Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: fgxCI1fZ0rOx5ABAUljXBSSTdRudWdI+KRCBqUo4GoM=
Subject key identifier: F8:EA:47:A4:EB:46:BD:44:AA:17:42:6E:B5:3D:F6:0E:47:0E:13:7B
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019D99D03CEE7DC543BC419C9B3B246F0CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 05:00:54 +0000
Manifest this update: Fri 17 Apr 2026 05:00:54 +0000
Manifest next update: Sat 18 Apr 2026 05:00:54 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: KnwJiE6rL7qMvZ4NeIZ4APzoQhGjxOdTJFlBnlCuHe8=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3c:ee:7d:c5:43:bc:41:9c:9b:3b:24:6f:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Apr 17 05:00:54 2026 GMT
Not After : Apr 18 05:00:54 2026 GMT
Subject: CN=f8ea47a4eb46bd44aa17426eb53df60e470e137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9f:ad:b5:e3:9c:ce:4f:26:36:6e:22:5e:a0:
76:62:17:1b:3c:16:d6:b0:a4:89:ad:8c:67:9d:bb:
61:7a:bc:3c:78:94:e4:d4:25:7f:f8:a1:c6:ba:6d:
0d:7b:b9:de:08:76:5a:42:7a:31:f8:07:4a:86:14:
94:39:4e:af:40:0f:06:fd:07:6b:e5:e8:39:df:70:
c5:a6:e8:c1:88:a8:18:8d:aa:c9:7d:f1:c0:82:1d:
47:ae:ce:74:8b:2a:be:bc:e2:2d:c5:93:fb:79:25:
c9:6a:0c:50:74:81:09:23:e3:1d:a3:b9:1d:9e:4d:
37:41:e3:a7:18:f2:17:8b:50:e5:65:31:32:de:ff:
ea:68:64:80:9f:83:15:1e:03:8e:8e:c3:de:fa:18:
57:c8:9d:ab:9d:b9:89:a7:00:e9:e5:f7:03:d3:ef:
22:e2:d6:9b:ea:21:85:f7:d8:3a:79:dc:fc:d7:01:
52:2f:76:f7:78:1c:b2:5c:56:9b:e7:0f:3e:46:ff:
9e:f3:1f:ee:8b:a9:9e:9e:bc:c2:63:0f:6b:89:7b:
88:3e:0a:ad:e3:d7:85:4e:10:87:58:2e:73:49:00:
72:af:07:03:31:18:35:5a:5c:9d:80:ba:1b:fb:a5:
d7:f5:9f:ad:1f:ec:a8:e4:02:dd:69:b4:cf:e5:1e:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:47:A4:EB:46:BD:44:AA:17:42:6E:B5:3D:F6:0E:47:0E:13:7B
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:48:1e:b8:cf:a4:a5:95:a1:d2:5e:05:6f:72:3a:82:81:
c4:c6:24:53:4d:d5:28:22:f9:be:f0:91:43:f9:e1:a3:39:7b:
91:23:52:66:d1:8a:cd:c7:84:c4:b5:16:14:2d:90:65:3e:11:
81:c8:d5:d2:cc:e3:c6:84:28:ca:36:44:2b:0c:52:db:24:29:
d0:49:73:c2:aa:62:2c:df:09:87:7c:87:f2:d4:6d:87:2e:93:
44:12:3e:b0:67:87:3b:5c:c7:df:be:fe:75:e3:61:0f:7f:a2:
e4:5c:bf:31:4f:03:a4:7d:c5:87:bc:b1:e0:f8:fd:e5:f4:74:
a9:b4:c4:81:ea:bb:cb:f9:e2:29:f0:08:03:78:34:c1:13:83:
eb:51:3f:f7:67:dd:f1:2c:21:5e:96:96:b5:97:22:25:8d:43:
bb:0a:38:32:51:6d:ee:a6:fa:1f:42:74:f9:cf:16:9e:60:2a:
a8:28:d8:1f:49:53:52:f3:af:4a:3c:48:76:f6:ef:2d:b8:43:
a5:57:7e:97:c8:3a:79:8d:f7:ce:f5:48:12:99:07:ea:8a:51:
7a:f2:66:03:8a:1d:8c:e4:b1:4b:31:00:e2:50:bd:e9:66:ae:
23:9f:35:3d:23:02:c7:7c:60:6b:5d:17:5b:39:ac:59:c3:b3:
e0:8a:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:30 2026 by rpki-client