Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: gpACQCFxfnNxTD/FpDIpp20ed0QeVZ2jrPJ9PfDpG4w=
Subject key identifier: 8E:36:9D:C3:E4:EC:2E:58:48:74:EE:E0:00:AC:96:F7:6A:14:31:C8
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019F965C1794B0E6874465D43282D9E839BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 07F6
Signing time: Fri 24 Jul 2026 23:00:45 +0000
Manifest this update: Fri 24 Jul 2026 23:00:45 +0000
Manifest next update: Sat 25 Jul 2026 23:00:45 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: Ofevxj9af0mfGW9CbznDJ0MnkBEAufGXN4MGdlsU1lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:17:94:b0:e6:87:44:65:d4:32:82:d9:e8:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Jul 24 23:00:45 2026 GMT
Not After : Jul 25 23:00:45 2026 GMT
Subject: CN=8e369dc3e4ec2e584874eee000ac96f76a1431c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e5:63:c1:42:bb:b3:f4:38:5f:d2:5b:72:47:
32:a3:0b:b3:8e:3c:fb:71:09:c9:64:ac:24:42:18:
12:cb:0b:17:54:ef:0c:d4:8b:85:58:fd:3b:2b:38:
11:03:3d:33:18:98:7a:2f:e2:7a:06:be:64:59:fd:
eb:28:05:ff:0c:fc:30:c8:eb:51:35:65:69:9a:96:
18:15:e2:0a:7d:66:f8:f4:51:3d:ea:70:5f:1f:93:
7e:16:cd:f8:4e:c6:22:53:0d:c2:01:f7:48:a0:b7:
32:bc:9e:e3:6b:46:91:eb:80:f5:ea:72:fd:c2:15:
13:54:e7:7b:87:7c:db:de:e2:a7:c8:d9:60:0d:b3:
eb:55:86:63:f6:d7:17:c0:06:b3:b7:0d:4c:36:0a:
8b:2f:02:52:4e:cd:58:04:3e:bd:d9:22:1b:38:3f:
44:64:d8:e6:19:f9:3c:21:31:2d:aa:c4:55:8c:58:
4f:94:ca:fd:29:94:cd:b7:05:c0:ad:fc:eb:68:ab:
18:ba:ef:a8:8d:6a:b7:05:10:d5:c2:8b:f8:50:75:
06:64:6d:7b:dd:a4:98:10:8a:57:01:4f:e9:f1:87:
10:c6:d5:38:79:fb:52:2a:b0:da:20:4a:1e:dc:a8:
ec:29:54:82:67:53:0c:d7:ba:d5:04:c9:8b:85:35:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:9D:C3:E4:EC:2E:58:48:74:EE:E0:00:AC:96:F7:6A:14:31:C8
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:f7:50:7f:72:3c:88:f8:e7:d5:2a:99:bf:a6:28:0d:da:
fe:84:30:cd:0e:69:3c:37:45:39:48:18:67:10:bf:5b:e2:db:
c1:9f:40:cc:30:a4:e7:ca:9a:85:0f:a0:74:4b:24:d0:6a:15:
7c:89:ec:13:d5:df:15:0b:82:5c:1f:c4:77:1e:c9:6b:6b:5b:
34:dd:fe:fb:1c:40:af:fb:60:49:18:5e:c6:d2:ec:5c:67:1c:
42:19:e3:4b:1e:af:4c:a5:f2:bb:7b:2c:24:c6:bb:d0:35:9b:
6c:c9:ba:98:d9:be:2f:1d:16:f1:df:58:5d:5f:aa:6e:21:f9:
75:41:a2:8d:0b:85:de:54:41:8a:6f:6c:13:49:83:82:f0:4c:
c5:a7:95:28:ab:35:ed:7b:63:b0:06:a1:fd:87:5c:21:6b:10:
a3:ad:72:9e:75:47:33:8a:f1:39:2d:a9:91:99:e8:6f:3c:49:
77:c5:f8:ff:67:41:19:34:0b:df:f1:7e:a5:9b:0a:1a:66:c0:
63:9a:7b:0d:57:d2:50:46:d7:55:6a:60:8c:91:30:a7:f8:c5:
b7:ec:b2:c7:96:b0:b2:83:8a:b0:6e:2f:e4:f0:6f:53:00:ed:
a9:87:28:b3:8e:c7:08:36:73:ec:2e:b2:f7:eb:47:19:cb:f7:
3d:a6:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:22 2026 by rpki-client