Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: MMu9zhwKxjH/ty0n0rKZgfw8N8hODTHEJDhn5VphAA8=
Subject key identifier: 2B:34:D0:C4:E0:7D:71:97:94:44:D5:5D:5B:67:9B:26:1E:31:7A:2A
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 01A0E1E2730EA798BF85512EEF4EAC369BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1A06
Signing time: Sun 27 Sep 2026 08:01:49 +0000
Manifest this update: Sun 27 Sep 2026 08:01:49 +0000
Manifest next update: Mon 28 Sep 2026 08:01:49 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: t+PNiXxtl+LCCZrjO6o1bXJltTdkgVqilAEKpYXQE5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:73:0e:a7:98:bf:85:51:2e:ef:4e:ac:36:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Sep 27 08:01:49 2026 GMT
Not After : Sep 28 08:01:49 2026 GMT
Subject: CN=2b34d0c4e07d71979444d55d5b679b261e317a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:9f:bb:f3:ba:b1:d7:bf:07:b6:ce:e8:29:
87:da:18:c0:e6:0a:a8:03:aa:6b:15:cb:3d:5b:b1:
d0:9b:de:71:bf:12:3f:d2:ec:a9:13:81:4e:a0:da:
7f:7c:98:d9:c8:3a:d0:34:95:a6:f1:46:e3:8e:8e:
77:9a:b1:ab:42:51:6d:bf:c3:6d:7a:d9:00:f8:08:
f0:ae:ee:a3:86:de:2b:b4:4f:02:0d:c0:9f:6d:da:
7a:0d:d5:77:2e:66:7b:77:f4:8f:87:f2:ba:ab:42:
2c:8e:93:72:62:fb:3e:15:a6:08:86:a9:16:40:74:
6f:b2:46:38:6b:9a:f9:06:e0:d0:33:29:56:65:ac:
ff:fb:72:73:d6:d0:0c:5b:d1:b7:1d:d2:0b:e0:ad:
e8:3f:d6:ef:67:f4:cd:7e:67:7e:96:51:25:d4:f5:
9e:21:2b:1a:ce:6e:23:d4:e3:3e:bf:41:4c:7b:a0:
71:d3:96:16:c1:14:55:ae:1b:9c:a6:9e:c6:6f:09:
ec:64:5b:7b:bc:5d:be:34:c0:d5:33:7b:4d:c9:b0:
47:df:36:72:3a:fa:0b:53:32:08:15:51:1e:af:5a:
60:d8:76:42:8c:6d:14:1b:33:e4:98:0f:4c:58:08:
e8:02:b8:d0:b4:ee:6a:5c:c0:47:ae:19:03:9f:36:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:D0:C4:E0:7D:71:97:94:44:D5:5D:5B:67:9B:26:1E:31:7A:2A
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:86:7b:83:11:1f:a8:d7:fc:88:93:be:4c:ed:9c:0b:ef:dc:
e8:28:d3:8c:12:d1:41:17:7d:5c:f5:9f:02:e2:b4:7f:d6:9c:
96:24:50:38:92:45:8c:0a:84:f6:2d:47:fa:96:b1:66:dc:9f:
53:fe:d3:05:d6:9a:1e:3b:90:f2:39:d5:8d:1c:7d:dd:6f:9b:
5d:63:77:d7:5d:ff:87:88:3e:99:c4:1e:38:7d:17:7a:99:35:
69:b4:9e:51:f0:df:c8:8b:f5:8e:71:d0:48:43:d0:d2:6c:fa:
81:30:06:41:39:ba:6c:52:6f:af:9b:a8:be:c4:57:c6:b1:38:
be:9c:31:13:3c:05:e1:dc:83:43:74:fd:e1:c8:be:22:f0:37:
7e:15:1d:19:94:9c:d8:fe:7b:ad:b7:03:6f:e3:1e:56:70:20:
3d:2d:1a:8c:c7:00:f3:9a:21:5a:3b:24:93:a5:5a:53:3a:60:
71:8a:5e:85:8e:1c:6e:58:f4:85:74:8a:f7:fc:cd:c1:9a:19:
af:7c:2b:fb:ce:0c:43:25:36:93:b6:d5:a5:5b:51:95:9b:3e:
f8:a8:48:e8:fe:b5:ec:72:b2:54:b7:db:63:1f:d5:8a:da:3d:
55:fe:73:a3:41:78:bf:82:78:9d:d6:03:6f:11:01:11:97:61:
6e:fa:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:35:24 2026 by rpki-client