Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: Z9ykJ0Bf2+HGszuWEdoP0AR9VvVVh92nXS6LMJbt4pc=
Subject key identifier: E5:A4:B4:55:82:4C:21:95:5C:A8:7D:87:2B:A7:C5:7F:31:44:F5:F2
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 019D99D0D38A0ED46712F5E7A0A12A3500D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:32 +0000
Manifest this update: Fri 17 Apr 2026 05:01:32 +0000
Manifest next update: Sat 18 Apr 2026 05:01:32 +0000
Files and hashes: 1: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: GX8oBnWmfKVVQIkjtA0qmwHG1/rDn+aUGpHtub/oIs0=)
2: nnxiFtwqx8GnsAuhyqsBzy-CKHk.roa (hash: a4O6X7QudSaMxrAiVWZoV6/Apq2rXIJ1YdJgf4/PVxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d3:8a:0e:d4:67:12:f5:e7:a0:a1:2a:35:00:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Apr 17 05:01:32 2026 GMT
Not After : Apr 18 05:01:32 2026 GMT
Subject: CN=e5a4b455824c21955ca87d872ba7c57f3144f5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:2f:1c:7f:78:4c:b3:37:0c:0e:ab:30:f2:
24:8f:44:dd:26:a3:9a:d0:c5:22:fb:e9:56:6f:4c:
ee:46:81:48:1e:e8:bb:0e:66:94:93:90:c0:6c:17:
59:8f:48:80:72:96:d5:87:b8:11:3f:0f:c2:f4:3e:
0c:fd:0c:02:21:fd:d3:75:3a:36:00:16:05:f1:fd:
f9:1d:66:3e:db:34:e9:8d:9d:c9:50:e3:d6:76:30:
d3:13:8c:da:6f:75:b5:a7:bb:5d:09:94:03:14:c4:
04:60:65:62:83:e3:c8:9c:a4:a5:a4:b7:76:9d:e3:
70:49:81:eb:63:6d:3a:ea:14:14:21:e8:a1:52:d0:
a3:92:b4:5c:c2:36:61:a9:8d:df:90:a9:29:dd:c4:
d7:9e:8f:e6:05:05:57:0c:d6:c2:ad:65:54:21:c2:
58:fe:4f:57:35:30:d8:29:49:9d:23:ca:0e:04:42:
ed:3a:f8:06:a2:b0:26:c0:4c:e6:81:27:8e:3d:dd:
d1:50:01:f5:ec:36:cb:ea:21:d1:df:29:50:d9:13:
ce:54:4f:2c:bc:03:b0:98:21:b9:43:48:8a:8d:be:
05:06:b1:c8:5a:dc:77:82:77:aa:a1:95:e9:ce:60:
f5:ff:20:94:2e:59:b3:1d:26:18:31:a6:f9:c1:ba:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A4:B4:55:82:4C:21:95:5C:A8:7D:87:2B:A7:C5:7F:31:44:F5:F2
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:98:13:a5:55:6e:69:53:72:dc:47:9f:cf:e7:35:96:75:
84:59:35:89:82:0d:bb:19:12:53:c0:62:20:a6:68:c4:40:09:
6f:ef:0a:20:b4:0f:be:50:92:42:cc:b7:8f:43:0a:e9:9c:5f:
53:9f:f9:a3:f1:2f:9b:10:87:77:24:34:64:85:2a:81:00:b4:
3d:4f:ac:4e:3c:d5:d6:8a:ac:ee:03:f9:fe:2e:2c:dc:37:2c:
dc:f3:61:a1:cc:36:54:31:3f:6b:1b:bf:92:fd:86:c4:e5:0b:
3f:c7:67:62:f8:77:12:62:5c:e4:37:37:a5:63:a7:19:6f:89:
57:c8:47:2d:ac:18:db:e1:12:dd:42:f5:a2:d1:19:aa:0d:80:
04:9f:32:d9:f9:fc:ff:2b:fc:91:88:a5:51:d5:25:8b:85:07:
ff:85:83:1f:88:ab:96:d0:10:6b:dd:10:27:89:e6:cb:38:6e:
20:5b:23:70:dd:64:10:c4:3d:c5:cb:dd:9c:a7:db:a1:c2:ad:
d4:1b:88:54:0a:78:19:97:d2:19:ba:ff:c0:ab:69:97:01:6d:
bc:d9:00:1c:ad:f4:fe:f4:34:c9:c7:9b:1f:1c:4c:06:ac:44:
79:ff:2c:95:25:71:35:65:4d:61:0f:fa:b7:33:51:93:76:1a:
b2:77:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:27 2026 by rpki-client