Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: rfOqW7qcbchOHBcmcvcNzeCuKzpO1a3dbgHjhz+ZqVY=
Subject key identifier: 78:F9:3D:0D:9E:00:42:24:49:5B:95:09:40:4F:A0:89:8B:F8:57:5D
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019CADC81ECB80892809B39BC12152FF61E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 1535
Signing time: Mon 02 Mar 2026 09:01:39 +0000
Manifest this update: Mon 02 Mar 2026 09:01:39 +0000
Manifest next update: Tue 03 Mar 2026 09:01:39 +0000
Files and hashes: 1: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: yKg9DsvBIL0upivrB49MEPPNYYQFg/1tPDmsKD9bkYY=)
2: sXuiRHlvEW8rrBF1Ev9CogiLSCQ.roa (hash: pLvRlLK05UpElewJM59U7OVcLxC0+h1J9DGDrZTZEFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:1e:cb:80:89:28:09:b3:9b:c1:21:52:ff:61:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Mar 2 09:01:39 2026 GMT
Not After : Mar 3 09:01:39 2026 GMT
Subject: CN=78f93d0d9e004224495b9509404fa0898bf8575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:f9:17:d1:89:38:90:c3:c8:8a:05:4f:18:
27:98:14:cd:1d:f2:ea:5b:f1:81:4b:f0:90:4b:09:
53:ba:02:e0:ce:03:0b:11:6f:4c:07:ad:a6:5a:9b:
d8:bd:7b:b6:2b:7e:c1:2b:59:70:39:c5:fc:18:98:
9f:1c:3c:e9:45:eb:98:74:c7:43:50:06:16:09:04:
89:e8:79:5d:5b:4d:7a:66:12:bc:d8:bf:88:00:59:
9c:cd:7e:2d:7f:0e:8f:2c:9c:03:77:53:18:b6:7e:
25:66:a2:e5:ec:5a:aa:cc:ee:e3:af:b2:4b:b6:eb:
88:c4:36:0e:d0:2c:b7:95:e3:a5:5e:06:9e:de:bd:
d7:b7:96:0b:ff:ad:cb:b1:55:c6:4a:22:65:2b:51:
68:74:b9:02:1b:8b:ce:9c:9b:c0:9a:78:25:17:5b:
bc:f0:62:63:4e:55:9a:18:45:d5:e9:61:eb:76:cb:
6d:ad:df:0c:c5:a9:3d:87:6c:cc:d8:11:5d:42:0e:
fb:a4:6d:b2:b1:56:f2:b1:4b:2a:ae:a6:64:55:a7:
a6:78:6b:8c:9a:9f:a6:55:64:d7:03:5c:0d:be:41:
3e:51:ba:27:0e:51:b6:0f:38:4d:e9:b9:a0:f6:c5:
e7:cf:0b:d4:b2:9f:0b:bc:e7:78:ce:e8:fe:54:1d:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F9:3D:0D:9E:00:42:24:49:5B:95:09:40:4F:A0:89:8B:F8:57:5D
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:61:05:a4:5f:34:37:37:42:31:6c:cf:7e:4c:f2:9e:3a:4e:
cb:0c:74:35:7c:6e:6a:ea:07:f9:2b:4a:ae:6c:21:d0:1a:af:
e5:be:5c:ea:5d:cd:17:c5:51:2c:9b:88:06:b6:b8:d5:ae:c4:
d7:de:f8:e9:98:5f:12:07:54:af:c4:ea:07:e6:41:fd:8d:46:
78:22:d6:b9:6f:79:b0:02:d0:7d:bb:9a:75:76:42:12:f8:cb:
b4:2a:96:00:57:44:50:8c:97:ea:d8:37:6f:e0:f6:be:26:fb:
4f:ec:df:e1:75:41:f3:68:a0:4e:43:e7:28:6f:30:a0:b7:f5:
a9:57:e1:d6:d5:66:f9:c6:98:45:33:c7:c9:c0:c8:48:7c:29:
58:ad:16:38:7e:30:2e:fc:90:3e:df:23:c4:99:fb:18:0c:9b:
50:4e:ef:29:7e:f1:b7:00:32:65:88:24:da:e5:e6:47:8b:99:
73:b6:86:ed:0c:cb:25:bc:64:68:8c:f4:79:62:18:f6:03:6c:
d8:e2:20:de:75:ce:84:03:42:16:01:1b:0b:b8:cb:a2:04:9d:
9a:85:ce:27:c3:64:2e:62:c8:56:b8:5f:2e:df:f5:87:ce:31:
75:74:d9:71:e7:95:ac:07:9d:34:50:f6:32:6e:23:8b:45:5f:
56:bd:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:33:01 2026 by rpki-client