Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
File: PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft (raw, json)
Hash identifier: aNV1RvHVPGySoOVX3u4e8nZayWzu3usx/B7215zcfpk=
Subject key identifier: 7E:24:41:96:2C:26:8C:C9:BD:F6:83:5B:18:CB:C5:D3:35:C3:23:1E
Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Certificate serial: 01A1046DE621AF232EE3F3F1D04EA346767D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
Manifest number: 1A83
Signing time: Sun 04 Oct 2026 01:01:13 +0000
Manifest this update: Sun 04 Oct 2026 01:01:13 +0000
Manifest next update: Mon 05 Oct 2026 01:01:13 +0000
Files and hashes: 1: PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl (hash: Fp32p4EU4IiZFYhMyi2o40BYugXx7NfEZDmBsXQJY+I=)
2: aG1wC2y3Q6pluT4bomzfriW6qO8.asa (hash: y5OiOJ4JCn8oykPDM8IMuk0COHtj+uOEVrLwak92ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:e6:21:af:23:2e:e3:f3:f1:d0:4e:a3:46:76:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8
Validity
Not Before: Oct 4 01:01:13 2026 GMT
Not After : Oct 5 01:01:13 2026 GMT
Subject: CN=7e2441962c268cc9bdf6835b18cbc5d335c3231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:7d:e9:d6:a8:2a:07:8e:7b:90:76:da:55:
f0:ea:4d:b5:0a:4d:e4:8f:bc:92:31:8e:7d:90:bc:
42:a9:92:6f:3b:e0:5c:c7:4a:a2:a3:70:d2:39:c4:
af:9c:af:0f:ca:6a:b5:5a:55:f9:ed:f4:9d:dc:8b:
40:58:80:50:90:45:c7:1d:d5:78:e0:69:10:94:5e:
ad:c3:d9:13:47:69:76:62:e0:4b:6e:f5:f8:1b:35:
7b:ff:a0:5a:b6:81:a9:68:73:da:70:ec:fe:c5:a4:
bf:bd:b2:4e:d9:e3:cb:ea:c3:b2:d6:8c:7f:27:e4:
38:67:57:ca:08:0f:8e:36:1d:de:13:cf:6f:dd:c8:
b1:25:75:d8:9d:da:6c:fe:f4:94:b0:63:5d:be:22:
d2:cb:2f:3a:a4:f0:42:92:03:92:a1:50:93:5e:16:
66:a7:c2:1c:d6:0f:18:f2:bf:56:25:ec:6c:58:1d:
b7:3e:53:36:b5:16:a3:c0:85:a0:18:3a:53:1d:5f:
9f:61:e4:e0:43:0a:e0:ca:79:5e:28:c8:51:f0:e9:
4d:84:ee:6f:3d:db:5c:eb:af:8f:ee:24:f9:26:b8:
e6:38:65:ff:cb:cb:bc:cf:ef:28:b8:53:4f:c1:00:
9a:b9:e5:5e:05:86:b7:b6:19:95:e2:7e:a8:f8:3c:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:41:96:2C:26:8C:C9:BD:F6:83:5B:18:CB:C5:D3:35:C3:23:1E
X509v3 Authority Key Identifier:
keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fc:21:f0:3d:08:d5:f8:42:5b:63:dd:a2:4c:59:42:db:e6:
83:d1:60:f7:e1:d4:43:80:b3:39:98:7c:05:c1:14:9f:16:0b:
bb:ce:88:68:6e:6b:26:72:39:bd:1c:e6:68:08:91:31:65:86:
91:c7:7b:4a:d7:0e:52:44:e8:8e:ec:da:2c:94:a6:77:65:31:
b1:cd:ec:4a:35:8c:1d:92:c7:ce:dc:08:26:ac:a8:da:26:b0:
9f:6c:8a:b6:fd:51:14:e1:01:0e:38:63:5f:ad:6c:fe:30:f2:
97:43:39:96:78:77:f8:f4:e7:e1:62:ad:d6:c3:34:9e:83:83:
13:b0:e2:c1:9e:df:81:93:db:22:aa:1c:27:bc:ba:17:4f:23:
ed:bb:a1:4d:3c:38:24:24:24:6b:f4:2b:bc:5c:9a:4b:5c:be:
11:db:35:b5:c5:ff:94:3d:d1:49:d5:80:f8:2c:21:9b:e4:85:
ba:a0:1b:78:5f:b5:a5:60:95:b9:e5:47:29:26:83:0d:5f:9a:
2c:4d:1f:60:e3:e6:9f:91:f9:f5:36:87:8f:d3:49:f3:7d:c6:
74:07:94:8e:d7:75:44:8a:1d:50:63:4f:58:d9:3e:f4:cf:4d:
17:6a:58:f0:8a:f4:cf:be:4c:4f:1f:38:70:b6:52:03:cd:34:
60:c6:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:06:26 2026 by rpki-client