Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: 5Q27jMdMYi9mSAswcF8+NeY6UXSlN8xogf7ewJmKvJc=
Subject key identifier: 7F:F8:B7:E4:D0:EC:8B:19:E9:6E:5F:A9:FF:61:06:AF:ED:CD:84:F5
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 019D99990D3E64A432FB490362EDEB1100A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: j__VlCB-Iaahq6iSGXf82aRhFjE.roa (hash: ZAd0hpXPQxe82r5ai9UhJXs41uTHJvAdkg2oVHWXLpQ=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: /CEtuV7M6j853gSXL6d53AyyOvSFsFglb1eJ5KIj1Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0d:3e:64:a4:32:fb:49:03:62:ed:eb:11:00:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=7ff8b7e4d0ec8b19e96e5fa9ff6106afedcd84f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:98:ac:56:cc:6b:2a:32:f2:85:09:53:15:
67:e3:a6:b2:9a:f9:f3:65:40:3a:c7:7c:6b:be:3f:
42:4b:4b:84:92:02:65:9f:31:f4:97:c0:e5:f2:a7:
2f:f1:ec:f6:49:11:89:da:45:05:3a:d7:f8:44:04:
5a:67:91:40:9f:85:0c:a5:05:7e:57:b4:f1:f5:eb:
49:c2:77:12:90:fe:af:00:92:16:be:be:14:e1:6c:
c8:c8:04:f7:0e:23:da:bb:bd:6b:9d:ed:a3:20:db:
45:d3:45:22:e8:43:54:44:9f:66:08:3c:95:06:d3:
dd:d0:d3:3d:48:ae:60:d1:c2:3c:29:af:3b:98:f7:
74:58:06:0f:c3:e0:5b:49:35:f2:bf:49:74:61:51:
7f:10:b0:ad:27:51:7f:f5:8a:c6:a1:b1:88:9f:52:
7a:ff:cb:46:84:0f:9e:17:4d:cb:f3:cf:1c:e8:50:
4f:33:53:21:a4:6c:61:0d:26:23:53:25:58:1a:78:
34:53:62:7e:6f:d2:34:30:83:09:c5:16:47:bc:a8:
d3:3d:7a:6c:40:91:00:76:6f:08:82:b9:a9:86:56:
9b:f6:af:de:ca:9a:98:9f:de:6d:26:3e:c5:1d:5f:
6c:03:63:a9:ad:ce:56:2a:e1:be:a2:de:e6:7b:b4:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:B7:E4:D0:EC:8B:19:E9:6E:5F:A9:FF:61:06:AF:ED:CD:84:F5
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d2:70:ea:aa:eb:ba:30:96:fa:47:bb:11:ce:bc:fe:61:b3:
4e:17:68:33:a8:e5:76:07:a0:95:d3:5a:cb:74:bb:e6:0b:38:
18:01:d0:c8:d5:e1:35:cd:e0:38:6c:36:80:f7:a7:96:d2:6c:
cd:c3:9a:7a:ae:5e:ea:22:7d:c7:a1:1b:7e:eb:b5:cf:6b:7c:
2f:a8:23:42:37:5e:91:fc:e9:7b:ba:4f:b0:7f:86:1f:b8:b9:
b8:9a:b8:c3:fd:1f:70:01:f1:1d:6b:9f:90:26:1a:08:ee:8b:
72:c4:a0:26:84:c1:2b:4a:52:a0:b6:ac:2d:5f:35:9b:ea:ec:
8d:15:d2:ac:86:c5:ae:4e:89:d3:10:32:67:f6:56:37:58:a0:
27:3d:2c:bd:6b:d9:4d:6c:a1:0b:65:70:a8:ca:ce:cd:10:99:
85:8d:b9:b6:07:09:6e:94:3a:af:1b:e3:4f:8a:d8:9e:8e:ca:
ee:00:f6:97:a3:e2:ed:6d:cf:01:d3:3e:7d:5e:d3:d5:ec:d7:
fb:28:d1:00:3e:de:4b:3d:4b:6f:ee:21:4b:9c:87:5a:f1:8c:
ee:2c:3f:70:f1:e6:d5:23:41:d0:ec:91:c8:80:75:1b:fd:87:
57:8f:8e:db:c6:25:45:f7:34:90:22:95:f0:b5:5a:27:24:cb:
ad:27:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:31 2026 by rpki-client