Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: 2Wt0jmlFR3M4R+udjL2XnTFNdCQpvGF+9eHWIP5vpwU=
Subject key identifier: E9:00:28:48:4A:2F:95:34:49:19:9D:CB:BD:5A:D1:C3:0A:9A:C0:A5
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 019D27E06B69601AAF45483E458159CDFF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 02:01:52 +0000
Manifest this update: Thu 26 Mar 2026 02:01:52 +0000
Manifest next update: Fri 27 Mar 2026 02:01:52 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: wVlt1qO5telE8QrPDbTJj7LIBqLkVHLOZCQeaZnIPyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:6b:69:60:1a:af:45:48:3e:45:81:59:cd:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Mar 26 02:01:52 2026 GMT
Not After : Mar 27 02:01:52 2026 GMT
Subject: CN=e90028484a2f953449199dcbbd5ad1c30a9ac0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:dd:c9:d6:1a:ec:7a:ca:0d:59:f9:b2:a1:
da:66:52:ab:bf:19:0b:3d:17:39:5b:7a:32:e2:0b:
e9:2b:63:c6:a9:91:b8:d5:3d:17:47:5f:55:3d:db:
90:51:95:57:6a:69:29:d0:ed:de:9d:41:e8:72:6c:
db:f9:ac:ed:8f:d5:2a:e0:cf:ff:03:05:3f:78:d5:
c5:46:d0:1a:b3:1a:8a:6a:ed:3b:06:94:35:d8:60:
7d:e8:4f:7f:c7:7a:b2:d2:d0:f0:00:52:f8:92:09:
3f:24:57:80:dd:c9:90:ef:1f:26:63:1e:54:73:61:
74:5e:29:47:fe:e4:1c:ff:0e:9a:4c:e0:91:28:21:
60:47:88:35:e2:da:9f:e7:87:ae:3a:9d:36:d9:3a:
d7:7a:89:21:b2:29:b2:31:84:41:bb:28:0a:73:6c:
c1:da:5d:00:c9:34:2d:19:4d:5c:3c:a9:bd:2d:73:
96:4d:5c:ef:71:bc:8f:c7:05:ef:04:ba:50:89:fd:
e0:0e:25:9f:a3:41:cb:61:38:72:9a:0c:ad:75:7d:
a7:d2:c9:66:11:ea:96:99:97:e1:96:7b:70:98:b2:
fe:45:0e:b8:4a:ee:05:79:22:8f:1f:eb:9e:e5:cb:
8a:89:3f:a5:db:b4:3f:dd:15:e5:ac:3b:1f:a3:21:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:28:48:4A:2F:95:34:49:19:9D:CB:BD:5A:D1:C3:0A:9A:C0:A5
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a5:ea:df:4d:87:a3:95:01:cd:21:24:7b:0b:64:5f:0e:0f:
90:cd:32:9e:10:a8:08:b5:3c:24:53:85:e0:df:e9:f4:16:e6:
8b:a9:84:44:69:8d:a3:3b:76:60:9d:e5:82:4a:2c:56:dd:5d:
42:79:64:1c:9b:03:4b:75:4b:94:e5:a3:d4:9a:c4:8e:ac:78:
c5:d1:cc:c6:ce:f5:72:1d:8b:ca:c8:23:5f:25:9b:db:fd:86:
aa:d2:98:25:7f:6b:7f:e8:d5:5d:e3:5b:c6:cd:2f:e4:36:5d:
47:e8:c9:36:87:16:1a:65:a7:dc:50:32:7c:70:df:79:5f:9a:
b3:50:90:a2:bf:37:9e:12:39:b6:d9:e4:dd:17:0f:5a:12:62:
de:80:7a:37:aa:ba:98:b8:c1:3e:e4:b5:b3:f4:18:c5:23:4c:
5b:ff:1b:4f:ad:83:c5:62:cd:bc:a9:c4:f1:e7:d1:ae:d3:ef:
19:0b:9a:1a:7f:44:39:36:b3:92:0b:60:a2:26:8e:aa:bd:bd:
f2:d1:ae:c0:6d:7a:8a:8c:37:bc:ca:3d:57:46:e6:31:47:b3:
ea:1b:bd:8a:07:fa:40:12:e8:75:39:3f:2d:6f:d1:1f:fc:c1:
1b:e8:23:79:f9:a0:b4:f1:c0:a4:ef:96:16:92:bf:ac:02:7a:
8a:c7:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:05 2026 by rpki-client