Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
File: PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft (raw, json)
Hash identifier: xKJVXA+08dk5D/xbRthl2AwcSSIcRqLmy1vRBR/cijs=
Subject key identifier: E3:D7:38:06:26:BF:29:CB:2E:08:27:B0:54:C8:87:B8:AB:6A:4D:08
Authority key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
Certificate issuer: /CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Certificate serial: 019F8FEBF67B641357769F84E49E74CDF8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 17:00:33 +0000
Manifest this update: Thu 23 Jul 2026 17:00:33 +0000
Manifest next update: Fri 24 Jul 2026 17:00:33 +0000
Files and hashes: 1: PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl (hash: 4YFGIARB06rxE3gg1dsuuZNuPS3FbgD4upSp3eKR/mc=)
2: jqrp4A2XhAiKpWgKz5AERQNPI2k.roa (hash: W7kzwYJcoOuticaS4HLbtKGL58iB45UYEoKBlIElr8o=)
3: oX-OGfjLClnMbhsOGADApxVNIMg.asa (hash: y/gF4Kes5UJIvpD5HboyFiUaBsGfj0UIbH39vBX7Shc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f6:7b:64:13:57:76:9f:84:e4:9e:74:cd:f8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Validity
Not Before: Jul 23 17:00:33 2026 GMT
Not After : Jul 24 17:00:33 2026 GMT
Subject: CN=e3d7380626bf29cb2e0827b054c887b8ab6a4d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:65:46:a7:24:6c:a2:4f:79:26:b8:75:15:
7e:c5:60:1d:b5:ec:cd:7c:4a:fd:23:43:de:be:05:
18:cf:a2:fb:70:c1:1e:31:c1:dd:2b:1f:9c:9f:87:
a3:a6:e6:e3:dd:14:89:21:4f:9f:c1:c7:b0:4d:93:
97:39:f9:7a:ae:18:ea:31:48:54:26:0e:d7:01:bb:
74:b2:fe:fe:91:31:10:94:e8:e9:cc:32:24:bd:ea:
0d:4c:d0:b3:9e:cd:1d:09:21:3c:35:d0:f4:8a:33:
84:93:63:8d:be:94:e7:8b:40:15:0d:fa:4d:21:bc:
bd:9c:bd:0d:80:5b:eb:11:14:49:3f:07:65:c2:32:
05:3c:16:98:f3:85:3c:b3:ff:d6:1c:fe:3b:11:92:
3f:5f:39:4d:d7:20:60:32:08:49:f1:4f:73:bd:cc:
d4:b2:b7:ff:99:e5:72:92:77:51:57:f8:ad:82:93:
8c:30:db:25:54:9f:5c:85:bc:15:19:da:aa:de:68:
4a:94:95:19:ec:67:a5:43:a2:f5:d2:9f:a5:11:0b:
2f:bc:37:43:8c:8d:8a:c3:ea:20:52:15:f1:cd:05:
38:26:53:20:10:a6:27:dc:16:e6:ac:06:8b:e8:1b:
58:86:f5:c5:be:48:03:fe:bb:7c:b0:24:c4:0b:d3:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D7:38:06:26:BF:29:CB:2E:08:27:B0:54:C8:87:B8:AB:6A:4D:08
X509v3 Authority Key Identifier:
keyid:3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:32:3c:ef:25:d8:23:c7:0a:7f:ee:84:94:da:21:91:20:78:
18:02:7e:33:78:22:f7:99:bd:81:a3:15:7f:92:05:95:0c:1b:
97:5a:c8:91:28:1a:94:d1:67:e8:d8:43:cf:99:98:f7:92:3f:
bf:04:cb:e3:25:1e:1e:2a:4c:64:84:bd:2f:70:bf:52:50:52:
f3:ad:3c:8b:80:93:fb:96:91:c7:71:98:7a:14:08:7d:d3:87:
78:69:aa:af:54:e3:40:60:79:a4:8b:06:24:a7:d0:4c:fd:25:
b2:b1:d1:44:cb:ee:dd:65:c0:b5:e5:0d:2c:ba:5c:8f:08:ec:
12:36:c1:e6:91:ff:f8:45:e2:17:e7:70:22:59:3a:06:f9:5e:
16:2a:17:c4:e0:77:ea:85:f5:82:7e:eb:86:40:4f:e2:ba:da:
bc:a4:6d:a2:0b:4f:b5:11:36:d5:d3:f0:ec:1c:95:e5:33:77:
6c:76:b9:df:7a:35:1a:cf:a8:06:9a:2b:50:7c:c9:fb:7a:18:
16:76:fa:29:15:b9:7f:28:db:f7:8b:e2:25:59:d6:65:a3:d1:
f6:27:7a:dd:b2:fa:f8:bf:39:d4:f1:73:8d:b8:09:72:10:6e:
e3:96:54:8f:57:92:b6:19:4c:1d:9b:f0:6f:16:c1:0a:22:24:
11:63:e5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:51 2026 by rpki-client