Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft (raw, json)
Hash identifier: 4r+RWf5CQlXqawPcYyrKz9PkjaIyXZNkCzmAGdbvRN0=
Subject key identifier: 5D:C6:0B:46:38:E5:05:A7:AF:25:83:3C:5E:FC:9A:18:3F:45:00:9E
Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Certificate serial: 019F93918E29F68CB5C371C241B6F4CC9D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 10:00:17 +0000
Manifest this update: Fri 24 Jul 2026 10:00:17 +0000
Manifest next update: Sat 25 Jul 2026 10:00:17 +0000
Files and hashes: 1: PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl (hash: HehoabJPT949j59Fk51KNcFKsRxO/8UNvVf7+d5IU9M=)
2: aG1wC2y3Q6pluT4bomzfriW6qO8.asa (hash: y5OiOJ4JCn8oykPDM8IMuk0COHtj+uOEVrLwak92ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:8e:29:f6:8c:b5:c3:71:c2:41:b6:f4:cc:9d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Validity
Not Before: Jul 24 10:00:17 2026 GMT
Not After : Jul 25 10:00:17 2026 GMT
Subject: CN=5dc60b4638e505a7af25833c5efc9a183f45009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:e7:12:41:ac:10:bf:ad:03:10:ad:53:c8:
81:97:a4:d2:b7:de:54:08:b2:ef:84:69:75:8e:37:
6e:a1:28:9a:e7:00:04:50:1a:5d:31:41:b9:d0:0d:
3e:34:4e:09:d8:b5:2e:bb:32:62:47:a7:19:4a:b6:
7a:87:a2:67:c0:69:48:39:af:f5:1c:aa:6d:48:9f:
dc:98:0b:2b:95:a6:63:e2:6d:9f:fa:9f:d0:98:e4:
33:3a:c9:43:51:d9:84:10:db:22:a8:83:7c:4b:f5:
a1:e9:ba:a1:42:be:ec:21:f9:1f:ad:ea:2f:24:bd:
72:d8:90:21:05:19:88:04:98:b5:0f:cc:aa:f0:1d:
05:f3:8f:84:f4:40:37:6d:4f:65:22:11:30:09:8b:
63:ec:9a:d0:fa:2e:32:87:d6:c1:e0:4e:2f:aa:a9:
aa:fa:cb:9f:1b:5d:d8:18:f8:4b:bd:62:6f:fc:73:
7a:01:8e:8b:05:2d:14:50:c5:ad:5a:ea:1b:0c:f7:
e9:03:ee:20:93:99:2c:d6:57:c3:d2:a4:1e:04:84:
00:ed:91:6c:ac:48:74:4f:7e:66:25:2c:7b:53:2e:
9c:c2:e9:16:84:a1:a4:c9:4d:61:ec:a6:ef:72:0d:
a0:a5:a1:a7:68:be:77:09:b3:af:c7:93:15:a9:ae:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:0B:46:38:E5:05:A7:AF:25:83:3C:5E:FC:9A:18:3F:45:00:9E
X509v3 Authority Key Identifier:
keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bc:6d:85:2e:49:b8:d5:73:e1:28:88:ee:48:a9:d9:8e:be:
10:ea:74:2a:e6:d5:84:6b:c5:9c:d4:7a:e4:1e:77:0f:d6:8c:
3e:1c:5e:e4:97:91:5c:b2:5a:5b:94:f3:97:3b:80:72:10:d5:
7f:3f:46:09:4e:25:9d:81:23:3f:c5:11:22:13:5d:c7:f2:f6:
e5:e3:13:16:9e:9f:e2:e7:a0:ff:bd:e0:57:13:be:fb:f5:70:
a8:b7:96:78:6b:91:70:61:13:62:73:10:de:36:cf:5b:65:64:
90:76:22:e4:b7:fc:74:ac:ab:bf:d2:26:fd:2b:fe:c5:a7:f9:
b3:54:83:a2:98:0a:e5:31:88:c0:8b:e7:ce:e0:90:17:b8:e5:
20:b5:48:e4:aa:c9:1a:a0:27:d9:36:c7:85:45:1e:e9:9f:2f:
6d:78:1a:d6:f9:72:d9:02:51:09:d3:54:1e:54:94:a6:df:e9:
5e:6c:fb:4f:22:f0:74:f1:a9:96:ce:d0:6b:39:5a:6f:7a:27:
d0:c1:23:bf:5b:1e:43:02:3e:e2:d5:3d:1c:58:c2:13:67:69:
5d:49:61:72:f0:25:fe:ca:a6:4a:72:cd:16:e1:a8:a3:d6:95:
72:b6:a8:6b:58:8a:13:5b:ac:45:69:2b:2d:72:56:8e:5e:1d:
86:d8:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:41 2026 by rpki-client