Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: vYKvk3VFvUxKR8GUyk6fVpJ99WUcQ7AEIZuB5FYZXv0=
Subject key identifier: 11:CD:F1:38:42:61:58:02:79:00:2F:E3:C8:21:8C:2B:7C:26:34:6D
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 01A11C75A1B6C13B5E9D8991EC9AA0A331E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 08C0
Signing time: Thu 08 Oct 2026 17:00:33 +0000
Manifest this update: Thu 08 Oct 2026 17:00:33 +0000
Manifest next update: Fri 09 Oct 2026 17:00:33 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: wGzfHbPPjEgfgpwj/XQxDn6UwpJCiAcXAkY9ZxBNVoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:a1:b6:c1:3b:5e:9d:89:91:ec:9a:a0:a3:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Oct 8 17:00:33 2026 GMT
Not After : Oct 9 17:00:33 2026 GMT
Subject: CN=11cdf1384261580279002fe3c8218c2b7c26346d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:d1:eb:71:2c:0c:a4:87:0a:01:2b:42:64:
66:4b:f1:bf:91:bf:92:d3:30:d2:ff:fa:4c:41:e6:
0e:92:25:7b:9d:80:91:da:94:b7:4a:af:f1:32:28:
8a:86:e9:72:ac:51:1f:f0:95:e2:8b:93:1f:df:85:
7b:82:81:aa:43:96:58:63:d7:04:4d:1d:11:dd:3b:
97:87:9e:b0:0f:fe:62:7f:7a:a5:fc:05:5f:48:02:
3b:b8:3a:bb:99:73:98:e2:b5:d7:af:65:ad:35:07:
fc:4d:33:fe:43:0e:10:7c:db:ca:90:ce:36:c9:cc:
e2:47:35:2c:67:4e:a7:8d:e7:b4:4b:88:80:1c:0f:
2f:e8:01:e8:f8:1a:e5:48:f7:0d:30:29:6f:51:10:
d7:83:be:53:36:f9:0c:a8:68:4d:c8:7a:85:5b:59:
48:22:18:fa:dd:ee:be:8a:bf:1a:18:14:54:2a:be:
7c:b3:cf:4c:ae:89:ac:27:47:4f:f7:be:35:8f:ae:
26:4c:9d:be:08:7e:9f:63:36:da:77:e6:99:35:a0:
cb:54:f6:b8:ee:7f:c1:ec:ad:3f:ca:46:b7:37:a7:
f5:1f:53:ac:87:24:3e:02:ef:fa:c7:74:70:82:77:
c4:57:67:b1:02:cb:36:d2:a0:0c:02:cf:30:af:a7:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:F1:38:42:61:58:02:79:00:2F:E3:C8:21:8C:2B:7C:26:34:6D
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:16:6c:ce:d8:73:d9:6d:c8:78:cd:bc:05:76:12:13:3c:bf:
58:9f:9f:a0:ea:77:df:53:9a:87:63:dc:ff:0d:4d:d8:e2:d7:
81:a9:e4:2d:5c:44:03:61:a1:37:ac:a8:d0:b4:bd:ea:19:e4:
65:80:78:8a:65:5e:b5:ad:37:0a:e2:5e:c6:cb:2c:92:45:86:
7d:c7:41:b1:b3:3c:a5:5c:d7:8c:4c:d6:4d:fb:3d:0e:cd:b2:
ad:39:bb:d9:f9:9d:43:a8:f9:38:69:cc:d4:e4:3f:9f:55:86:
fb:84:9b:04:6e:83:c1:4c:1e:f7:51:56:2e:18:3e:17:4d:ea:
8d:25:ce:8b:51:77:08:5f:60:ef:0d:94:04:03:e0:8a:cb:e3:
60:ff:48:0e:46:db:c0:6e:73:13:3a:aa:e1:c4:9b:8f:41:61:
58:f9:28:fe:43:96:2a:17:5e:52:df:df:e6:d8:0b:da:34:26:
57:0f:6f:35:72:ff:34:de:ed:2f:65:c7:1e:5f:38:13:d5:1c:
f1:d4:a1:f9:31:eb:34:67:33:bd:10:da:eb:54:f4:85:50:17:
c2:c1:72:df:9d:27:06:48:92:25:2e:2f:d6:6f:7b:97:35:d6:
a2:d6:f8:53:78:e3:85:24:8b:80:34:7a:83:50:18:3b:68:94:
05:4b:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:13:16 2026 by rpki-client