Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: dIu8mD4VwY2R9bm37tTlW6eiIia6KkzIkc8oiN8s5ig=
Subject key identifier: 3A:2D:05:C8:CC:0D:EC:60:C0:65:4A:63:AF:D0:86:A9:2D:9F:C8:3F
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 019D265FFB87F01C98C68E9B53CE96F2992F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 165D
Signing time: Wed 25 Mar 2026 19:01:57 +0000
Manifest this update: Wed 25 Mar 2026 19:01:57 +0000
Manifest next update: Thu 26 Mar 2026 19:01:57 +0000
Files and hashes: 1: KDQ-cFcPwQDy3bGFF_WSaIsvNNQ.roa (hash: nE15hquAwl/5m54NEuxKdixrl7Q9eNfNpFSjwL6hasY=)
2: ekbIvq4xoQE_G2aZ6OBWbjCke00.roa (hash: CDCAAwMBxMHZc9k/9U2grgMxj6swO3W7TTk/XqEYqRY=)
3: m7QfGcH9ehj8zUctNJKORHfF7YQ.roa (hash: jEz2eC4AxW2xJSso0f7640cBfazPEGudZTNrPpOM8vo=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: 6gkzS+hEzVMgDROUgomKYMGThO2gOPzzFnbYYA8oQMs=)
5: xXThYeFskZa8CsEFNdXzq9WOPuU.roa (hash: cncRVt5HZa39EbyA1UHTjl7763HCDtgzdQM7tatOGC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:fb:87:f0:1c:98:c6:8e:9b:53:ce:96:f2:99:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Mar 25 19:01:57 2026 GMT
Not After : Mar 26 19:01:57 2026 GMT
Subject: CN=3a2d05c8cc0dec60c0654a63afd086a92d9fc83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ba:5c:03:6a:37:cd:06:55:c9:05:5b:96:7a:
60:1c:11:31:d5:0e:ff:b4:73:a8:30:20:2c:92:cd:
d2:d1:64:e1:76:a1:2c:f4:ad:94:22:fc:7e:29:37:
43:86:6c:03:25:a8:fb:70:32:97:e9:b3:f8:de:e3:
df:aa:bd:90:67:75:4b:96:d5:01:e4:8c:5a:79:6f:
44:ad:80:ba:62:18:f9:6e:42:2d:4a:c8:ff:54:08:
18:50:53:97:95:85:84:2b:e3:0b:6d:d4:b1:54:c0:
33:bb:22:1a:97:45:9b:57:8c:a4:af:ab:23:e4:35:
e9:7d:72:56:08:a3:30:77:49:d8:16:78:6c:5b:df:
4c:05:4c:b8:b9:b4:1a:db:05:4f:75:25:ae:12:e8:
07:51:f7:e2:b7:3a:ad:19:fd:b7:be:51:08:46:37:
bc:55:cf:18:95:6c:3b:0f:40:4e:8b:b7:98:69:ab:
67:4b:01:da:61:36:d3:e9:ae:7c:4c:06:17:82:e0:
c8:e3:d3:5a:33:84:45:2c:5c:8f:90:56:0c:78:df:
fe:47:85:64:9a:df:30:a8:06:4e:3e:90:de:16:ef:
e6:b3:d7:f3:d7:fe:2e:c5:09:e5:03:4a:0d:15:d1:
d7:24:9d:29:6c:29:be:dc:af:cf:d6:48:c4:db:59:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:05:C8:CC:0D:EC:60:C0:65:4A:63:AF:D0:86:A9:2D:9F:C8:3F
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:ed:5c:b6:57:01:b1:f3:93:02:21:f0:aa:64:01:2c:4a:37:
de:38:c5:1f:80:cd:07:71:73:b2:c0:d6:5d:c5:46:84:bf:4b:
02:ac:d8:a8:01:21:be:c6:07:d4:ba:47:ed:5c:9c:da:3b:90:
1e:94:c1:6f:22:77:3d:7f:5d:5b:22:d7:e9:8b:ba:10:3d:54:
6d:55:d9:f0:d2:4b:ba:99:85:98:5d:09:de:56:19:6d:6e:04:
32:ab:da:7d:a7:63:7f:25:5c:f8:5c:8f:80:bc:6d:34:76:60:
bf:ff:52:f3:0f:06:d6:f1:9b:6f:46:db:7d:65:a3:8c:64:5f:
b5:a5:d9:6b:b6:11:f4:e9:8a:96:66:57:23:46:c2:1e:64:0c:
dc:ba:22:33:0a:f1:ec:76:d6:3a:6f:41:eb:ab:3d:61:f7:1a:
e1:3d:a6:7e:2f:0f:f3:bb:1e:58:ed:98:7f:0f:4b:dc:b2:49:
91:f5:d5:92:fd:08:b6:45:62:50:65:7e:f4:d6:5a:31:27:9d:
f0:21:fa:10:ef:a0:f7:bf:9e:8f:37:c9:3e:17:83:cf:07:25:
82:ca:c5:a9:ba:a3:08:f4:ff:c0:f6:00:dc:ba:98:76:7f:27:
a1:ce:ab:4a:59:62:f8:cd:86:69:f7:06:9c:d6:2c:e1:09:4c:
ef:68:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:51 2026 by rpki-client