
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: 5WVn8LU3dOb2A8vW0EmrRzPBqHjQFC81KpLiCxe8RGs=
Subject key identifier: 53:3A:CB:A9:D7:D1:F9:B1:F2:5B:A0:15:72:E1:68:AD:67:F1:FA:45
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019EC1EDAD73EA1431138C1D8FE9123432E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0788
Signing time: Sat 13 Jun 2026 17:00:39 +0000
Manifest this update: Sat 13 Jun 2026 17:00:39 +0000
Manifest next update: Sun 14 Jun 2026 17:00:39 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: IJGOXHE9JJrwS6itUQ/ZC8N5ilgzX0GZSpLqDXs+9kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:ad:73:ea:14:31:13:8c:1d:8f:e9:12:34:32:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Jun 13 17:00:39 2026 GMT
Not After : Jun 14 17:00:39 2026 GMT
Subject: CN=533acba9d7d1f9b1f25ba01572e168ad67f1fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f9:fb:23:1c:3a:07:3e:6b:63:25:32:13:45:
fb:53:f5:6a:db:0c:ef:3f:f1:07:73:97:c3:33:bd:
c8:47:2f:da:b1:20:b1:17:b4:1e:52:47:dd:d3:66:
4e:ae:94:e9:5c:ef:e3:e5:c2:e3:2f:a7:2f:c7:3d:
91:8f:59:24:2a:40:17:eb:d3:ea:06:ea:5c:24:41:
8c:86:93:75:04:8d:84:63:e0:55:b0:17:b4:b0:ed:
de:c0:c6:a3:03:c5:1a:00:fa:6f:b2:e2:9a:c1:e0:
9b:21:21:3d:20:6f:11:12:cf:b6:8e:8c:79:b7:57:
64:2f:4b:81:c6:58:1b:93:a1:51:23:ce:5f:f6:9f:
dd:bf:27:ab:d8:87:7c:cc:58:7f:65:e5:98:ad:de:
f5:c6:2b:43:61:8f:e5:35:26:92:23:2e:a9:cb:0d:
0a:72:d9:c6:a3:64:2e:d0:84:ff:38:8e:18:41:f5:
c9:95:5d:8c:b5:32:f2:4c:b6:f3:8e:39:bd:c0:76:
54:88:d9:bb:39:c4:62:23:7e:54:f9:d5:cc:6d:04:
8a:37:a4:ce:f5:1f:eb:3a:9d:21:d6:85:3a:ed:35:
fa:5a:d4:67:de:46:23:38:71:50:8b:6c:64:f0:ed:
3b:70:3f:8e:5b:de:95:48:36:19:81:4f:ef:7d:c1:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:CB:A9:D7:D1:F9:B1:F2:5B:A0:15:72:E1:68:AD:67:F1:FA:45
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1a:6b:f0:cc:05:94:f4:a7:3e:5b:4a:b1:04:17:26:ef:4b:
be:a8:8b:b4:51:37:0f:3d:c2:21:39:3d:2f:b7:99:d8:d9:95:
db:65:b9:f6:29:08:43:e9:5c:6d:b7:8b:08:8d:bc:47:c8:ac:
7e:33:7a:b6:a2:fa:2a:01:d6:ba:23:89:0e:41:72:83:e9:5d:
31:93:36:f5:dc:a5:16:3f:ea:f9:7a:99:08:e7:e3:fc:ba:13:
76:34:b7:34:b0:b5:d9:fd:bd:ad:52:00:8b:f8:fc:94:ba:c2:
b7:13:c7:78:2f:cb:0a:2d:e4:28:b0:68:2b:2f:fe:66:31:d3:
3c:5c:1f:6d:8c:f7:21:73:a4:28:ec:70:ae:e2:e7:11:d1:2b:
da:f2:b5:ab:e9:d2:f0:d0:ee:03:84:5a:d9:05:6c:b9:12:9b:
66:bc:c9:e0:e2:f5:2c:1a:b1:cc:a9:73:33:91:d4:19:69:cb:
30:fd:95:86:bb:c9:79:4c:12:4a:5a:72:4f:5c:eb:98:6d:c2:
7d:33:c2:ae:b9:c5:af:b8:b8:89:c3:86:98:fd:40:73:66:9c:
94:bd:d1:55:28:5c:61:3e:bc:eb:3e:cb:ff:2c:f7:aa:e0:5d:
a4:4f:db:a0:a3:57:c9:71:09:d0:48:83:1a:37:a2:90:a1:0a:
c1:78:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:15 2026 by rpki-client