Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: JfsmZAmBzvNTgpGFF/+fr+Sy3djxk8X5PZxIv6h3oM0=
Subject key identifier: CA:04:3E:53:06:36:BE:CC:3B:A9:B0:B6:18:C7:86:4B:E6:50:19:56
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019CAC46C4363CA91A7D334641B08DDC02F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1856
Signing time: Mon 02 Mar 2026 02:00:44 +0000
Manifest this update: Mon 02 Mar 2026 02:00:44 +0000
Manifest next update: Tue 03 Mar 2026 02:00:44 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: fIHEpH5gC6fAXxem3N73ZmksfETeZAcKnyUznWd0Zcg=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:c4:36:3c:a9:1a:7d:33:46:41:b0:8d:dc:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Mar 2 02:00:44 2026 GMT
Not After : Mar 3 02:00:44 2026 GMT
Subject: CN=ca043e530636becc3ba9b0b618c7864be6501956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:de:ac:af:a2:37:a0:bd:73:04:07:b1:a3:
d8:00:70:aa:24:ef:11:dd:7d:a4:7f:e6:fb:68:eb:
d0:13:85:d7:7e:b6:3d:6d:82:c6:02:06:60:e5:a1:
1e:73:ea:2b:aa:9e:ed:de:b4:f6:e1:23:5f:cb:5e:
da:6d:f3:98:dd:aa:ad:b5:10:92:e3:ff:a9:d6:dc:
a8:ff:17:5d:be:2c:45:a1:71:d4:e0:10:0a:3b:22:
ab:be:63:98:60:5a:ff:af:7f:25:32:95:e1:fe:4b:
0a:43:7a:08:4c:6a:ca:de:f3:27:c2:26:05:1a:df:
78:23:37:cc:f3:8a:fd:3c:5a:c2:00:73:20:1d:fd:
90:0e:9a:54:a1:5b:42:ff:42:7f:97:e2:fb:0c:69:
b7:18:d3:d2:3b:d3:5d:9e:0b:82:18:d2:c3:77:b9:
c2:9d:82:83:47:de:9e:5e:b6:e5:32:54:d1:b2:ba:
0e:e1:67:25:d5:21:61:15:09:26:84:10:7e:f0:6a:
94:17:f2:58:08:09:e3:b5:a0:b9:67:5a:2e:cb:a9:
eb:c9:b6:84:9b:6e:74:30:c9:70:d2:71:1b:50:14:
c7:89:90:96:08:91:79:c0:b0:c0:7e:35:7b:68:68:
5d:a3:b6:bd:b0:32:f9:87:2b:00:7a:89:06:3d:f5:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:04:3E:53:06:36:BE:CC:3B:A9:B0:B6:18:C7:86:4B:E6:50:19:56
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:1f:96:28:95:a7:4d:4e:77:e6:27:ba:0d:dd:4e:cd:fd:
76:ba:d2:10:60:0b:2f:6b:78:85:9b:10:69:81:be:ff:1d:5c:
b4:11:29:70:0c:3f:39:5d:91:5c:6a:db:de:df:70:7e:3a:cb:
e3:e0:b2:16:02:29:b9:90:0c:c1:93:6b:74:dc:e3:76:b9:18:
74:af:06:03:d5:37:f7:33:40:10:73:2d:40:30:87:40:36:6a:
41:e8:ef:7a:9f:6d:a5:92:c6:34:80:29:7e:f4:05:2f:f8:ec:
f7:17:91:d4:0a:b1:57:58:eb:bc:33:67:7e:df:68:b4:b8:87:
c9:2d:4d:10:5a:7f:33:a7:c7:37:db:5d:0c:4e:ca:50:37:e3:
5e:ce:11:0d:18:f4:cc:9b:79:2b:f7:fe:78:d3:59:45:51:d4:
a5:35:dc:b6:f8:00:fe:5b:5f:bc:0f:9f:0f:25:c6:aa:6e:99:
35:0e:b8:13:c0:41:40:92:8e:21:bc:58:c6:84:57:a8:d3:f4:
8d:d4:15:df:48:b7:71:9e:b5:08:1d:9b:a4:0d:93:50:ba:6a:
de:ba:00:44:02:e2:94:19:55:12:b7:29:a2:d4:f4:6d:cc:35:
0f:1a:c5:6f:5f:97:71:22:ce:a9:db:84:80:0c:c3:d3:57:3d:
68:73:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:39 2026 by rpki-client