:05:35:fc:da:
b2:0f:6d:0b:99:cd:73:d5:ee:f7:09:2e:07:90:ac:17:68:ce:
85:ea:ed:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo1HdtMDLwnLvDCl8jnveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTcyNDM5NTk5ZDdkYTUyNTc5Nzg5OWJmMjEzYjhlNjM1
NTQ5MTQwHhcNMjYwOTIzMDUwMDUwWhcNMjYwOTI0MDUwMDUwWjAzMTEwLwYDVQQD
Eyg1ODY3OTRmMWU4MjE5MGJhZDUyNjA4ZmZmOWMzOWZjODJkMzdlNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gr0W0KKJFZdLAbmTY2fqSXbgu3Y
3EKZhIXDoAPziwqJmXsnTNk1dypUvIko5aI2g12kLyqCKT/HxTTBKMJvRnYXx3gd
dZj42rFoZOMpne/V3B5x5UNM+Akzbrj38jNm6EJY/kPOH2q4Th10zeT+oykH64ti
njl76Pa/SctQG1Hm55VBBP3JoAiTztvLxCtm17jdvssI0PQpEqLq31LcGzfSTdds
vb8V5Ys3oC8XwDveU9pjluJE2m4oAnY/I7xJpdjrFr/crLOfUs4bmtUB3BGKHdte
6GlqE5wo0Y3Ar7SJEP3c5oqv3QZNy1UBKaLBlK/kUJWRAVILM0EyFqa3KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhnlPHoIZC61SYI//nDn8gtN+QeMB8GA1UdIwQY
MBaAFD8XJDlZnX2lJXl4mb8hO45jVUkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEt
ODg3MzMxZWZiNzE1LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEtODg3MzMxZWZiNzE1
LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuYHnZVl
5dexbRDim7E5x7nMj9UseyPOlyG8RsuRYDiZls5cTsA0WrLvVFUoDkdB4SLKhiiB
xbgiaMbNAm57UeQM8QUWvBjP/wBsM47EiZHteIariUQ4MBNP4sTjiwyCj7TkWNQz
lYgM0shKSpVrY9bSDn5rJAXNewvgDTrenZmL1gnGg/AUMJOkYZF5xOm69/BHUD+y
/WPGX/N3FxG//ey9KuKSzAmFcaa5NWbkdK88S669Fuirp8eEOEur1OcGrqV1SNf2
UWbzP85nofeChuK2wlRWY51FKQ6bghz1bUZ2vZ9vhDoFNfzasg9tC5nNc9Xu9wku
B5CsF2jOhertUA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:21:45 2026 by rpki-client