Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: 5ubAXWKcKT8DS6DKFOBdMrpt4Him6zdiFuU+qgupYAQ=
Subject key identifier: 80:97:79:16:DB:B4:08:84:38:94:2F:C9:2A:6E:D9:30:B2:12:9B:0F
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 019CAC7DBA8AD27B16161FAA6036F4CAEE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: jKgKnqKbeIkEW0Gs60GBfohNFzY.roa (hash: cjnCuv0jEfp5/IreTu4e0UFIsjb6rrhDz4YTVcX/J5g=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: CjAVdzNd2IFjKosetartKNsy1wOQGVlID5y3ckfNBxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ba:8a:d2:7b:16:16:1f:aa:60:36:f4:ca:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=80977916dbb4088438942fc92a6ed930b2129b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:90:a4:12:33:16:d7:f1:dd:ea:a5:c7:ed:
1e:f2:d8:ef:8b:9a:e5:e1:c1:c3:59:d7:cc:3c:12:
3c:fb:8c:d9:12:d3:f1:49:a1:be:54:07:52:eb:22:
87:8b:f1:dd:7d:3c:ff:a1:65:fe:0a:6c:60:d6:1d:
50:0f:dd:61:8d:59:d5:e0:c2:69:98:5a:6d:a5:46:
e3:4e:fa:ef:4f:20:11:4c:24:2c:63:be:a9:00:84:
7f:ae:2a:90:58:55:86:c4:7f:a6:7d:fb:1b:8e:7e:
77:97:3c:d0:0a:5c:e8:29:3a:63:62:c4:a5:92:cb:
a8:ef:5f:47:8c:f8:30:20:56:a9:b1:9f:7e:ad:14:
99:13:4f:70:8c:20:ab:d8:25:3a:90:b5:a3:cd:ff:
b9:26:8d:80:a1:a0:32:8a:01:1c:26:90:70:c9:66:
43:90:98:11:f1:ed:57:e8:33:ff:bd:38:d0:65:c3:
45:b0:f0:86:91:f1:ea:48:64:bf:61:30:28:21:73:
fc:6e:7b:01:d0:b1:3b:69:8c:52:cc:ea:b3:33:22:
af:90:32:53:78:dd:b1:35:39:a7:7b:7a:c6:20:89:
c9:41:9b:20:1c:e1:a5:70:06:5b:23:8a:07:62:ce:
b6:3f:1f:b8:58:31:8c:89:0c:ae:ed:e3:8f:6a:f4:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:79:16:DB:B4:08:84:38:94:2F:C9:2A:6E:D9:30:B2:12:9B:0F
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d3:ec:86:3f:d3:de:8f:12:22:e5:e6:a6:cb:5e:d8:cb:7d:
6b:e3:6f:56:29:6d:df:3d:a7:a0:cc:42:9e:85:28:70:93:4b:
94:5a:0c:b7:39:6f:d0:cc:13:36:fd:7b:57:ee:34:78:54:4f:
0a:83:a9:e8:f4:dc:e3:38:e5:20:b2:70:c8:b9:6d:f0:0c:05:
5c:03:f1:55:57:92:af:95:8f:4f:c6:b4:62:bd:da:8d:e5:e8:
ce:ae:c0:18:66:94:50:b0:82:cf:3c:f1:f4:04:97:47:a7:a5:
9e:c6:84:85:27:09:ca:2d:78:9d:5c:0e:9d:e2:56:87:8b:11:
d5:2e:d7:24:7a:12:75:7e:f3:ea:91:02:0e:08:cb:51:51:3a:
eb:04:a2:20:d6:30:6a:a3:e3:53:a1:0b:47:f1:0e:e1:e9:9b:
c0:b0:8d:61:72:80:46:99:41:fc:34:77:a3:b0:57:55:38:4a:
10:41:85:99:1f:dd:93:3d:ab:32:2d:0d:27:23:49:28:78:e2:
a9:4c:55:d9:43:5f:8f:bd:16:40:9a:d7:1d:6b:50:e1:a9:71:
26:44:36:9a:2e:62:7a:db:8d:8f:d6:af:1d:57:c0:42:6b:4d:
33:ab:7b:e8:cd:cb:ca:2c:a4:8e:a5:87:c5:39:0d:01:1f:fa:
06:ae:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:55 2026 by rpki-client