Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: 5F4rxljiVyDGGJVZFUFNogzf+6SAtsY5fPwI+jtMghY=
Subject key identifier: 53:80:0E:97:67:AE:AD:51:01:73:6C:DA:9A:50:34:CD:EF:0B:3A:7E
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01A0DFF3D870465103976427DDA822D51221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1A83
Signing time: Sat 26 Sep 2026 23:01:34 +0000
Manifest this update: Sat 26 Sep 2026 23:01:34 +0000
Manifest next update: Sun 27 Sep 2026 23:01:34 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: zyXtqAMUtX2JR7ZIT40NXDw6w3Qb/07DGORXCLnL6po=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:d8:70:46:51:03:97:64:27:dd:a8:22:d5:12:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Sep 26 23:01:34 2026 GMT
Not After : Sep 27 23:01:34 2026 GMT
Subject: CN=53800e9767aead5101736cda9a5034cdef0b3a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:cb:cd:be:38:c3:a2:50:07:45:2e:d4:fa:
86:68:32:97:a4:e2:e7:71:a8:fd:51:29:33:0e:a2:
be:1d:a4:04:af:33:07:76:16:5c:a3:52:a2:6c:61:
a6:50:e7:df:90:13:16:84:b9:71:a1:07:82:d4:73:
1a:f7:df:bd:57:86:1a:0b:4c:c9:8c:bd:6b:5e:a5:
98:53:b6:f0:1f:ae:5f:f8:b2:f3:69:69:2a:a4:2d:
bd:b3:9c:68:db:4f:0d:ea:22:46:24:5f:d7:11:dc:
28:20:d1:99:f9:63:73:48:cd:02:1e:fe:8e:1d:82:
e4:2f:89:8d:22:d3:2e:ab:dc:6f:7c:ba:44:40:3d:
dc:5a:ad:69:be:7e:b6:a4:e7:32:94:29:70:2d:35:
40:bf:59:cb:b8:5f:34:da:d5:1b:d6:9b:c6:02:b7:
87:47:df:aa:c5:5c:b9:cf:b1:aa:41:37:fd:b4:0a:
e6:96:51:eb:c0:62:3c:8a:de:53:f6:ba:a6:9c:64:
bd:db:dc:90:51:b1:f9:da:dc:38:04:5f:2b:48:c3:
b0:c5:f9:c2:97:1f:eb:86:b7:d4:81:88:77:aa:48:
1e:35:82:6b:c1:94:b5:b7:9d:14:57:e8:3a:28:34:
85:75:e5:32:2b:32:b4:d9:18:30:a9:4c:9a:1b:d3:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:0E:97:67:AE:AD:51:01:73:6C:DA:9A:50:34:CD:EF:0B:3A:7E
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a4:88:e7:54:a7:98:2f:25:73:5c:69:bc:37:e0:1a:8a:99:
f0:c4:06:72:86:b0:c7:17:8a:ad:c4:75:88:e3:d1:eb:d9:b6:
e5:ff:44:2a:15:5f:9a:fe:83:bf:f6:1a:83:32:01:49:df:8e:
b4:8d:12:ed:d0:dc:9e:db:4d:8f:5b:22:87:81:9a:0b:c1:c1:
c6:65:af:65:79:0e:47:1f:b5:52:bb:b9:f1:9c:56:89:0b:b5:
a3:b9:83:bd:6c:8a:6d:d0:e5:ef:df:3e:ee:81:2e:8a:2f:6b:
6f:ff:a6:cd:6f:be:62:89:a1:6b:91:cc:66:e6:ba:98:fb:08:
48:ad:e9:26:05:ed:b9:f9:8a:ad:7f:1c:0e:1f:7c:c3:09:cf:
a5:00:1d:7b:33:e9:36:6a:9a:49:6a:d8:37:90:2d:39:c3:9a:
98:1c:66:36:f3:36:f2:dc:7f:1b:87:58:25:93:b5:7a:c7:e8:
07:0c:7d:2d:13:a5:bb:3b:53:6d:64:75:38:36:bb:e0:fc:b6:
93:6d:6c:8b:b2:59:8f:64:de:df:68:a4:18:03:d1:80:2b:e0:
fc:92:27:b1:9f:a2:a8:67:ed:48:d8:4b:b4:f1:52:94:50:95:
fe:6e:4f:f2:3f:9b:b9:7d:38:bc:55:f6:70:3e:10:b4:58:4c:
1a:3a:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:47:07 2026 by rpki-client