Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: B9+vND36DP0SBZiyvOOrGlgu38nnphSaiqZlgCMzOhY=
Subject key identifier: 53:07:78:8B:00:CD:BA:EC:A0:51:CC:FB:0A:5A:85:58:C2:EA:A5:7A
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 019D9962196FA18B8BE1D071C7D2D0B83F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 05F1
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: X0Y2Ka7onH3aPx//KZ0P9SCrkgj0OR7S9pbe6J+79gs=)
2: gJih9xv-CWYQaALlecQOJ_TACmo.roa (hash: 9e9Q4Zs2imMTV1ntB9s+yN3H0/1A7f9/M0HJ8dsTuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:19:6f:a1:8b:8b:e1:d0:71:c7:d2:d0:b8:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=5307788b00cdbaeca051ccfb0a5a8558c2eaa57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:14:ce:df:7c:0d:e2:c5:fb:83:47:7d:a7:
df:a3:5d:54:6d:a1:9e:26:39:1a:e1:6c:6f:7e:22:
5c:9e:97:13:47:8e:79:c5:c2:84:dc:92:22:13:f0:
1c:ac:bc:b4:07:36:12:29:5b:3e:bb:07:4f:88:16:
3b:8d:dd:88:58:39:aa:21:3d:33:c7:fb:43:97:3f:
80:88:4a:eb:59:20:92:9a:e3:b5:5f:e7:2c:c2:e8:
ad:29:d3:28:fa:2b:de:98:8b:f3:1b:63:ab:11:dd:
b9:22:73:49:eb:dc:e3:74:fd:60:97:a7:16:d0:90:
2a:72:0e:f2:6c:80:00:39:26:1b:9e:0a:60:5d:21:
51:43:a6:73:5a:ca:12:4d:18:a6:d2:c4:4b:5b:4f:
13:ad:7c:a1:88:7a:90:0d:2b:83:10:c6:83:44:a3:
5b:7b:fe:b2:5a:0d:a2:18:2d:72:6a:6c:96:d3:94:
a7:19:ef:99:3d:e9:be:7e:10:14:f8:30:f1:f2:30:
a1:19:c7:d5:aa:e7:b8:ed:de:73:c3:8b:40:30:3c:
93:1c:cd:67:a8:8d:ab:6e:df:34:61:9a:13:53:ea:
a7:a3:8d:24:97:c9:53:a1:b1:d0:26:0b:7b:37:4e:
07:be:f3:90:2f:86:91:c7:02:d0:b6:71:bf:a8:c5:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:78:8B:00:CD:BA:EC:A0:51:CC:FB:0A:5A:85:58:C2:EA:A5:7A
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:29:c1:4d:35:e1:ef:a8:f1:69:3c:df:5e:5d:df:e9:9d:00:
16:f3:85:75:c0:ec:c3:83:06:1b:0e:38:68:ca:59:ae:d8:df:
99:8b:63:5d:89:d6:a1:cd:c9:a6:f3:76:24:43:85:ce:88:f4:
5c:ec:49:b7:24:bf:ba:da:77:52:79:ef:d9:41:bb:fe:05:29:
d0:77:43:02:6d:64:a7:a5:c3:b3:8d:30:d5:3f:38:be:6a:55:
16:96:f7:01:ff:0e:9f:b2:96:08:3e:ae:89:8f:1d:a8:09:35:
a4:d1:05:f3:0f:a0:c3:a5:dc:f0:20:53:b4:75:c8:82:3c:89:
19:0e:8b:44:39:e6:cf:ab:db:76:6c:8f:40:c3:43:60:50:59:
18:a5:8f:80:32:0c:c8:25:2d:d7:8c:df:af:c7:47:37:96:d3:
1d:4c:85:d3:a5:45:ed:85:be:90:c2:e9:eb:d4:df:a8:2c:ee:
3d:9a:6f:68:e3:2f:e2:e7:54:7e:35:bc:b1:ee:04:c9:23:d0:
e6:71:9d:15:9a:da:7a:26:81:d2:55:5b:47:a3:ca:df:5f:1b:
83:35:e9:30:55:9a:42:ef:84:4b:2f:a6:57:e8:6e:60:79:ec:
76:12:54:e0:04:ef:17:ef:b9:1e:bd:16:d2:56:03:15:da:3b:
75:a9:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:27 2026 by rpki-client