Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
File: PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft (raw, json)
Hash identifier: trX4870wpcsfkjSH68LyrQ8N1vVpDtrZatepp+GaFpA=
Subject key identifier: C3:E2:5E:46:CA:1A:57:B0:0A:18:90:B7:AD:C5:66:F3:F1:AB:50:4F
Authority key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
Certificate issuer: /CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Certificate serial: 01A0D45DF726B6058589C47F58BE5F9E5B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 17:02:02 +0000
Manifest this update: Thu 24 Sep 2026 17:02:02 +0000
Manifest next update: Fri 25 Sep 2026 17:02:02 +0000
Files and hashes: 1: PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl (hash: sA9DepMV9qSQwMJ5w71kG9DLYTzWa8cLvPpeu3PvujU=)
2: jqrp4A2XhAiKpWgKz5AERQNPI2k.roa (hash: W7kzwYJcoOuticaS4HLbtKGL58iB45UYEoKBlIElr8o=)
3: oX-OGfjLClnMbhsOGADApxVNIMg.asa (hash: y/gF4Kes5UJIvpD5HboyFiUaBsGfj0UIbH39vBX7Shc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:f7:26:b6:05:85:89:c4:7f:58:be:5f:9e:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Validity
Not Before: Sep 24 17:02:02 2026 GMT
Not After : Sep 25 17:02:02 2026 GMT
Subject: CN=c3e25e46ca1a57b00a1890b7adc566f3f1ab504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:30:af:01:58:a3:87:dd:39:4f:8c:91:1b:
eb:05:e0:f8:4c:36:4b:f4:e0:91:9a:a7:53:69:01:
e5:65:13:98:d0:92:17:1d:19:15:82:d1:7c:e0:d7:
3a:57:74:07:e0:0a:13:25:92:f9:a7:a7:c0:3c:ac:
83:62:30:58:e3:e0:cc:7c:92:07:60:de:5d:04:21:
09:a1:51:b0:14:77:22:d3:d0:c6:2b:78:34:be:c1:
eb:f5:de:05:f5:82:4c:91:6b:37:a2:e9:ec:e9:8e:
f5:6a:87:2d:ec:57:4b:ee:65:ce:11:15:90:53:1d:
16:3e:63:c6:96:e4:b2:e8:e2:bb:6c:a9:55:e7:79:
f4:b7:df:90:07:1f:d0:18:d3:29:b6:cd:77:fa:23:
d9:66:70:d7:d0:4a:3a:c9:b3:bd:61:d6:ce:02:a5:
a3:aa:e1:c6:49:86:f6:14:7e:51:9d:fe:6f:f4:25:
a8:d1:c5:60:37:f6:ae:1a:da:b3:99:1b:c4:c3:c8:
8f:3a:21:c2:e5:89:2a:c4:e6:33:67:59:e8:1a:9c:
20:16:ce:1a:18:78:60:ac:4f:0f:2f:9a:01:00:64:
c5:35:04:f7:61:d9:f3:d3:34:c1:84:2b:4c:83:c1:
da:eb:c0:33:41:2b:42:ab:d4:bc:1e:5e:d3:86:18:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:5E:46:CA:1A:57:B0:0A:18:90:B7:AD:C5:66:F3:F1:AB:50:4F
X509v3 Authority Key Identifier:
keyid:3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d8:87:39:3c:18:c8:30:94:d9:d2:32:7b:94:fe:4d:c1:3c:
e1:1b:73:96:37:30:09:67:46:5c:af:df:02:7f:42:21:01:02:
3c:4c:30:da:ee:79:45:57:61:98:85:d0:50:0b:49:e6:6d:a7:
35:09:09:54:95:40:00:56:2f:9d:7f:a8:6d:83:a6:4c:9b:a0:
bc:ec:3c:a6:af:0f:5a:2f:33:4e:93:02:11:d0:c1:cb:e6:5e:
6f:32:22:00:1b:87:33:ce:9b:63:8f:4a:52:5f:16:d2:65:b2:
d0:71:8f:2d:a0:af:28:09:46:3d:1c:fd:6a:5a:09:1c:07:e7:
1e:ba:78:df:27:cc:0c:72:76:52:1b:b8:22:62:b5:78:27:01:
a6:0d:80:32:08:c9:06:cb:29:22:1e:4c:f0:17:05:9a:0b:73:
b4:0d:6e:eb:4a:34:9a:e9:d9:d8:56:17:35:3b:7a:bc:3d:46:
34:bc:ec:1b:cd:fa:1a:f0:14:14:4a:bf:47:8d:5a:45:93:85:
e0:7a:e9:45:b8:f0:b3:3d:dd:be:e1:20:f8:df:ae:99:49:b5:
a0:4d:15:98:11:09:1d:4b:94:9a:d1:5d:d4:d6:bf:3a:cb:c2:
e9:c9:55:86:ad:d1:04:42:31:b3:db:bf:f3:c3:73:5d:06:6d:
ca:3b:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:49:44 2026 by rpki-client