Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: UkSqJ8mujRYU6uH/immkQ0ssFVfegVdLKDHgJvXR2y4=
Subject key identifier: 42:82:34:A8:1E:9B:F3:F6:2E:AE:97:AC:46:30:E2:09:1F:95:DF:26
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 01A1280C05459B25334ACD17E5EA0867557F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 08C6
Signing time: Sat 10 Oct 2026 23:00:38 +0000
Manifest this update: Sat 10 Oct 2026 23:00:38 +0000
Manifest next update: Sun 11 Oct 2026 23:00:38 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: aPX/wx+rKfWmd4sFEX9fu180v212y56tZho+jb+Lr+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:05:45:9b:25:33:4a:cd:17:e5:ea:08:67:55:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Oct 10 23:00:38 2026 GMT
Not After : Oct 11 23:00:38 2026 GMT
Subject: CN=428234a81e9bf3f62eae97ac4630e2091f95df26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:49:a4:48:0f:e7:7d:be:97:49:0f:3a:96:
db:d3:a3:03:83:38:43:d4:48:72:59:49:1b:95:5a:
79:95:62:e6:b3:83:58:c9:9b:42:1c:7d:47:25:52:
43:fb:03:d1:de:85:a9:79:da:6c:51:93:65:53:5b:
ee:63:2c:28:57:0e:e4:11:20:85:dc:bf:5b:ba:f1:
d3:9d:be:36:c9:61:d2:e7:67:8f:be:52:3f:51:15:
d6:3b:35:8e:4c:d7:27:06:d1:4b:b2:56:cd:b2:cb:
b1:db:fe:db:51:9b:71:62:14:3f:f3:90:a2:6b:f5:
29:17:8f:c2:4e:b8:d4:6b:c4:00:bc:e6:c7:24:92:
6b:d2:24:a5:3a:a0:56:4b:0d:1c:d5:ff:be:bf:86:
b3:e8:7f:33:1f:ca:4c:f3:0c:7f:0a:e3:78:d7:f5:
6b:59:e2:c2:b2:a4:14:87:eb:2d:0d:91:99:9e:1a:
54:63:59:ae:38:32:f1:93:f0:68:2b:52:a7:c7:46:
da:2b:76:c9:68:1a:b3:99:cb:0e:a2:8f:8b:7e:b6:
69:67:33:1b:6b:90:f0:d9:b2:ad:ab:66:cd:8f:2b:
4c:86:63:70:9c:f7:d7:48:33:8f:07:72:a4:9b:b5:
ec:d7:3b:1a:a7:f0:79:c8:62:57:86:3a:fd:c2:b8:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:34:A8:1E:9B:F3:F6:2E:AE:97:AC:46:30:E2:09:1F:95:DF:26
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d6:87:dc:5e:e6:17:89:5f:98:c8:c9:e2:db:8c:e2:e0:39:
33:f3:0f:b5:9e:47:c5:eb:6b:a6:0d:81:dd:56:dd:12:f5:74:
6e:f4:75:6c:1b:bb:aa:70:dd:85:ca:8b:7f:68:e1:97:4a:e4:
c8:65:96:eb:d1:ee:2a:5e:d0:18:aa:c7:40:d0:28:71:a2:bb:
1c:3a:9c:43:af:09:33:2f:6d:35:16:b8:0c:a7:07:2f:a2:a7:
fe:42:5e:38:7b:3f:c9:b8:8a:ff:b8:2a:f3:c4:e5:65:2e:9e:
87:b1:03:74:42:63:73:91:80:fb:0e:4e:92:96:79:6e:23:99:
1c:fa:82:4d:bc:fb:f3:92:e4:33:6f:ca:51:2a:e9:4b:42:7a:
87:41:09:95:d3:36:d8:6a:e5:4a:75:3f:c9:46:f6:0c:a2:62:
62:31:9b:e9:7e:c2:1c:5a:2f:9d:2f:9c:cf:96:70:63:e2:4a:
73:5a:3d:91:7d:6f:85:8a:8c:d6:8a:fd:e1:6a:8d:99:93:5f:
65:59:81:89:11:57:42:74:30:80:61:30:dd:4c:1b:be:49:0a:
69:0c:fd:84:7a:00:3e:08:83:95:71:04:9e:fc:7f:62:ae:9c:
c0:09:28:22:14:78:f0:c5:e0:bf:5a:5d:04:91:a2:dc:f5:bc:
1c:2f:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:19:20 2026 by rpki-client