Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: pLyFiIyFhA61C8/+vrhgenzc+LQE+F37Regb8ibcsH0=
Subject key identifier: 47:BD:6C:15:93:B5:7B:07:1F:A7:91:69:A1:95:8F:4D:83:32:99:50
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019D2A72DA87222CC1B11FDDF306204DE35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 06B5
Signing time: Thu 26 Mar 2026 14:01:03 +0000
Manifest this update: Thu 26 Mar 2026 14:01:03 +0000
Manifest next update: Fri 27 Mar 2026 14:01:03 +0000
Files and hashes: 1: Kjlpy0uZoHJkclrGbsxI7LzDTQ8.roa (hash: 0z6/PsejZa1lGmMq31n1RdPDmTfr5YeDjwNglhdjlQ8=)
2: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: jjfj8Sb2VZWq+YTs8Rp5YCS+FkaJx8iTOWuPQGd+kCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:da:87:22:2c:c1:b1:1f:dd:f3:06:20:4d:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Mar 26 14:01:03 2026 GMT
Not After : Mar 27 14:01:03 2026 GMT
Subject: CN=47bd6c1593b57b071fa79169a1958f4d83329950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:2c:66:2f:ef:47:fb:67:d0:a2:f7:b9:41:
9c:43:34:e9:4d:35:22:ad:4e:bb:95:e0:96:81:de:
5a:63:c8:aa:5f:8f:e7:3e:b7:58:1a:65:f6:ff:e2:
7a:1b:6b:fe:55:96:20:ce:ef:a8:7f:09:bf:c0:14:
95:cd:54:20:6f:5c:fa:20:4a:c9:8c:d4:93:e2:b2:
07:f3:06:ac:45:0a:63:81:57:92:a8:25:d5:31:67:
17:ee:e7:39:06:76:a9:99:3d:21:e4:c5:8d:1d:1a:
f0:f2:29:8b:0a:25:73:d8:dc:3d:34:81:4b:dc:c8:
38:a8:f8:0f:7c:6b:ee:6f:8e:a4:ea:bc:91:93:44:
93:20:48:db:fb:b5:29:4c:6e:49:a8:be:54:65:bd:
33:5b:ea:56:d2:50:eb:32:1f:61:f7:12:55:f9:60:
93:ca:c6:5a:b0:86:b3:33:ed:45:74:6c:e9:45:03:
4f:9b:1c:63:cf:34:ab:7c:89:81:4c:49:0b:3e:67:
79:5a:4a:4f:f3:cf:ff:31:34:59:18:32:04:d4:2c:
0d:64:ad:d7:6e:b9:66:7a:41:5b:d5:48:32:ee:b9:
00:33:19:0b:47:15:73:74:df:29:f5:12:15:de:97:
34:54:92:c9:68:53:38:44:a6:7d:82:5b:98:89:4e:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BD:6C:15:93:B5:7B:07:1F:A7:91:69:A1:95:8F:4D:83:32:99:50
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:08:c2:0b:f6:e5:80:48:4e:f1:1e:95:a3:95:de:c9:da:e3:
f4:82:6f:f6:cf:c4:1a:d8:ef:fb:4b:41:8a:d2:95:3e:5b:52:
84:f6:ba:3d:6a:2c:4b:a3:42:1d:b6:cf:22:97:4a:e1:c2:8b:
80:75:e1:73:f9:d6:68:95:be:c6:4b:13:f9:35:68:af:4b:dc:
6f:91:33:0f:b9:b9:76:86:ac:6f:f7:79:74:98:79:bf:e5:19:
a2:c5:b1:22:d2:cd:7a:d7:e7:63:97:ff:7c:43:53:25:69:ce:
a3:b7:c8:5f:d5:c2:f6:73:22:98:92:af:9f:82:17:11:8e:08:
73:35:94:96:b1:8b:99:13:3f:7c:b6:ab:79:7a:d4:fc:b6:a5:
cd:17:3e:fe:e7:3d:f5:c8:5a:6b:25:69:c4:5b:dd:43:0d:9c:
d7:18:3d:f1:d7:9f:26:06:76:1e:33:65:a6:5f:4a:e3:a5:ab:
f1:a8:cb:19:70:d7:ae:59:04:8f:5f:b0:3c:f4:a8:63:f0:c0:
42:81:56:fd:62:d2:66:a3:25:9a:b4:3d:e9:d5:12:df:83:eb:
2f:da:65:14:12:cd:b9:e7:b9:20:27:c2:ed:87:38:03:2a:fc:
3e:a3:e6:a6:3a:22:1f:68:8e:99:89:01:5c:ed:9a:58:e3:2f:
58:3b:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:27 2026 by rpki-client