Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: SMjYuP0geQJdurNnZnAhUDOHUCIZoA9drMIgMCqgmXg=
Subject key identifier: 0D:69:E3:90:1A:21:68:5E:09:D6:D6:CB:B6:FC:32:A5:A2:BA:4E:69
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019F8FEC03F95779C1F40DEA369F61D47FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 19D5
Signing time: Thu 23 Jul 2026 17:00:37 +0000
Manifest this update: Thu 23 Jul 2026 17:00:37 +0000
Manifest next update: Fri 24 Jul 2026 17:00:37 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: MsTB93B6gTEaf52lynAh46DpLnK4s36OhoNgPQvn7es=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:03:f9:57:79:c1:f4:0d:ea:36:9f:61:d4:7f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jul 23 17:00:37 2026 GMT
Not After : Jul 24 17:00:37 2026 GMT
Subject: CN=0d69e3901a21685e09d6d6cbb6fc32a5a2ba4e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:df:24:6d:2d:d7:88:3b:18:60:c3:52:17:
f2:3c:4e:db:fd:f4:db:b4:8d:bd:55:5e:af:52:d2:
3b:0c:a7:11:bb:0f:d8:d0:1c:3b:e8:ac:dd:c3:7b:
76:c4:0f:73:f9:0a:2b:69:d0:c8:d2:02:f0:55:05:
74:b6:75:35:bb:7b:36:b9:29:28:3d:08:a8:2b:54:
d4:15:1b:85:e4:4c:14:66:db:43:5a:6c:ab:56:8d:
ff:5c:e5:e1:a8:df:f9:18:d2:f4:f6:ee:71:66:6c:
94:09:88:99:9b:9f:97:28:62:09:b7:36:54:2d:33:
79:ed:4c:4a:67:20:46:71:9e:bb:b5:c0:0f:5d:96:
41:0b:f4:a0:57:c3:f9:80:ad:7b:d1:98:f8:f5:b5:
97:87:98:ea:9c:4a:20:09:02:bb:3c:9b:11:27:ee:
67:54:de:5b:74:de:d3:bc:8a:8d:e8:2e:c0:62:fd:
a0:87:ec:54:c3:c7:cc:36:fd:c0:1e:35:24:98:19:
8a:7a:cb:6c:e0:07:0c:8f:59:9c:33:fe:1d:c4:d2:
53:73:50:06:52:db:4b:28:0f:57:1c:3e:a5:10:36:
40:d1:ba:ac:38:63:2d:f5:a7:b0:ac:47:98:f2:c1:
44:45:df:c8:da:e9:c8:cb:1a:ce:65:05:d7:07:47:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:E3:90:1A:21:68:5E:09:D6:D6:CB:B6:FC:32:A5:A2:BA:4E:69
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:0e:56:82:0a:64:c4:0b:dd:d1:8d:d5:7e:62:f1:26:e9:
17:cd:8c:af:e6:c0:3c:aa:5a:7b:72:ff:7d:30:11:91:fd:44:
4b:ab:d2:d3:30:44:6a:63:ae:8c:85:cb:19:96:8d:f8:e7:da:
c2:f8:a1:cc:32:56:f5:35:a9:55:72:d9:20:06:4b:73:e6:49:
c9:20:f6:ff:3b:3d:92:72:f0:85:67:bf:a3:da:91:5a:c1:fd:
0c:6e:88:8f:26:59:21:83:2a:79:b4:09:71:38:41:dd:c2:e0:
a3:54:78:0f:13:d2:8c:39:a8:83:17:6d:3d:9c:85:f4:61:ba:
f9:45:99:0d:3c:3a:00:bc:ba:0a:19:42:49:35:18:19:65:0e:
23:b6:9b:c3:4a:af:c5:44:59:51:43:75:12:fa:04:68:c3:a0:
87:46:dc:8e:21:79:9f:75:39:fb:ce:7e:20:d2:30:9b:41:aa:
50:42:3e:5b:3b:23:4d:a6:5d:ac:85:de:ee:02:9d:9c:44:68:
48:ad:ae:c7:45:c5:05:78:46:0b:cd:15:91:5f:64:49:9e:7f:
f7:f7:0f:e4:0d:2c:4e:a0:94:e3:7f:01:0f:e2:fe:10:b1:37:
66:18:47:bb:6d:de:9a:86:c9:da:20:36:ed:17:f0:5c:11:dd:
cc:1c:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:52 2026 by rpki-client