Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: g9hnnoh4McIof2Gd+2TDLfE577j2XgTEDeztUM08dUw=
Subject key identifier: 07:F4:EA:3E:0E:EA:D1:14:BE:A2:CB:34:91:A4:62:36:C8:A9:50:F0
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 019E1F10A415FAE19C67691BBDD65AE0B80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1898
Signing time: Wed 13 May 2026 02:00:44 +0000
Manifest this update: Wed 13 May 2026 02:00:44 +0000
Manifest next update: Thu 14 May 2026 02:00:44 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: 7TcwRIHr79+gDJyIBfPVjybIpkGITGZOoJlK6qnfYM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:a4:15:fa:e1:9c:67:69:1b:bd:d6:5a:e0:b8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: May 13 02:00:44 2026 GMT
Not After : May 14 02:00:44 2026 GMT
Subject: CN=07f4ea3e0eead114bea2cb3491a46236c8a950f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:d6:18:fa:ff:7c:14:87:58:74:05:8c:d5:
85:8e:4e:1c:0f:a5:e8:e7:61:25:eb:d9:de:7b:ef:
1f:a0:42:01:99:7d:13:fe:e5:21:3e:b1:37:f1:d5:
cd:12:7e:53:85:d5:62:65:a5:9c:24:fc:55:68:60:
5a:94:ae:fc:de:d5:97:31:e7:20:1e:c3:9d:1b:7b:
c4:55:2c:63:73:85:96:27:90:0c:91:36:e1:38:e7:
f6:f3:10:39:3c:55:0f:c0:3c:55:16:cf:2d:d5:d9:
ee:e1:8e:94:99:02:09:47:56:1f:a4:63:31:6c:da:
cd:83:35:71:00:0b:46:1d:02:b9:57:7e:59:df:7a:
2f:98:a7:ac:a6:24:2d:86:b4:e5:75:21:1b:c1:03:
51:ba:c0:bd:07:d3:bb:73:14:a5:33:cd:42:51:59:
96:9c:94:7f:68:ed:c1:8c:99:5b:30:59:f8:1b:51:
bf:fc:3b:bc:f3:21:36:1b:d2:26:38:65:7f:b9:01:
7d:99:2f:c4:c0:8e:e7:f3:1f:5d:bc:2e:28:16:5c:
9f:af:28:f6:ac:bd:5b:cb:3c:6d:5a:c4:ef:c7:f1:
c5:84:18:58:0f:f0:e7:5d:93:57:5f:b9:a8:ac:25:
d5:67:74:d9:c0:11:77:2c:e9:e0:04:99:5d:c2:15:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F4:EA:3E:0E:EA:D1:14:BE:A2:CB:34:91:A4:62:36:C8:A9:50:F0
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:ac:e2:c5:94:21:c7:a0:0c:6e:30:d8:d7:cf:b8:5b:49:
c9:f7:e2:54:66:18:e9:06:32:54:8d:f6:7a:5e:08:2d:f1:07:
d5:dc:d6:19:73:9b:70:05:da:db:78:87:2c:6f:4d:27:78:85:
ad:d9:d9:e1:49:12:b1:04:a5:4d:e7:b7:2f:3b:6b:62:5c:cf:
36:ff:92:09:4b:93:d6:ea:76:a4:ea:0e:11:be:9d:c0:a0:0a:
f3:74:3d:59:3b:5d:30:e4:bd:b3:64:c5:a7:6c:af:2d:8c:42:
da:c0:4e:fc:ac:c5:5e:5d:90:e3:be:13:d6:d8:cf:ea:2a:bb:
52:5f:97:c0:eb:25:84:85:7b:29:8d:12:b6:fe:14:e4:69:d4:
fd:38:ba:cd:4c:1a:1c:73:cb:97:c7:93:db:75:b6:3b:7e:91:
31:53:1a:98:34:21:de:a3:d3:7f:09:15:55:cc:a0:a8:45:ec:
e4:0e:11:f9:d6:9a:e8:a2:bb:47:0a:a1:36:22:bf:34:aa:a2:
9a:4c:d2:ff:ce:43:a4:73:65:d9:fa:3b:58:a8:e8:9c:26:59:
3e:ee:b6:b8:7c:f9:7c:51:cb:5a:f8:cf:cc:df:db:fd:54:84:
f5:00:ff:76:f5:37:96:64:6c:e8:b6:79:64:14:87:99:d3:27:
f4:2d:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:04 2026 by rpki-client