Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: 4HdSSwOBM0v94O7fPWiHSnERnJP1tBjgF9CDibbPxjk=
Subject key identifier: E8:E2:22:89:02:D6:05:C9:C6:5D:BE:F3:4B:8B:1C:1A:7A:2B:56:E9
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 019D9E1B9545E14931D0831A070B75EF0C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 169B
Signing time: Sat 18 Apr 2026 01:01:40 +0000
Manifest this update: Sat 18 Apr 2026 01:01:40 +0000
Manifest next update: Sun 19 Apr 2026 01:01:40 +0000
Files and hashes: 1: KDQ-cFcPwQDy3bGFF_WSaIsvNNQ.roa (hash: nE15hquAwl/5m54NEuxKdixrl7Q9eNfNpFSjwL6hasY=)
2: ekbIvq4xoQE_G2aZ6OBWbjCke00.roa (hash: CDCAAwMBxMHZc9k/9U2grgMxj6swO3W7TTk/XqEYqRY=)
3: m7QfGcH9ehj8zUctNJKORHfF7YQ.roa (hash: jEz2eC4AxW2xJSso0f7640cBfazPEGudZTNrPpOM8vo=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: W09RAUz4YdqDP8DRskHSISIssEq/dDw3EorZigTBxnk=)
5: xXThYeFskZa8CsEFNdXzq9WOPuU.roa (hash: cncRVt5HZa39EbyA1UHTjl7763HCDtgzdQM7tatOGC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:95:45:e1:49:31:d0:83:1a:07:0b:75:ef:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Apr 18 01:01:40 2026 GMT
Not After : Apr 19 01:01:40 2026 GMT
Subject: CN=e8e2228902d605c9c65dbef34b8b1c1a7a2b56e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:2f:f7:aa:2a:10:d8:12:ce:45:93:f4:ee:
e8:2f:9e:17:b0:bb:2f:f9:dc:8d:61:77:b0:53:60:
4a:a0:e1:eb:7d:44:4f:4a:2b:44:d9:59:f8:42:35:
2e:ba:d5:e4:64:aa:79:c1:f9:4d:70:46:f4:58:da:
60:29:12:75:09:27:d0:08:57:c6:89:5c:04:90:38:
21:95:70:ba:71:cd:26:63:57:7e:57:6b:67:6d:3d:
18:c2:ae:3f:c5:18:ff:f3:37:89:a8:4f:ff:0c:9a:
36:18:bd:9a:67:c9:5d:40:2b:24:33:bd:b1:bb:0f:
5f:b2:71:e6:b2:b7:98:6b:78:fe:a8:a3:a6:1f:f7:
d8:cd:34:5e:8d:12:fb:e7:18:e7:db:f3:dd:28:bf:
2a:51:d1:30:99:05:fa:72:4c:ef:a1:de:72:f6:8b:
0a:e1:dd:5c:49:47:3d:a7:a5:96:91:b2:d3:73:d3:
2c:b4:9f:65:7a:29:da:7c:2d:f1:ec:04:1a:c8:5a:
3f:4c:f8:36:69:3b:93:79:27:80:6e:ca:4a:92:a7:
98:8e:2f:f2:fc:7d:28:c0:2c:4a:d8:27:ea:48:03:
34:d3:61:ca:f2:90:30:04:fe:be:5c:3c:43:99:18:
d7:63:29:f7:54:81:54:78:fe:f7:82:3c:89:b1:ec:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E2:22:89:02:D6:05:C9:C6:5D:BE:F3:4B:8B:1C:1A:7A:2B:56:E9
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:67:ff:cd:ae:0d:5f:b2:72:1a:a6:00:50:f2:63:10:e8:a4:
ee:61:41:91:a2:90:02:96:6c:f5:8b:78:4e:9e:b7:fc:a9:43:
a4:2f:8a:1f:ab:c4:62:8e:9a:04:35:7a:d7:df:b2:13:20:1c:
7e:19:91:ed:15:51:08:0f:76:3e:6d:dc:8d:5e:0c:d2:be:ed:
79:f8:70:e8:fe:93:bd:cf:49:a1:f9:c8:d8:f9:a7:5e:bc:6f:
aa:a1:45:32:6f:81:7f:94:15:92:a9:04:bf:56:08:da:cf:13:
a7:a8:7e:ac:08:37:70:7d:8d:a9:e1:bb:9a:27:ed:00:0c:7d:
1b:60:01:88:82:b0:f4:aa:91:c3:b5:eb:ba:f1:2b:51:dc:85:
b5:0a:e7:7d:16:ae:48:7c:48:bd:09:f5:e4:f3:7c:61:6d:e8:
f3:09:15:27:4c:f1:ea:b5:b2:10:e3:96:87:d5:ba:fb:7d:cc:
59:d3:f9:78:13:5d:06:83:19:ff:30:cd:8d:05:24:b3:56:7c:
93:91:0a:73:f0:fc:63:0b:90:b8:af:2d:32:7c:de:02:c9:c9:
cb:d5:2b:a1:cc:23:73:c0:d6:f7:c1:fb:e3:26:75:98:d5:a3:
a9:41:a3:d5:b6:6d:ea:26:81:2a:20:4f:b6:69:9a:c5:0a:ac:
d6:df:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:01:39 2026 by rpki-client