Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: HxPhdX7+9EIvIx6ZpUBrf8dE4niWGSm5QVewZFYnDaE=
Subject key identifier: AE:9B:C4:7B:C3:BF:30:98:9B:78:80:E2:BC:C5:49:BD:46:64:BE:20
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019FA906ABE417BBCEFEE6B8801705A96482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 19E2
Signing time: Tue 28 Jul 2026 14:00:14 +0000
Manifest this update: Tue 28 Jul 2026 14:00:14 +0000
Manifest next update: Wed 29 Jul 2026 14:00:14 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: ll+ZNKdOEJGW/NK0suaOBDAhsnK84qA44a1YT9y/rdQ=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:ab:e4:17:bb:ce:fe:e6:b8:80:17:05:a9:64:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jul 28 14:00:14 2026 GMT
Not After : Jul 29 14:00:14 2026 GMT
Subject: CN=ae9bc47bc3bf30989b7880e2bcc549bd4664be20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:5a:82:c0:ef:9c:62:9b:ef:cf:b0:fd:39:
54:17:19:1e:26:c9:f7:11:78:3c:0c:70:56:67:17:
fe:70:a5:16:c1:a6:06:ce:28:73:95:75:d4:06:e3:
56:b7:b7:b3:53:0b:ef:f2:c9:1e:2d:8e:07:73:09:
bb:3a:40:6d:1a:3e:e7:7f:db:ab:eb:5c:11:e6:51:
1b:2d:f1:bc:98:4a:81:38:24:df:12:02:a1:32:4c:
58:8f:c9:df:1f:c7:5a:d5:9c:cd:ea:08:9a:c8:f7:
0b:2d:23:a4:e9:b2:4f:2e:33:49:53:f5:bf:b3:ea:
46:f7:5a:72:36:39:9a:5f:51:12:a1:f7:cf:4d:56:
9d:c7:bf:f6:0c:09:1b:95:08:cd:e5:6b:eb:bd:b6:
20:6c:62:c6:32:ec:86:dc:b8:93:82:07:f1:40:43:
ea:a0:6a:08:e5:95:7b:c8:f1:48:63:6e:c1:d8:cd:
66:25:90:ff:fa:f5:02:a8:8b:00:f3:93:e4:89:5b:
23:44:33:2e:38:fa:d8:8c:bc:f1:ef:ac:4c:44:d8:
ec:24:68:cd:f6:de:1e:65:9b:db:05:a9:84:e6:fa:
0a:2d:4d:5f:62:15:c2:4d:02:b0:5f:f4:41:c2:17:
53:84:01:e4:f1:2d:16:7c:82:e0:a2:2a:dd:0a:17:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:C4:7B:C3:BF:30:98:9B:78:80:E2:BC:C5:49:BD:46:64:BE:20
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c8:e8:4c:81:34:08:19:d7:af:74:03:e4:86:b6:08:73:f8:
fe:55:f4:58:e3:7a:d8:97:d9:85:42:fb:1e:9f:10:da:21:71:
14:85:63:5e:8a:c0:fe:84:a8:cc:75:30:2b:df:5b:6c:ce:49:
9e:10:76:aa:35:58:7c:8e:0a:b0:8c:11:9a:c9:f8:c5:28:69:
ed:3f:24:55:30:e7:b9:36:0b:6e:d2:87:26:9d:71:a5:7e:82:
33:3d:6b:ec:d6:59:9f:a5:f1:e6:cf:98:cc:2e:c0:28:8b:a0:
75:c9:ae:e5:39:f8:eb:f8:7e:1d:4c:54:1d:57:4f:c0:f2:25:
0b:8a:c0:03:15:a2:2a:f6:31:06:47:96:36:bc:24:e8:89:3b:
18:5a:6e:5f:95:c6:1b:1b:5b:13:db:11:4e:c9:b7:8a:20:33:
9a:a4:56:c3:18:83:32:b7:30:92:4f:30:f0:2f:20:3e:84:38:
89:d1:0f:47:cd:be:75:c2:07:70:d2:9d:c4:14:db:38:8c:e8:
67:8f:e9:61:53:21:44:84:23:4b:3e:bb:73:74:61:c2:05:2d:
6f:f7:13:5e:36:68:05:df:e3:2d:4e:27:1d:09:1d:19:af:b3:
e8:31:84:fa:5f:5a:fd:f7:1b:b0:20:7d:90:01:54:5c:88:10:
03:f1:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:56 2026 by rpki-client