Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: gJJk+YFNQhkIEmG+uTXAuOa3F8s8ydREIUyDaQ27I8Q=
Subject key identifier: EA:95:22:97:F6:A8:25:10:EA:49:2D:8F:4D:F7:24:DC:89:7D:62:88
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 019D265F5B2913C5E672A7C48465B976DAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 14DB
Signing time: Wed 25 Mar 2026 19:01:16 +0000
Manifest this update: Wed 25 Mar 2026 19:01:16 +0000
Manifest next update: Thu 26 Mar 2026 19:01:16 +0000
Files and hashes: 1: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: dzuZXRe1Juotz5o3rXyy3qrWVs9VfkhhyPHEoH3t0Kc=)
2: vkkU5qcNwif85YuYYkMvPwpF9bE.roa (hash: +Rt0rHoLRBoQoqjRxvI3wCxV42/UQj2q4M4W5+EOc3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5b:29:13:c5:e6:72:a7:c4:84:65:b9:76:da:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Mar 25 19:01:16 2026 GMT
Not After : Mar 26 19:01:16 2026 GMT
Subject: CN=ea952297f6a82510ea492d8f4df724dc897d6288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:f9:ef:a5:e4:54:47:97:cd:d3:7d:48:b0:
fb:5d:3b:39:84:de:cb:a8:d7:c8:10:30:a8:ab:84:
bb:75:87:d0:b1:ed:b9:c0:d3:cc:33:d7:72:9b:23:
e5:c1:5b:33:22:61:83:24:84:0a:60:3d:5a:0a:d1:
7d:21:2d:40:f8:b3:ed:ad:c1:34:cb:da:8e:ed:28:
c1:a5:e5:e9:37:f2:97:38:16:dc:a9:40:fe:79:0c:
e0:b2:3e:b4:9f:2b:3d:4c:b8:29:11:ab:66:88:83:
e4:a2:3f:7c:70:87:ff:0d:43:f1:17:3a:65:0f:66:
4c:c6:9c:4c:08:61:1f:24:85:75:0f:c9:d2:fe:2a:
90:50:c3:f6:02:cc:55:b6:1b:65:b6:49:cc:ba:8e:
ab:29:6d:a7:c2:06:47:4e:56:dc:b4:29:07:3a:91:
6c:a8:fd:47:aa:0f:d8:fd:23:32:50:4c:cf:13:a6:
d2:0f:44:cf:ca:ed:3c:f3:d8:e5:c5:85:3e:01:86:
4f:79:e0:f3:95:eb:8e:03:8c:86:47:b4:0c:ab:b0:
bb:ef:e4:0a:28:3a:77:82:d0:8d:0c:2e:79:27:74:
92:f7:ea:7b:c6:0d:e9:fb:8d:8a:43:0a:b4:b5:84:
83:10:86:ed:7c:32:0c:75:9a:fd:48:b1:99:e3:84:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:22:97:F6:A8:25:10:EA:49:2D:8F:4D:F7:24:DC:89:7D:62:88
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:42:9b:89:09:b5:53:71:a9:fd:5b:f8:5d:d5:83:7d:97:
bd:02:da:3f:a4:b9:dc:8c:31:05:66:c6:3e:a6:e7:aa:68:a2:
6a:85:d0:b0:b0:6d:7e:3e:76:ba:55:f9:52:09:d0:d2:4c:bd:
d6:05:11:14:cb:5c:26:50:68:16:3e:15:28:82:88:93:69:80:
64:4d:87:d0:e6:a2:85:94:0d:25:6f:0c:2d:ed:01:79:a2:8b:
2f:ee:bf:cb:1e:5f:96:59:88:7a:fd:d5:70:1d:a9:cb:72:9b:
2a:ef:15:a4:3a:e3:c0:a0:bc:77:cc:00:0e:3c:31:10:c8:97:
8c:41:ea:f3:45:b7:e4:b0:d6:9c:c5:c0:32:4d:41:92:6c:c6:
19:06:0a:b7:48:cf:7d:89:8e:48:e1:90:87:a4:9e:eb:b9:66:
d8:9b:b7:33:c8:79:f6:07:7d:2b:31:d7:d0:e9:30:ed:3a:6d:
de:69:d4:7f:90:60:c6:e2:d2:ee:65:eb:d0:13:d4:01:51:9e:
75:8c:fc:4e:9f:49:52:08:1c:0d:eb:40:df:d8:cd:2a:aa:66:
65:49:83:90:0b:3e:51:89:b8:09:3c:3a:35:7e:78:8e:9e:9b:
61:bf:47:35:4a:d1:96:ad:c5:d7:ec:03:8b:88:59:5d:4b:ff:
47:82:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:37 2026 by rpki-client