Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: rxInAlvDH4cst8RZZPJEEksk2iBkEQPPwDGpP71q+8E=
Subject key identifier: 9D:D7:20:77:57:0E:2A:06:9E:C4:A8:0D:A9:B5:1E:06:56:24:C1:75
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 019D26963064335016793FD875F62E8C6D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: pewS7jy6L6OIuyKOY/RzAhIU3aFgEY73X0C1wlaJ/IA=)
2: p8BGzkeZTXu6qLWOB4ZXBUN3ORs.roa (hash: OVtfVKdOOl/LSMO1Y47imdhBsBHfrXhcCR6Y3Lh7Lwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:30:64:33:50:16:79:3f:d8:75:f6:2e:8c:6d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=9dd72077570e2a069ec4a80da9b51e065624c175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:6a:a0:a3:ef:65:3d:83:d6:a1:bb:df:c4:
c6:f3:a6:14:61:cd:8b:56:c3:00:c6:9b:34:76:0f:
67:98:66:66:d3:b3:97:f7:07:a4:d8:b8:b9:cb:7c:
bf:b3:84:6c:ab:51:0c:51:9b:8a:ff:12:a0:c2:9f:
b5:92:3f:93:03:68:f2:8e:ff:f0:d3:bf:1e:6b:27:
9d:67:c6:43:c7:57:58:b1:8b:ee:7b:91:c5:1f:5f:
36:77:94:6d:a3:05:8d:bc:8d:f7:29:44:93:d4:08:
94:de:d1:b5:8c:91:3f:3d:ed:9e:d0:d8:a6:72:9f:
df:1c:cf:94:07:cf:5c:3b:96:96:4f:25:2c:29:07:
09:65:5d:0d:2c:28:23:d3:81:27:ac:87:38:bf:db:
92:87:1a:80:e1:45:8b:73:2f:c4:98:8b:83:df:bd:
c6:7f:c1:59:3d:6a:78:05:a5:87:e7:76:56:ce:b4:
ca:a2:ed:78:17:32:f3:b4:01:b4:64:41:39:15:47:
2b:8a:23:1c:ce:85:4d:a3:2a:d5:32:45:3c:bb:55:
f0:ac:3d:95:de:ed:a6:84:a1:94:e8:33:41:5f:a6:
4f:22:01:6f:3f:bf:a7:9a:75:0c:6b:a5:0b:ae:b2:
b9:c6:4e:10:16:c5:ed:62:b7:68:db:1a:6a:48:48:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:20:77:57:0E:2A:06:9E:C4:A8:0D:A9:B5:1E:06:56:24:C1:75
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:04:dc:d3:a0:72:36:a3:2a:92:a5:56:3e:6b:73:99:e3:74:
5b:e2:d4:7a:95:8d:3e:6a:6f:24:87:19:8f:b4:d1:d5:70:ef:
3a:75:37:a7:a1:3b:48:18:2c:5d:a0:c2:8d:1e:8d:0c:a8:6c:
40:b1:75:a5:4a:c5:67:34:c1:67:5a:c8:e8:8a:66:de:67:01:
bb:05:f8:f5:b8:e4:61:44:ee:3e:9f:3d:ec:79:4d:cb:49:bd:
57:8e:99:57:5d:5a:df:86:08:89:88:9d:8f:f0:b4:cb:30:27:
ee:d1:fd:6c:b4:e3:46:5f:0f:55:ba:49:a8:04:5d:cd:46:f3:
fb:5a:9c:e6:99:46:e7:89:bf:29:ce:86:87:df:2c:e9:23:a6:
12:de:82:2c:a4:1e:63:d1:7a:81:48:01:7a:9a:93:b3:27:7c:
f1:ff:25:05:08:71:68:82:df:84:60:aa:de:48:b4:04:17:ad:
b2:ea:48:9b:b0:0e:15:3b:c9:c0:ea:cc:e8:05:ab:3d:38:82:
da:0f:93:e3:6c:65:da:e7:60:00:c9:31:17:97:c1:15:02:21:
bf:30:d5:f2:cb:50:8f:d9:88:8a:94:ae:2a:92:ef:09:a3:24:
8f:01:30:5f:2f:19:45:50:70:33:64:a5:5f:97:57:d5:26:b2:
86:7b:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:03 2026 by rpki-client