Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: akiug0x6j7St+ssxXWKNd6OnkiNncKGRW9SWe22oBGs=
Subject key identifier: CB:73:01:80:DF:C7:F0:17:53:37:E1:9C:C9:09:AD:AF:61:7F:19:9F
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 019E216DCCEEBBBE66D6E447180905C494E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 16DF
Signing time: Wed 13 May 2026 13:01:44 +0000
Manifest this update: Wed 13 May 2026 13:01:44 +0000
Manifest next update: Thu 14 May 2026 13:01:44 +0000
Files and hashes: 1: KDQ-cFcPwQDy3bGFF_WSaIsvNNQ.roa (hash: nE15hquAwl/5m54NEuxKdixrl7Q9eNfNpFSjwL6hasY=)
2: ekbIvq4xoQE_G2aZ6OBWbjCke00.roa (hash: CDCAAwMBxMHZc9k/9U2grgMxj6swO3W7TTk/XqEYqRY=)
3: m7QfGcH9ehj8zUctNJKORHfF7YQ.roa (hash: jEz2eC4AxW2xJSso0f7640cBfazPEGudZTNrPpOM8vo=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: tQ8i5U0tGFloDP5FT5JUmAJ4W1yk46nx50pX7O4TA0A=)
5: xXThYeFskZa8CsEFNdXzq9WOPuU.roa (hash: cncRVt5HZa39EbyA1UHTjl7763HCDtgzdQM7tatOGC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:cc:ee:bb:be:66:d6:e4:47:18:09:05:c4:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: May 13 13:01:44 2026 GMT
Not After : May 14 13:01:44 2026 GMT
Subject: CN=cb730180dfc7f0175337e19cc909adaf617f199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:d1:3d:61:f5:03:d3:ca:49:61:00:9f:49:
85:d1:45:f2:ee:28:b2:3f:b5:6a:5b:f0:6d:8b:f9:
48:a9:53:e1:4d:6b:26:78:f3:2a:0f:14:ae:5f:ca:
8c:73:13:61:7e:42:24:77:05:40:6b:9b:ec:93:26:
e3:ab:79:17:ad:9b:1e:0c:c6:7f:97:ab:4b:55:43:
34:33:fe:69:1e:af:6b:c8:b8:04:14:aa:24:53:5c:
9d:d1:2f:84:23:89:22:f4:44:c5:28:05:86:76:60:
24:ce:65:91:ff:e0:d6:77:6d:ff:45:93:da:3c:9d:
48:8d:fc:7f:b9:b9:1b:3e:36:25:3a:6d:dc:e2:ea:
e4:d5:9b:8f:99:d4:45:21:ff:78:ff:e4:28:52:f7:
15:38:9e:61:80:55:88:db:b1:34:b8:c6:a6:07:12:
c4:3c:66:e2:99:0b:75:b4:b1:1d:ac:98:8e:d2:51:
97:54:42:cb:a5:c6:2b:9a:8b:79:e1:97:0a:33:ad:
49:0d:34:85:ae:90:97:35:76:8c:a8:f0:bf:4b:59:
ca:d3:98:4e:55:0f:f7:8b:a8:7e:20:ec:05:e2:15:
73:9d:0e:59:6f:6f:a9:72:18:2d:8a:f8:68:98:ea:
da:76:77:34:8f:70:5e:f1:e7:82:ba:79:e5:ed:e4:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:01:80:DF:C7:F0:17:53:37:E1:9C:C9:09:AD:AF:61:7F:19:9F
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:c0:11:0c:88:10:a1:cb:fe:ff:9b:c6:4e:04:14:38:f7:
2f:37:f5:2d:8d:b2:da:c2:b4:8f:74:b8:99:87:ff:46:8c:7b:
cf:a5:e2:7d:bb:be:e8:3a:96:aa:d2:ac:08:e0:92:fa:df:4a:
77:ae:4d:99:57:81:9a:b0:bf:a8:e2:00:e9:e4:18:56:fd:5e:
6b:cf:50:72:83:c6:4a:00:e5:66:d1:43:fd:29:ea:a1:e9:51:
4d:dc:da:86:b5:fb:36:03:b1:4d:32:d8:71:d3:63:7d:96:8f:
5c:0c:cb:15:96:ac:c8:23:c6:d6:ee:b2:00:fa:bf:f4:6c:77:
ef:b4:80:79:84:f8:e4:fc:79:8d:42:a5:02:e3:68:3a:a6:24:
25:19:18:6f:7a:33:95:31:03:f9:9a:15:fc:17:77:f9:99:b9:
eb:14:db:27:9a:29:cc:a1:04:da:dd:82:0a:fd:9b:59:b9:ef:
05:1f:fd:59:02:6e:fe:93:71:7b:7e:0d:17:df:7f:04:da:90:
eb:a2:be:1b:ba:46:4e:bb:f2:94:4a:79:29:fd:89:0d:be:85:
11:54:33:94:c9:a3:6b:08:a7:19:76:ba:a6:f8:03:2e:f7:26:
12:d9:94:fe:e6:11:bb:14:a1:1c:c9:92:4c:88:eb:b6:d7:03:
56:48:02:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbczuu75m1uRHGAkFxJTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWNjMGQ1OGIxNmFkYmJmN2ZhNWMyZmRiYzM2NTlmOWM3
M2M3YmEwHhcNMjYwNTEzMTMwMTQ0WhcNMjYwNTE0MTMwMTQ0WjAzMTEwLwYDVQQD
EyhjYjczMDE4MGRmYzdmMDE3NTMzN2UxOWNjOTA5YWRhZjYxN2YxOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDbRPWH1A9PKSWEAn0mF0UXy7iiy
P7VqW/Bti/lIqVPhTWsmePMqDxSuX8qMcxNhfkIkdwVAa5vskybjq3kXrZseDMZ/
l6tLVUM0M/5pHq9ryLgEFKokU1yd0S+EI4ki9ETFKAWGdmAkzmWR/+DWd23/RZPa
PJ1Ijfx/ubkbPjYlOm3c4urk1ZuPmdRFIf94/+QoUvcVOJ5hgFWI27E0uMamBxLE
PGbimQt1tLEdrJiO0lGXVELLpcYrmot54ZcKM61JDTSFrpCXNXaMqPC/S1nK05hO
VQ/3i6h+IOwF4hVznQ5Zb2+pchgtivhomOradnc0j3Be8eeCunnl7eSzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtzAYDfx/AXUzfhnMkJra9hfxmfMB8GA1UdIwQY
MBaAFKccwNWLFq279/pcL9vDZZ+cc8e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt
ZGU2NDBkMDEyMDY1LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1
LzEvcHh6QTFZc1dyYnYzLWx3djI4TmxuNXh6eDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVD7AEQyI
EKHL/v+bxk4EFDj3Lzf1LY2y2sK0j3S4mYf/Rox7z6Xifbu+6DqWqtKsCOCS+t9K
d65NmVeBmrC/qOIA6eQYVv1ea89QcoPGSgDlZtFD/SnqoelRTdzahrX7NgOxTTLY
cdNjfZaPXAzLFZasyCPG1u6yAPq/9Gx377SAeYT45Px5jUKlAuNoOqYkJRkYb3oz
lTED+ZoV/Bd3+Zm56xTbJ5opzKEE2t2CCv2bWbnvBR/9WQJu/pNxe34NF99/BNqQ
66K+G7pGTrvylEp5Kf2JDb6FEVQzlMmjawinGXa6pvgDLvcmEtmU/uYRuxShHMmS
TIjrttcDVkgCZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:46:18 2026 by rpki-client