Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: 6gCTrzyxIBLBLUVrA/EpaZdjCpoy5YjuYpvlQBzIuoE=
Subject key identifier: 7C:D7:CD:71:BA:21:55:26:21:BF:C4:41:1A:59:6C:9C:2F:BC:AE:C3
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 01A0DA28E74B891A93B7639127572B18CACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 20:01:48 +0000
Manifest this update: Fri 25 Sep 2026 20:01:48 +0000
Manifest next update: Sat 26 Sep 2026 20:01:48 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: ktD808uHzFTcFwhIfakeu+TdbdnQNyP9fHqkW7QOQcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:e7:4b:89:1a:93:b7:63:91:27:57:2b:18:ca:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Sep 25 20:01:48 2026 GMT
Not After : Sep 26 20:01:48 2026 GMT
Subject: CN=7cd7cd71ba21552621bfc4411a596c9c2fbcaec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:05:9c:f5:d0:c7:41:de:c7:5b:b2:24:a0:
d7:a8:06:ac:9c:6e:23:c6:11:9a:14:44:40:8e:d3:
b8:22:f4:c5:2c:e9:4e:38:99:3c:67:7a:3d:e5:04:
2f:f7:e2:63:79:00:21:cb:bd:ae:ea:02:f7:b0:8e:
b0:a0:f0:ad:3b:63:e3:7b:d9:f6:95:5b:74:9c:25:
e4:16:d8:b4:29:4d:ed:c1:3d:3c:f2:86:31:3c:7a:
10:70:e5:13:bc:1b:18:de:33:35:16:28:03:04:3e:
e4:98:df:9b:38:2f:46:ff:7c:6e:82:c1:01:92:8a:
2a:a3:42:77:24:ad:87:d6:66:7b:f1:c3:3b:0e:ec:
94:98:7b:b0:76:9b:dd:ca:86:5c:85:6c:66:c9:c6:
4b:8c:29:ac:e9:99:28:16:44:c4:3c:2e:f5:29:97:
31:21:f3:6a:06:ec:0e:99:67:32:9f:d9:28:22:fb:
22:a8:88:fe:4a:01:e1:06:f9:36:92:37:ec:67:2a:
df:d1:60:ff:b2:e3:64:90:b9:9d:99:6f:67:b8:ce:
87:57:10:e4:cc:f2:30:d1:67:5b:4c:8c:50:e0:7c:
66:e8:2d:7b:85:97:20:3d:cd:05:be:86:70:07:88:
a7:4a:27:79:5f:d8:24:34:5b:32:bd:c8:80:8f:9b:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D7:CD:71:BA:21:55:26:21:BF:C4:41:1A:59:6C:9C:2F:BC:AE:C3
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:93:e2:e7:39:14:4b:e5:fc:b9:bf:99:5d:02:fb:86:ba:02:
02:71:cf:ed:7d:ad:fd:39:fd:10:b7:2f:77:f9:12:e6:fa:bb:
18:a1:ba:89:eb:f3:2c:37:92:d8:97:f0:8f:6b:48:12:47:d0:
2a:89:e3:84:c7:ef:7c:0a:0a:50:ec:bb:79:45:35:89:35:84:
2b:6e:0d:9c:3d:13:cf:37:fe:0a:b2:17:d6:e2:2f:fb:4c:67:
94:ae:16:b9:65:e1:87:9b:0a:1d:c7:f8:62:f9:b2:a8:2f:4a:
f7:c2:d6:76:a9:0b:d9:51:a0:f3:f4:df:3f:a0:d3:95:fa:3d:
c7:b2:0e:02:04:0e:dc:1a:2c:ce:e9:48:e5:8d:a0:f4:06:c7:
49:57:83:d0:09:8f:f2:2b:cb:18:da:54:0c:76:1c:32:4d:cd:
69:97:09:23:b8:b8:09:d6:6c:72:e3:c2:54:bf:76:e1:4f:ff:
98:d1:b1:8c:36:c0:13:33:6e:29:61:06:f8:39:a4:6a:f1:97:
58:fc:e8:64:e4:3a:72:05:ce:fd:0e:c3:1a:40:41:28:da:95:
d0:c8:61:3d:b4:d3:9c:34:4f:83:ed:e5:29:53:2f:46:f1:f9:
48:94:93:c2:34:15:31:a8:ec:b9:82:4c:a2:77:b0:90:99:c0:
f9:5c:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:42:00 2026 by rpki-client