Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft (raw, json)
Hash identifier: QVYW+A/aoA6mjU8CVO4QRVrDWJwACPjQCSsOyrMkCNU=
Subject key identifier: D8:1D:8E:5B:B1:37:C3:E2:96:88:52:07:51:BC:FF:49:46:6F:22:30
Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Certificate serial: 01A12730B36C3AFB5366CDB01C015311A0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
Manifest number: 1A95
Signing time: Sat 10 Oct 2026 19:01:05 +0000
Manifest this update: Sat 10 Oct 2026 19:01:05 +0000
Manifest next update: Sun 11 Oct 2026 19:01:05 +0000
Files and hashes: 1: PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl (hash: 7difPq8+KnhYShEhx17kozA+M32pAyKN+gc4S8kZdmA=)
2: aG1wC2y3Q6pluT4bomzfriW6qO8.asa (hash: y5OiOJ4JCn8oykPDM8IMuk0COHtj+uOEVrLwak92ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:30:b3:6c:3a:fb:53:66:cd:b0:1c:01:53:11:a0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Validity
Not Before: Oct 10 19:01:05 2026 GMT
Not After : Oct 11 19:01:05 2026 GMT
Subject: CN=d81d8e5bb137c3e29688520751bcff49466f2230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:f5:1f:6a:14:92:a0:02:e0:a9:86:2b:7e:
62:e1:fd:8e:fa:d5:7e:39:eb:50:d9:33:0a:13:73:
af:67:36:1a:e1:4f:25:5a:84:0e:72:c4:be:fa:ec:
e4:2a:9e:3a:c0:3d:a7:13:d3:14:0a:a8:54:9e:76:
62:9d:e9:a0:3f:e8:1f:93:28:18:54:62:93:de:39:
3f:91:2e:8f:7e:66:c6:29:b1:cf:03:28:43:19:c4:
c6:a4:c4:fb:72:81:1b:94:01:09:ff:db:09:5c:57:
06:e8:f9:db:49:2f:9a:27:c8:d0:de:54:8d:1e:06:
09:bb:18:85:d5:c5:24:3f:50:49:fe:98:1f:95:77:
fc:e1:ca:99:8e:48:04:f6:62:7a:86:e5:af:26:a3:
e8:5e:27:72:f9:5f:0c:2a:38:37:cc:52:84:84:9a:
72:3b:41:ff:1c:a1:77:35:18:ed:fc:10:b0:e3:38:
bf:85:a7:76:2b:9b:84:99:3a:f7:7b:c7:41:a2:9b:
9b:2b:fe:8d:21:35:ac:f0:bd:83:57:47:1d:28:63:
7d:b9:76:04:b9:92:dd:6d:38:09:0d:0a:8d:63:10:
dd:80:9e:1b:30:26:fd:9c:2a:e0:91:17:a8:cb:3f:
36:f5:55:99:4b:25:76:f6:c8:fd:5f:2b:2c:5f:c7:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:8E:5B:B1:37:C3:E2:96:88:52:07:51:BC:FF:49:46:6F:22:30
X509v3 Authority Key Identifier:
keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:a0:6c:3d:42:b1:49:91:d8:fe:3a:6e:c4:22:7a:e2:5b:
2f:e8:21:b8:79:67:41:c5:cd:cb:68:37:5d:70:b9:0a:41:d9:
ee:62:76:61:38:d6:4f:2b:7e:64:20:00:33:72:ed:68:76:7f:
04:53:6b:b5:d8:17:c5:5f:f1:2d:b1:f7:db:00:35:67:a2:64:
57:c8:85:89:e2:c4:0f:93:ee:02:d7:4e:c9:dd:33:b5:72:25:
4d:19:cc:f2:cb:70:eb:34:c1:78:d1:0b:0f:ce:e8:61:7c:8c:
fa:63:c2:7d:dc:dc:2b:cf:07:de:62:56:d2:7b:8f:37:e6:d8:
2e:29:1c:91:44:4c:aa:3a:05:c9:0b:64:03:ac:ad:5d:70:70:
27:b0:e9:db:ce:bf:61:39:9e:87:ce:07:c4:fa:e2:ef:b3:85:
97:42:29:24:3f:b1:98:fd:02:67:95:33:1f:0d:df:91:20:78:
23:78:4a:4b:f9:70:78:53:fd:26:38:a2:0b:8b:b5:86:03:5c:
4d:f1:10:9b:c7:8a:6c:47:6a:6d:05:fd:9a:dd:0e:ae:62:ff:
86:77:2a:0d:5a:75:02:b6:61:ab:a2:1a:62:9b:f8:75:21:21:
8c:a9:f3:f6:cc:28:17:8d:36:ff:7f:b0:f9:9a:94:64:47:02:
97:b2:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:31:07 2026 by rpki-client