Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier: 0ZL71B5paVZlRXPg1snT+ZyKiI+p2eWxBE4sgN+oXSo=
Subject key identifier: 7A:BB:89:07:F7:7C:3A:39:E8:37:91:C8:A3:5A:95:5A:85:D3:E5:C3
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 019D273ABC96926EEDC619BF3F497FFD0B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number: 10CF
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: o0qSKpwUkJ6VRCpSerTdsi2cH7i5al1034fww6lmuXQ=)
2: xHv2_HdEJG5Cfvg9tYmqVThQtwc.roa (hash: Nxypi5IV+neWqZvzXksjBejqnOVHDrNcZpixogm0gqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bc:96:92:6e:ed:c6:19:bf:3f:49:7f:fd:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=7abb8907f77c3a39e83791c8a35a955a85d3e5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:52:8f:ee:b2:4c:e9:2b:76:88:49:61:9e:
46:50:4f:a6:6b:56:34:bd:f3:fb:f1:82:ca:db:60:
64:01:fb:c7:b3:51:18:31:4f:18:57:df:71:c3:9f:
bc:48:92:fb:b3:f8:ec:01:96:af:14:0d:2f:ec:24:
ef:4e:df:11:30:72:bc:d4:76:f0:ce:1b:55:4d:6a:
70:25:4b:b4:80:d8:7f:62:15:69:97:75:c3:a7:b2:
3b:f1:87:e1:8c:c1:25:ec:33:58:b2:ad:7a:5f:8f:
31:91:c8:d7:80:19:8d:f1:1c:ee:e3:9d:78:b0:d0:
cf:0b:83:b8:d7:cf:9f:93:4d:2c:d2:bb:a1:76:6b:
63:1f:ab:d7:0f:59:64:18:70:53:2e:cb:1e:9e:0c:
0b:cd:44:93:57:bd:c1:fa:c5:73:3d:c8:4c:e2:4b:
e5:88:66:55:a0:6b:af:d0:68:9e:89:d6:bf:89:fa:
b4:2a:59:8f:4d:71:5b:3a:24:02:b5:a8:66:83:43:
cd:ab:cc:91:0b:d1:21:f1:d5:7d:7a:dc:7e:f7:bb:
a7:31:1b:88:44:91:84:92:82:1b:0c:44:18:06:18:
63:4f:f1:f8:62:5d:8e:58:ac:22:6d:ec:9d:1f:7a:
7d:16:ea:73:5e:72:e0:5e:be:22:58:82:73:12:ab:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:89:07:F7:7C:3A:39:E8:37:91:C8:A3:5A:95:5A:85:D3:E5:C3
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:f3:a6:b1:5c:21:17:d7:88:1a:30:85:56:b2:1d:3a:f1:
d7:7c:b8:d0:52:f4:ee:22:23:ab:a0:0a:87:03:7e:51:77:39:
b5:09:ab:94:05:c8:b2:d9:cc:bb:b6:19:50:3e:d1:1d:a4:dc:
7e:06:9e:95:3f:9c:8c:66:cf:b9:1a:50:07:25:d7:86:c7:e0:
f5:e9:6e:79:75:fb:5a:2c:18:5e:60:0f:32:a5:05:e0:84:7a:
5e:a5:ec:39:1c:d7:7f:de:8d:83:77:31:f5:6a:86:ce:8c:77:
6b:c5:db:51:b5:c0:7b:91:ef:5b:ad:95:93:59:97:65:f3:f8:
11:74:57:d9:2f:76:e7:35:51:92:da:3a:ae:ab:87:30:20:ec:
d6:a1:a6:ee:89:1e:fc:c4:30:28:57:a3:10:14:31:71:cd:1a:
e6:b8:5c:d6:d5:13:6d:9e:0a:b7:ed:8e:fd:d3:32:0f:ad:85:
91:39:b6:57:f1:1e:f5:bc:12:60:7d:5b:61:ef:33:79:50:bb:
8a:37:ba:b7:b7:df:48:1c:38:b3:14:3a:66:25:36:18:58:aa:
c5:1c:9f:61:b0:36:af:b6:a4:2d:90:d2:ca:e9:33:57:79:1a:
8b:30:e4:af:52:e8:59:78:7d:d1:5b:5c:5a:fb:04:8b:a4:c6:
b3:86:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:07 2026 by rpki-client