Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: qn1lSXmffxH7WEWltdFoDAKLBdwl19d7hg6m2SdB3lU=
Subject key identifier: C0:54:5B:41:1F:EC:60:6A:CF:DF:81:96:33:42:58:37:08:24:1B:84
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 019FAAF602B8C5552C13690490FFD77B98EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 23:01:17 +0000
Manifest this update: Tue 28 Jul 2026 23:01:17 +0000
Manifest next update: Wed 29 Jul 2026 23:01:17 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: jo2HkSPmAuC563AK7SjLe2azwJ6lwB9tp5jkiZy6XyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:02:b8:c5:55:2c:13:69:04:90:ff:d7:7b:98:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Jul 28 23:01:17 2026 GMT
Not After : Jul 29 23:01:17 2026 GMT
Subject: CN=c0545b411fec606acfdf81963342583708241b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:17:08:f9:5d:bc:32:f6:8a:b3:af:c5:2c:
41:5c:09:61:2d:7c:32:f8:59:a8:76:bb:19:cb:6b:
8d:d9:93:2d:de:2d:49:de:c5:db:a7:c5:96:6c:07:
c9:7f:c3:59:0a:26:40:0e:cd:c6:c7:b3:f7:40:41:
83:1e:a9:da:74:1d:90:70:e6:ab:c5:d3:a9:67:1d:
d4:f7:e7:32:94:05:02:14:5a:ac:48:01:e8:e8:99:
55:6d:92:dc:5c:73:8f:71:47:17:11:7c:c4:5e:9a:
86:0e:a9:42:51:58:e4:c7:a4:38:f4:a9:bd:ac:b6:
4f:da:d5:23:b5:e4:ab:77:45:1c:b7:70:29:6b:88:
5d:50:e4:e0:e7:cb:0f:cf:c6:f1:7f:a4:6a:94:d4:
02:77:36:9d:d6:25:e7:78:0e:77:20:10:3d:6a:14:
32:48:7e:3c:0b:0c:10:e1:cd:5c:aa:1d:e5:9f:07:
3e:a5:e9:a1:6e:bc:0e:59:8a:60:77:24:d4:77:3d:
46:08:1f:67:6d:c3:8a:e1:f3:93:43:cd:48:43:e7:
a7:0f:94:07:2b:06:d5:be:6f:19:ce:55:27:98:11:
d9:92:c8:6c:08:64:87:93:b3:34:e4:6f:f2:16:5d:
7c:b5:c3:a9:12:39:ff:8c:d9:58:12:10:48:d6:8d:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:54:5B:41:1F:EC:60:6A:CF:DF:81:96:33:42:58:37:08:24:1B:84
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:c7:aa:47:0e:d7:b1:ad:75:10:0a:34:c4:46:0e:61:e9:
84:17:70:0e:93:d8:0d:5f:ae:c6:29:45:7a:23:63:5b:b9:1d:
e2:c5:f6:67:cc:1b:0b:0f:45:57:84:6f:91:e7:d4:05:6e:cf:
63:e2:e6:5e:06:5e:f5:4c:64:4f:b3:c4:96:59:47:47:28:8a:
7b:c8:af:70:7c:8b:76:63:49:59:5f:2b:72:83:a8:0b:73:00:
08:56:71:0b:69:0e:2f:a1:fe:f1:b5:44:f6:f6:84:7d:d1:32:
cf:60:3a:c5:e3:79:74:ad:60:bf:4e:e7:ca:d0:e9:4e:f8:92:
2d:b9:4f:13:0b:53:86:7a:4d:e4:85:e1:0d:cf:7b:de:21:e4:
e4:ed:b7:5a:1d:26:f8:0f:e6:91:13:5c:4a:cf:1e:80:3c:47:
6d:d9:88:db:20:73:8d:c0:af:bd:3b:87:c8:a6:bd:36:78:e3:
78:fe:5e:03:de:e4:99:7c:c4:34:49:d2:95:61:95:37:fc:e8:
22:50:b4:d3:93:5b:df:7e:8a:4b:78:40:1c:13:6a:3f:fe:43:
f3:5b:a8:1e:1a:b9:cc:08:11:45:50:db:af:20:53:8c:d1:e3:
17:cb:34:e8:c6:aa:3c:cd:eb:4b:cf:41:73:18:00:46:68:c8:
ba:66:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:04 2026 by rpki-client