Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: XYni2Qpk5DslPDaW5yFcXY4D3mMHuoyUnkMHLwySv9Q=
Subject key identifier: CB:9B:80:AC:3C:CB:A9:D2:05:CA:03:09:5C:3D:DD:7F:BD:2E:46:A7
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 019EC3A4D52D36E16ECDBAC34C7547695F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 1733
Signing time: Sun 14 Jun 2026 01:00:20 +0000
Manifest this update: Sun 14 Jun 2026 01:00:20 +0000
Manifest next update: Mon 15 Jun 2026 01:00:20 +0000
Files and hashes: 1: KDQ-cFcPwQDy3bGFF_WSaIsvNNQ.roa (hash: nE15hquAwl/5m54NEuxKdixrl7Q9eNfNpFSjwL6hasY=)
2: ekbIvq4xoQE_G2aZ6OBWbjCke00.roa (hash: CDCAAwMBxMHZc9k/9U2grgMxj6swO3W7TTk/XqEYqRY=)
3: m7QfGcH9ehj8zUctNJKORHfF7YQ.roa (hash: jEz2eC4AxW2xJSso0f7640cBfazPEGudZTNrPpOM8vo=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: FvZr0uud5y7A+SjHOiQown+pwk4c+p9wSv6DkWHuaSA=)
5: xXThYeFskZa8CsEFNdXzq9WOPuU.roa (hash: cncRVt5HZa39EbyA1UHTjl7763HCDtgzdQM7tatOGC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:d5:2d:36:e1:6e:cd:ba:c3:4c:75:47:69:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Jun 14 01:00:20 2026 GMT
Not After : Jun 15 01:00:20 2026 GMT
Subject: CN=cb9b80ac3ccba9d205ca03095c3ddd7fbd2e46a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:ec:5d:99:9a:54:56:d7:7f:c0:0f:4d:72:
6d:a1:fd:2d:3c:f5:20:32:26:f6:93:a9:23:be:78:
4b:85:e5:05:a5:ce:9f:17:f4:21:35:fa:24:84:f3:
04:1f:9a:c8:59:44:60:58:9b:5f:42:5a:56:b2:4b:
fd:24:b6:c5:dd:4d:47:db:8a:31:f0:f4:fe:df:82:
12:a3:5b:5b:70:67:36:14:0a:8e:ae:c9:dd:66:d6:
f5:22:4d:9e:34:29:a7:f9:d7:05:a3:bc:86:cd:37:
ea:06:b8:44:84:a1:94:e8:0e:25:95:12:0f:18:9a:
83:0a:ae:5a:2e:08:ed:09:64:31:56:1e:6f:88:e7:
4d:7e:b8:91:60:50:cf:45:de:69:62:2c:2c:98:47:
b0:92:3e:f1:ca:85:6c:90:f9:2d:28:55:d5:bc:6e:
61:83:a6:20:cd:1e:9f:dc:e8:2c:fe:44:ed:46:77:
c6:8a:a8:39:1a:63:e7:e6:a1:e2:ff:8a:1b:42:09:
9c:fa:bf:6e:63:2e:b7:cb:a8:09:05:46:3a:59:7e:
70:c6:6f:1f:b7:b0:9c:43:39:55:be:0d:fb:84:e8:
ae:91:72:23:9b:73:c8:15:33:1f:49:d4:f9:9a:5f:
80:88:9e:25:40:ba:5f:68:f6:11:93:7b:9a:d8:b8:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:80:AC:3C:CB:A9:D2:05:CA:03:09:5C:3D:DD:7F:BD:2E:46:A7
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:73:86:19:33:4e:e4:5e:34:9c:f0:7f:e2:50:03:75:31:1b:
63:d6:78:1c:6a:2f:65:47:5b:ef:9a:9f:8e:6e:d7:46:63:f1:
40:62:d8:25:c4:b1:32:a9:d5:12:de:20:0e:a3:59:5e:b0:91:
b0:f9:9e:2a:c4:05:5b:e5:23:4b:ec:c4:a6:35:24:d1:a9:bc:
08:f2:10:d6:19:f2:5c:b0:de:98:87:c1:15:32:2e:46:0e:6c:
43:2b:82:98:48:81:3d:4d:42:1b:59:e4:f2:83:78:f9:e5:64:
bd:58:37:84:14:d4:dc:63:dd:3f:50:de:db:6d:e4:15:c4:d2:
e9:26:a5:ae:f7:54:5b:6a:89:30:86:14:d7:dc:d5:52:c6:89:
5b:57:b9:73:b4:73:7f:62:ff:e3:77:ad:9e:3f:49:77:03:ec:
20:6b:34:7d:d2:e0:5d:1d:b9:82:dd:4b:f3:98:ca:0a:00:89:
18:43:86:e1:fc:7b:95:5e:f2:d9:c7:cb:b0:60:e5:f6:67:dd:
0a:f7:72:02:30:ec:68:a0:ee:c5:2d:e0:5c:ae:fc:97:3b:7d:
53:ea:04:55:70:d4:19:66:00:f7:7b:d9:bd:3d:4d:4c:42:99:
69:49:d8:fb:62:91:a7:41:32:82:c6:15:c5:f0:f1:f6:3f:20:
4a:5e:28:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:24 2026 by rpki-client