Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: QO83Q0DY6Hv58cx2JUzPrFhR72hDw4rCr9UM3jKzxH4=
Subject key identifier: A6:7B:B1:2B:3C:09:C6:A0:21:48:3F:5E:F9:6E:E8:21:B9:59:C0:80
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019EBF5AFC30783709794FE9D1CC43A86558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1969
Signing time: Sat 13 Jun 2026 05:01:11 +0000
Manifest this update: Sat 13 Jun 2026 05:01:11 +0000
Manifest next update: Sun 14 Jun 2026 05:01:11 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: Yc12ZSe8Bkpca1MBRmjk5v2Tsf/5C6yMyhV2/0ic6lo=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:fc:30:78:37:09:79:4f:e9:d1:cc:43:a8:65:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jun 13 05:01:11 2026 GMT
Not After : Jun 14 05:01:11 2026 GMT
Subject: CN=a67bb12b3c09c6a021483f5ef96ee821b959c080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:9c:20:7b:96:99:8a:ae:59:8f:3f:2a:54:
59:ef:18:d6:e2:c4:58:16:2f:ba:cf:3c:59:ae:8f:
0e:b9:49:83:90:84:78:0b:45:23:dc:a4:1a:47:89:
65:7e:db:e0:44:2d:da:2b:f6:8e:87:b8:a9:0b:d4:
62:94:cb:9f:e2:36:4d:83:da:1f:65:e8:38:67:2b:
2c:bd:8a:98:a7:fe:f3:78:bc:fe:a7:f2:a7:0d:cb:
a0:c9:97:89:df:5d:48:e4:5e:99:f0:00:41:85:4b:
49:a9:60:cc:94:eb:fc:0f:7f:f0:15:15:80:ee:c1:
0d:60:98:f4:4d:f3:7f:4f:7f:58:28:58:a0:39:fa:
4e:99:95:06:8a:44:69:75:3d:05:12:63:30:cc:23:
bb:df:da:fd:d2:c2:32:21:46:2e:de:13:44:4f:57:
a0:36:da:e9:cc:d2:da:a0:6c:92:3b:96:9c:19:e6:
38:ea:8e:a7:b5:1c:5f:a8:82:4c:c8:e3:0d:a2:4e:
c4:e7:93:ed:82:78:e6:30:8b:d0:6d:52:b8:4b:f2:
0a:39:2f:39:19:1b:b6:a8:c3:b9:5f:b7:08:98:1a:
92:20:d6:e3:d9:08:83:1a:3a:e3:71:36:3c:91:f2:
04:11:e1:88:4c:10:8a:68:5c:d1:da:79:18:28:7e:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:B1:2B:3C:09:C6:A0:21:48:3F:5E:F9:6E:E8:21:B9:59:C0:80
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:11:e7:31:51:73:07:24:f2:f5:b2:bc:95:24:05:f5:81:f8:
13:f2:15:01:7f:7f:1a:13:20:77:5b:14:07:89:4e:84:11:00:
77:3f:cc:c1:66:88:52:99:d8:d7:ac:6e:2c:00:09:af:8f:c3:
2f:d4:37:7f:51:a4:74:1d:65:9f:5c:10:18:97:95:8d:2f:fc:
72:aa:6e:50:a3:a4:05:40:ed:70:5c:b2:16:2a:07:8f:15:dd:
fe:5d:4d:a1:af:15:5d:3c:da:c2:af:7f:20:de:2d:55:3a:0a:
ad:1d:09:2b:01:ff:4b:68:9f:e2:fc:6a:b6:b9:6f:31:03:91:
93:18:72:81:9e:41:86:af:59:7e:13:b4:01:6e:8a:5e:4b:c2:
df:b4:85:10:12:d7:89:44:dc:1c:79:65:25:e4:c8:70:cf:15:
b2:e5:34:86:df:b9:67:e1:a8:35:d1:10:93:44:51:67:03:22:
3a:7c:e6:02:35:41:f1:89:19:28:69:7c:d0:20:c2:17:80:4f:
f7:51:52:b9:62:d7:99:5a:5d:4d:02:d3:86:21:87:b5:f2:a7:
4c:07:a9:ce:d0:8f:1e:e2:12:bc:19:72:66:19:79:6f:56:d5:
a0:79:c1:0c:85:b4:cd:20:80:6b:39:2d:8d:9c:a3:78:76:c5:
f6:b4:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:17 2026 by rpki-client