Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: THzWF1b/nqTdFTfgjdKmWI40Mq302FK7sMTQ+CSATLc=
Subject key identifier: 23:F1:5B:1B:62:75:46:4A:D5:9C:8A:3F:6F:13:DB:8F:A2:23:EA:9F
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 019CABDA0973399039C8D03C70198F645137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 0576
Signing time: Mon 02 Mar 2026 00:01:59 +0000
Manifest this update: Mon 02 Mar 2026 00:01:59 +0000
Manifest next update: Tue 03 Mar 2026 00:01:59 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: 4mycHRwS7jyBjB7UtFMH7oVNDRHcqHUiNiwYWRKpEFA=)
2: gJih9xv-CWYQaALlecQOJ_TACmo.roa (hash: 9e9Q4Zs2imMTV1ntB9s+yN3H0/1A7f9/M0HJ8dsTuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:09:73:39:90:39:c8:d0:3c:70:19:8f:64:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Mar 2 00:01:59 2026 GMT
Not After : Mar 3 00:01:59 2026 GMT
Subject: CN=23f15b1b6275464ad59c8a3f6f13db8fa223ea9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:77:3d:74:a8:3e:a5:3b:36:df:43:ed:ab:
4f:d0:85:99:54:4c:3f:2c:46:d4:37:77:a2:fd:38:
d5:76:c8:e6:9d:08:79:9f:b0:4c:f1:bc:9f:fe:05:
7e:a7:4b:dd:77:e6:42:16:77:a5:55:38:b1:66:fe:
f2:0c:b2:83:fc:8d:34:5e:8f:61:fc:33:23:68:f6:
ce:2e:69:9e:aa:70:a5:a5:10:38:cf:cd:f2:e1:36:
99:91:1d:a6:a2:c1:62:5c:09:0c:0f:2d:fc:17:06:
60:3c:2a:06:19:8d:e4:69:b4:96:e0:4a:e3:87:c1:
26:35:3f:71:dd:f2:3a:64:a8:da:60:9f:4a:6a:67:
a1:8c:52:95:62:c6:73:fc:c5:99:e0:6f:31:1b:79:
8d:bd:4a:08:cb:37:6c:dc:a9:87:c9:7b:d2:54:2b:
d4:4c:da:f9:be:87:0e:e1:a5:d8:77:da:62:9d:9e:
a8:b5:64:e7:f2:bb:29:7c:4e:de:c4:d3:8c:32:c6:
8b:a6:b3:65:f5:4a:62:75:fe:79:e9:ca:a4:a7:c4:
81:15:26:b6:1f:fe:ae:e3:76:a2:8c:4c:12:a9:9c:
8c:37:68:7e:6b:80:b5:d9:9a:a0:d0:c5:17:ae:14:
bf:24:45:64:e9:c4:09:72:c6:96:e3:d9:21:de:3d:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F1:5B:1B:62:75:46:4A:D5:9C:8A:3F:6F:13:DB:8F:A2:23:EA:9F
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:58:42:66:56:1a:63:4c:da:5d:fb:8a:0a:29:db:4f:5f:68:
58:1a:c2:f0:63:7f:c8:8c:6c:94:9b:2f:06:00:1f:ce:65:5f:
d3:c9:c5:c0:cf:c1:67:eb:ec:3c:d1:09:c7:ab:6f:b2:0b:91:
8d:ab:c1:5f:53:7a:1c:61:2c:99:94:f2:a6:d3:c5:8c:e2:7e:
f7:69:4d:00:8a:c1:8a:bc:75:01:4a:7b:dd:65:02:53:08:fc:
1c:2b:b2:98:da:63:76:79:b8:6d:95:a4:84:76:c3:61:7f:21:
cf:88:ea:36:70:cf:95:9b:8e:ac:b6:87:62:79:6b:5e:a2:51:
f9:16:0c:6c:0c:2c:14:ed:d9:0c:a7:54:60:74:4a:78:05:00:
2b:70:0f:24:ec:f3:a8:99:9c:a1:be:c3:50:3b:67:57:ad:78:
bf:6c:b3:0f:42:aa:17:cf:33:3c:26:ba:88:55:46:f0:57:3c:
09:76:36:5d:bf:58:d5:ca:4c:7b:c0:3e:5f:f1:60:43:92:d3:
bb:7f:de:c9:4e:00:e9:05:a1:04:68:f5:53:86:28:c3:f6:e9:
2f:c5:ae:04:26:af:64:9a:16:41:d9:93:50:28:26:bd:04:a2:
d8:71:31:fe:a2:e2:d7:cb:5c:32:dc:51:a5:75:c3:a4:aa:2d:
93:54:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:36 2026 by rpki-client