Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: NhFqXRhQ7LuXynUeAc753SEkpkyWGLgGkmFeYW5dCqo=
Subject key identifier: C9:91:78:B9:86:72:1E:B5:39:D4:7E:88:EC:F0:2A:EA:65:BA:62:6D
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 019CAC1029B7553F55B1B08192125A5B8956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 01:01:06 +0000
Manifest this update: Mon 02 Mar 2026 01:01:06 +0000
Manifest next update: Tue 03 Mar 2026 01:01:06 +0000
Files and hashes: 1: j__VlCB-Iaahq6iSGXf82aRhFjE.roa (hash: ZAd0hpXPQxe82r5ai9UhJXs41uTHJvAdkg2oVHWXLpQ=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: MhGQE3oPPUz/G3LqGx9R954ZlOGy7nvRsEyYt8mOTLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:29:b7:55:3f:55:b1:b0:81:92:12:5a:5b:89:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Mar 2 01:01:06 2026 GMT
Not After : Mar 3 01:01:06 2026 GMT
Subject: CN=c99178b986721eb539d47e88ecf02aea65ba626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:08:00:ec:09:66:a7:74:5b:41:fe:1d:63:
5a:05:fe:66:3c:d7:4d:c4:3b:b0:ab:bc:40:1b:5d:
e8:1b:17:7e:b6:20:08:d8:c8:7b:ff:11:e0:ba:2a:
47:29:60:5b:76:f7:a8:e0:5b:29:df:c3:ac:6e:38:
fb:b0:46:08:24:4a:e5:22:f8:83:5d:9b:c4:9a:29:
03:0f:77:48:4f:6f:35:4a:c3:0c:24:02:1b:e2:a3:
5f:87:f9:40:e7:39:fc:8b:bb:9c:ef:89:54:69:9e:
17:96:4b:f7:3d:57:eb:13:e3:c6:92:aa:94:3b:c8:
bc:ba:80:62:20:d2:15:6d:82:03:04:fb:61:23:af:
13:fa:0b:93:6d:3d:a4:36:74:96:f4:47:4e:99:42:
7a:44:78:75:2a:50:4c:74:89:60:e4:10:0c:d2:b5:
bb:aa:1e:ce:31:69:0a:31:39:00:8e:36:3a:35:76:
86:38:d6:02:aa:2c:01:0c:b4:e7:b0:71:bd:d0:98:
c1:f7:82:cf:8a:41:cb:08:86:87:5b:9a:0c:a0:2f:
6c:6d:3f:68:76:40:a0:00:0c:fe:36:78:49:d4:e6:
54:4f:42:a6:67:a4:68:57:2f:cd:13:9f:cd:2c:48:
d8:a2:0c:14:41:b2:b2:65:3f:36:a7:cb:75:a3:f0:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:78:B9:86:72:1E:B5:39:D4:7E:88:EC:F0:2A:EA:65:BA:62:6D
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:00:dc:ae:40:d9:b6:6e:c9:ea:27:47:bf:21:ee:d5:3c:aa:
b7:fe:e5:7d:c7:e1:45:ba:70:03:b3:4c:c9:0f:11:ee:d5:d3:
0f:fa:91:81:d7:1f:45:7f:e0:cf:f9:03:78:a3:d2:cd:46:e0:
1a:93:7d:3b:31:8b:24:5e:1d:f6:c8:e9:75:0e:9a:30:7d:04:
32:5f:1b:0f:0c:1f:16:d8:fe:ca:b2:a9:e3:ac:80:a1:93:05:
03:b6:6f:df:ea:b6:78:8c:09:20:93:2c:ca:fc:9a:60:cf:7c:
ed:22:7d:aa:b7:cb:42:84:37:e4:25:ec:58:82:8c:76:16:e3:
a2:b3:24:7d:c6:dd:14:51:38:67:6c:f9:83:11:36:71:71:e2:
62:ef:21:73:81:35:91:2a:bd:37:ea:2e:68:f9:96:e2:70:49:
bb:51:1b:48:03:f2:df:3a:5c:da:fe:47:00:d1:e9:81:0e:da:
55:f8:89:5a:84:9e:8e:4c:0a:35:22:67:d3:07:43:7d:1b:20:
22:15:6f:cb:37:8d:d7:91:50:0e:fa:28:69:3d:36:25:e5:f8:
3b:1a:b1:dd:88:74:b9:11:4e:b0:10:2a:34:19:a6:30:a3:51:
f2:b2:84:e5:3f:ea:9f:71:21:6f:b0:dd:84:4f:ec:87:ea:9d:
e6:00:11:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysECm3VT9VsbCBkhJaW4lWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTEyYjM1Yzc3YTRiMTZmYmViNTYxMjFjOTc0ZDU5ZDU2
Njc4NGIwHhcNMjYwMzAyMDEwMTA2WhcNMjYwMzAzMDEwMTA2WjAzMTEwLwYDVQQD
EyhjOTkxNzhiOTg2NzIxZWI1MzlkNDdlODhlY2YwMmFlYTY1YmE2MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnsIAOwJZqd0W0H+HWNaBf5mPNdN
xDuwq7xAG13oGxd+tiAI2Mh7/xHguipHKWBbdveo4Fsp38Osbjj7sEYIJErlIviD
XZvEmikDD3dIT281SsMMJAIb4qNfh/lA5zn8i7uc74lUaZ4Xlkv3PVfrE+PGkqqU
O8i8uoBiINIVbYIDBPthI68T+guTbT2kNnSW9EdOmUJ6RHh1KlBMdIlg5BAM0rW7
qh7OMWkKMTkAjjY6NXaGONYCqiwBDLTnsHG90JjB94LPikHLCIaHW5oMoC9sbT9o
dkCgAAz+NnhJ1OZUT0KmZ6RoVy/NE5/NLEjYogwUQbKyZT82p8t1o/AKYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmReLmGch61OdR+iOzwKuplumJtMB8GA1UdIwQY
MBaAFKcRKzXHeksW++tWEhyXTVnVZnhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83MWNiZTUtNGEyOS00NTY3LWExZmEt
Nzg4ODQyODIyNWI0LzEvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83MWNiZTUtNGEyOS00NTY3LWExZmEtNzg4ODQyODIyNWI0
LzEvcHhFck5jZDZTeGI3NjFZU0hKZE5XZFZtZUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgDcrkDZ
tm7J6idHvyHu1Tyqt/7lfcfhRbpwA7NMyQ8R7tXTD/qRgdcfRX/gz/kDeKPSzUbg
GpN9OzGLJF4d9sjpdQ6aMH0EMl8bDwwfFtj+yrKp46yAoZMFA7Zv3+q2eIwJIJMs
yvyaYM987SJ9qrfLQoQ35CXsWIKMdhbjorMkfcbdFFE4Z2z5gxE2cXHiYu8hc4E1
kSq9N+ouaPmW4nBJu1EbSAPy3zpc2v5HANHpgQ7aVfiJWoSejkwKNSJn0wdDfRsg
IhVvyzeN15FQDvooaT02JeX4Oxqx3Yh0uRFOsBAqNBmmMKNR8rKE5T/qn3Ehb7Dd
hE/sh+qd5gARMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:31 2026 by rpki-client