Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft (raw, json)
Hash identifier: SZJ+L5nmzc6wIR1kNb++1gn0rczMznzP8Sws+UVGDTw=
Subject key identifier: C1:5A:71:E2:83:81:AE:B6:1D:1C:2B:3E:D8:8E:7A:C7:3D:94:23:1E
Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Certificate serial: 019FA8CFF0B1D373790D6142D9E68B42ACBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 13:00:27 +0000
Manifest this update: Tue 28 Jul 2026 13:00:27 +0000
Manifest next update: Wed 29 Jul 2026 13:00:27 +0000
Files and hashes: 1: PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl (hash: GuvK/13t99nW0asynpvE0JQxHcWLHju+xwjfK7P9DPg=)
2: aG1wC2y3Q6pluT4bomzfriW6qO8.asa (hash: y5OiOJ4JCn8oykPDM8IMuk0COHtj+uOEVrLwak92ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f0:b1:d3:73:79:0d:61:42:d9:e6:8b:42:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Validity
Not Before: Jul 28 13:00:27 2026 GMT
Not After : Jul 29 13:00:27 2026 GMT
Subject: CN=c15a71e28381aeb61d1c2b3ed88e7ac73d94231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:9e:71:66:a1:4f:a5:cf:dd:9e:b9:4b:00:
17:14:0b:a4:16:9d:5a:d3:01:11:44:33:b6:bb:e6:
7e:d4:7c:71:9b:16:c8:5d:ef:10:7b:f9:7c:bd:c2:
60:80:7b:bd:7a:30:c5:89:30:65:b7:2a:9e:13:60:
b5:aa:c8:d4:fc:89:d6:7d:40:66:29:b2:71:16:1a:
8c:21:ec:fe:fb:7c:b3:0a:b1:0a:8c:ba:f1:a3:1d:
ff:b6:e0:1f:5e:be:21:ed:bb:bd:64:97:d3:4a:fc:
69:69:0d:a2:59:69:49:4f:40:ee:10:b9:9a:d1:e3:
d5:3e:e3:b7:db:d8:3d:9f:5f:14:93:23:24:8e:39:
3d:fa:1b:98:a9:7a:4c:94:4f:3e:2c:fc:fc:fb:43:
37:cb:e1:4a:87:80:09:d7:1c:74:95:c5:4d:45:3f:
93:4a:03:01:fe:d4:89:26:74:b1:25:f7:68:bc:73:
8f:ef:0e:43:ce:34:fa:87:8a:55:7b:a1:d6:7b:bc:
c5:a8:88:dc:d9:a7:da:0a:2e:de:3f:5a:90:e6:8e:
a1:26:26:00:ea:23:22:21:cc:0a:7a:65:53:4f:53:
5e:d9:63:0c:bf:49:ee:e0:e2:35:6e:aa:72:8e:01:
7f:de:19:9a:99:24:4c:69:38:58:83:52:8f:14:71:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:71:E2:83:81:AE:B6:1D:1C:2B:3E:D8:8E:7A:C7:3D:94:23:1E
X509v3 Authority Key Identifier:
keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:68:3a:95:a2:e8:30:db:73:0a:40:a3:07:93:b0:a7:be:1c:
f3:cd:04:02:bd:26:9b:67:78:e6:07:50:ff:ed:03:d7:75:9e:
46:88:78:cc:a7:b3:99:0d:b4:01:50:62:57:77:7b:19:5a:8a:
32:aa:1c:72:f2:4e:8f:11:af:bc:56:f5:31:01:87:a1:f6:a5:
81:1b:a0:d2:f2:91:fb:83:cc:23:94:0d:32:fd:9c:6e:83:12:
f0:96:bd:67:a8:32:5a:e9:d1:55:fa:9e:6c:21:e9:59:a3:60:
89:8d:81:0e:ac:cb:d7:67:8e:91:ea:35:8d:0c:ff:20:17:fa:
2d:b5:79:67:45:75:de:a5:c0:1e:8b:3c:1c:18:f2:e6:73:87:
e3:3e:9d:3b:9c:55:96:f0:76:c5:8c:93:85:01:3f:41:74:fb:
21:9a:93:39:a0:3b:8f:67:9b:b8:cf:b8:c9:82:d7:f2:68:e3:
57:4a:33:a1:56:3a:a5:90:17:a0:a0:da:61:fd:b3:fa:7c:6a:
cd:ae:f8:81:da:55:11:9e:21:06:cb:b6:33:d4:74:7c:fc:74:
65:6b:db:76:c9:33:8f:79:0b:46:e7:c0:d5:df:a7:4a:e5:10:
17:c4:d3:0a:0a:5a:f1:ed:ba:62:c5:de:6e:2b:f7:e8:9f:d7:
79:f7:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:24:39 2026 by rpki-client