Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: XkkneVACofprIyyX+zn8gALRGgpocUMk4ZOKrrfYjLk=
Subject key identifier: 9B:4F:DA:2C:17:E0:F3:C6:27:BD:B1:7C:5E:37:70:79:12:6A:70:98
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01A0D26E22BC999B350C1A1F2995C46FA7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1A7C
Signing time: Thu 24 Sep 2026 08:00:28 +0000
Manifest this update: Thu 24 Sep 2026 08:00:28 +0000
Manifest next update: Fri 25 Sep 2026 08:00:28 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: 7ZkrfvKcuu31sY8v5P5jcjXDgvEPdofmC+Yrm1uQASc=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:22:bc:99:9b:35:0c:1a:1f:29:95:c4:6f:a7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Sep 24 08:00:28 2026 GMT
Not After : Sep 25 08:00:28 2026 GMT
Subject: CN=9b4fda2c17e0f3c627bdb17c5e377079126a7098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:90:6d:e5:82:f0:af:4d:27:45:f7:b8:a7:
eb:f5:46:53:33:7e:fd:f6:d1:ff:81:1b:0f:86:9e:
56:0d:fc:f6:b2:7e:58:a5:ad:ed:36:cc:6b:80:c0:
16:ea:02:ad:5a:33:25:65:70:5c:37:10:a5:1a:60:
93:98:ea:ed:8b:5a:77:3c:0b:d1:a1:36:48:d0:59:
8f:e4:a3:0e:c1:74:ea:5d:67:f8:ca:9c:29:a6:f3:
90:20:32:eb:fc:e1:67:2b:ed:64:3c:a8:ba:60:c1:
51:13:8a:80:a7:f3:45:05:7b:c8:69:5a:ad:72:3e:
5f:71:97:e9:18:0b:35:f0:12:90:bb:62:b7:69:3c:
ef:33:6b:5b:e2:0b:61:30:ed:f7:f0:a0:69:06:90:
36:db:5e:6b:bf:57:35:41:78:72:f7:f8:9e:12:f5:
00:3e:3a:7a:37:5c:21:24:46:5f:a9:6e:ba:f7:04:
2b:d9:05:8b:43:74:25:5f:73:ea:8a:67:70:31:d1:
d1:98:39:9c:c6:25:23:42:7f:da:bd:f6:8b:db:94:
6f:d2:a2:d8:f0:de:bd:c4:94:29:b6:8e:25:ee:69:
0b:26:00:41:e1:70:2c:19:4b:b8:09:ce:e0:82:32:
f0:6f:e5:47:4b:72:66:1d:98:ca:29:4a:24:4b:83:
6d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:DA:2C:17:E0:F3:C6:27:BD:B1:7C:5E:37:70:79:12:6A:70:98
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:ea:e6:ce:bf:fb:5f:79:81:a5:92:b0:6a:ec:fb:24:21:
19:f3:be:67:2e:8e:0e:cb:b0:2e:7c:ad:a5:77:ba:dd:70:09:
df:42:9c:b9:ca:35:cd:4f:e9:c5:7c:cd:08:33:5a:2d:fb:c5:
b5:6a:df:4e:0b:11:d0:c2:a4:47:be:9f:9d:47:4c:48:c2:f0:
f4:8b:66:cf:f0:7c:49:6f:32:08:ae:02:2d:61:62:27:5c:44:
e0:fe:90:21:6a:ec:69:03:a6:76:2f:bf:53:9d:1b:64:28:e5:
9a:35:87:b5:8a:51:10:08:cc:60:b7:7f:cd:34:be:7e:b6:01:
a2:24:77:5c:04:6e:42:f9:91:ba:ca:e2:bb:9f:af:d3:87:3c:
bd:81:d0:ac:60:af:d9:0d:e9:27:3d:99:22:b7:20:cb:91:e0:
e4:11:ea:25:86:c9:9c:fb:08:ab:73:52:a7:1e:34:43:9f:12:
20:c0:cc:e5:14:83:68:36:1c:4d:3d:4b:60:1d:aa:b8:46:58:
94:45:de:c3:6a:b2:ed:c7:e6:57:6c:11:ad:7f:f8:b6:6f:1b:
3b:9d:61:a4:c4:aa:bf:52:27:90:08:c3:40:dd:ff:fa:4c:fc:
44:bc:77:cf:ee:be:dd:6a:af:17:ba:e3:5a:6b:0e:b6:01:c4:
2c:6e:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:33:20 2026 by rpki-client