Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: M//aD6LwlxB9BIiwSlzbqiP37FKJQN6M5aedjziSdvI=
Subject key identifier: 5E:0D:66:7E:D2:87:6D:2B:15:DC:40:99:0B:28:F4:95:CF:96:EA:AC
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019CACEB4B0BF46A01AFE8ED0E48DD10EAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0674
Signing time: Mon 02 Mar 2026 05:00:26 +0000
Manifest this update: Mon 02 Mar 2026 05:00:26 +0000
Manifest next update: Tue 03 Mar 2026 05:00:26 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: qlGTYsKrclaeUgdoFrYhC7dSqlNTzPKvUbUYiXI9MA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:4b:0b:f4:6a:01:af:e8:ed:0e:48:dd:10:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Mar 2 05:00:26 2026 GMT
Not After : Mar 3 05:00:26 2026 GMT
Subject: CN=5e0d667ed2876d2b15dc40990b28f495cf96eaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:2c:7d:e6:eb:76:9b:c7:f3:ab:8a:2b:0f:
c4:0a:a4:1e:e6:08:98:98:9a:71:c5:ec:72:89:1e:
18:a3:0a:24:ee:c0:de:7b:6d:4d:63:9c:f8:4e:46:
93:ce:e7:7b:04:91:fe:ee:e0:34:41:34:62:a4:ea:
8d:1a:d8:87:cb:8c:b5:ba:cf:8c:3e:89:15:68:18:
86:1a:41:75:46:51:29:c2:6f:ff:80:f1:11:43:71:
8f:2f:a8:87:1d:87:02:a4:00:51:ed:97:cb:49:41:
db:65:29:20:29:69:8d:8f:15:46:8c:f0:da:a9:3b:
eb:a6:b1:db:c3:31:b8:d8:ce:ff:44:0c:08:ff:f9:
95:b9:e8:f8:cd:d5:75:aa:17:f7:ed:35:bc:fe:8c:
a6:61:7e:e7:67:89:f8:ee:2c:9a:5a:3a:72:50:fb:
12:92:98:da:17:e3:8f:4a:13:00:24:e3:cf:ab:a9:
1e:12:c5:2e:85:8a:6b:0c:b9:a8:78:5b:65:48:74:
25:77:1a:bd:22:a6:2c:c6:05:cf:c0:63:bc:0f:eb:
22:75:a3:24:9e:49:c5:1a:09:32:35:5a:33:5a:3a:
63:12:f7:15:c2:19:39:31:f9:10:f0:08:ff:c1:74:
8e:aa:bb:f2:d5:79:13:04:a7:7c:55:8d:64:e5:bd:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0D:66:7E:D2:87:6D:2B:15:DC:40:99:0B:28:F4:95:CF:96:EA:AC
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:14:04:18:38:3f:9c:cd:4a:b5:65:0a:be:a8:82:1f:d4:57:
88:2a:1a:94:38:8a:5c:bb:9e:c5:42:d8:64:d1:72:f9:bf:a5:
66:62:21:1e:0e:47:3d:1b:5b:7a:0b:54:c9:45:fa:97:b2:80:
94:90:c8:a6:ac:46:5e:d4:e2:ba:eb:60:be:2a:8c:74:27:2e:
f7:36:2b:dc:3c:35:25:bc:6f:8c:8c:1a:77:9b:60:90:5c:f7:
e1:80:bc:b9:97:22:7c:cf:69:55:4f:b1:9c:3e:d0:79:d7:94:
98:e8:d7:f6:ef:d4:84:34:36:09:f4:bb:65:02:fc:58:2b:a7:
8b:5a:27:d4:f9:69:bf:d0:78:25:7d:c7:74:8d:9f:38:73:87:
72:1b:88:cc:1d:a3:85:96:e8:31:81:90:3c:e6:09:af:f1:12:
90:e5:9e:3d:36:ca:9b:7a:51:b5:69:42:b4:f9:72:87:3a:c2:
70:4d:59:55:c6:bc:0c:85:8e:f3:47:92:6c:c6:3b:54:1b:2a:
56:b3:23:8c:1d:25:91:39:d2:83:bf:1d:10:77:a0:95:50:5c:
d4:89:e1:8e:0d:84:d8:04:b6:e9:b1:ee:d3:cc:d2:b9:a5:f4:
b7:cf:6a:c0:86:e4:5d:0b:cf:55:29:ba:5b:41:4d:ad:15:87:
36:66:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:35 2026 by rpki-client