Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
File: PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft (raw, json)
Hash identifier: aajvXqbvKg4f8qOOIb0Mcmk6aW9Ufv1fBCnO2MwtUbc=
Subject key identifier: 92:80:4F:95:08:E1:78:76:7B:09:67:AB:4E:31:7B:28:AC:EB:82:DB
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial: 019D29615B998D5FF31E2C6518130607FED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
Manifest number: 110E
Signing time: Thu 26 Mar 2026 09:02:19 +0000
Manifest this update: Thu 26 Mar 2026 09:02:19 +0000
Manifest next update: Fri 27 Mar 2026 09:02:19 +0000
Files and hashes: 1: 4AdOdTjOjrDpwgtyy4ktcWWGP6A.roa (hash: wU5WQoYZymnHyBEb3RrJmAMH4p714dRTeA6U67NEuks=)
2: PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl (hash: NMJnAhpN9A4VK6oQjk9jBz/JYM/JAQqr3OIDGaioquQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5b:99:8d:5f:f3:1e:2c:65:18:13:06:07:fe:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Validity
Not Before: Mar 26 09:02:19 2026 GMT
Not After : Mar 27 09:02:19 2026 GMT
Subject: CN=92804f9508e178767b0967ab4e317b28aceb82db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:e7:06:2a:c8:16:fd:ca:25:c5:f0:eb:4c:
e0:8c:52:ba:a8:75:b1:52:eb:c5:85:4a:5e:8a:29:
64:ba:68:3a:3b:a0:54:df:d9:ad:8c:6b:33:f0:ba:
ef:eb:88:eb:cd:f1:f0:44:8b:b8:91:12:90:ae:b2:
83:84:c7:f4:89:d8:a9:8b:aa:7d:21:4e:d6:4f:e9:
c1:4a:96:f7:d1:ee:e0:a3:12:72:d1:49:a4:fa:a8:
4d:2e:72:14:ca:96:c2:9b:43:f0:f1:78:e9:d1:bd:
22:53:75:b9:9b:68:45:43:a1:1e:06:40:a4:d7:cb:
09:dd:6a:b6:86:ad:b7:08:9a:36:5f:7b:64:8e:0e:
d3:27:c0:ff:88:2b:de:a0:ee:52:63:ad:73:6a:96:
ce:07:09:70:0e:29:6b:13:c7:93:dc:0f:1d:9d:73:
86:ad:53:29:50:7d:94:4a:9d:f6:51:d2:e6:ab:53:
d5:1a:8c:da:c5:aa:87:d8:05:a5:1a:d0:8b:92:86:
b3:44:3b:89:ba:76:b9:00:0e:8f:86:62:ce:94:61:
ce:27:70:ee:e6:fe:7b:4c:dd:2d:98:92:23:42:d2:
98:b8:49:c9:dc:5a:a0:d7:fc:b2:54:aa:d5:80:ed:
14:22:cb:fd:ae:2e:f6:3f:f4:d4:f3:ec:27:35:bc:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:4F:95:08:E1:78:76:7B:09:67:AB:4E:31:7B:28:AC:EB:82:DB
X509v3 Authority Key Identifier:
keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2e:fe:69:57:80:f9:b5:85:3c:22:69:a1:75:93:44:fc:ee:
0a:e4:ae:13:64:4b:77:8c:c2:52:fa:6d:13:3a:36:ab:81:ea:
5a:8b:70:25:86:99:ff:c7:f0:3b:f4:a3:47:a2:e5:59:69:e1:
34:a0:23:fc:0a:bb:64:00:a3:90:4d:4b:71:34:18:8f:9a:45:
2f:84:8e:91:b6:a2:09:7b:5f:42:ef:61:22:d0:43:bf:9a:f1:
5a:c6:81:ab:24:cc:d3:ef:f5:06:b1:48:a0:2c:3e:0f:d3:1e:
7d:69:40:3e:6b:c2:49:ef:b5:dd:fa:5c:48:9c:a4:09:27:76:
d9:78:54:ff:eb:57:06:35:45:dc:6b:69:9b:7b:f0:c3:e2:79:
94:a1:ed:2f:8b:1c:7f:c7:6c:c0:51:fd:64:eb:c9:2b:6a:af:
d9:fb:cf:96:7b:18:e8:4a:7a:ea:fc:48:8d:a1:e9:91:af:d3:
8c:60:66:f6:bf:fc:e3:20:bc:f5:f0:90:39:59:97:7f:5d:b3:
1c:b6:22:76:c9:18:93:c6:da:cf:fc:8d:69:db:27:1c:81:db:
f4:d9:bc:a0:62:19:23:da:b4:16:a4:60:22:86:af:80:0b:ae:
2d:4c:2a:db:86:d7:57:74:a4:3d:02:38:b5:75:30:3e:51:89:
1c:65:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:46 2026 by rpki-client