Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
File: pa01_MxunXxO8XYrIEX3UPE-FLY.mft (raw, json)
Hash identifier: 99VU6OdglZwNU4KPqhNzRneuIuJUJU0xNgrCeIGRmwI=
Subject key identifier: 2B:34:BA:B3:FB:58:48:BC:AA:B8:64:16:12:C2:F9:A6:A4:03:F3:BE
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 01A0D9BB3663D803BB1F517B5FACCA177DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:00 +0000
Manifest this update: Fri 25 Sep 2026 18:02:00 +0000
Manifest next update: Sat 26 Sep 2026 18:02:00 +0000
Files and hashes: 1: 3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa (hash: dvct+dxdFU1Z+0nEPHjZJnc61yMaQjvQerVz4nTodfw=)
2: 8NQBTzVqOxdh672FdzJMDJYc68E.roa (hash: vTXSY8qXUfsBWc4TJHAhfsVdL2+DnUDe0Pz/Tu+Tjvg=)
3: f0XaU3JRJ6K9MeezgzrxaojrB30.roa (hash: ZXixPs38PlSZh6YZgQu2MOsCMeK7oZ2WYXWbH9QLltM=)
4: pa01_MxunXxO8XYrIEX3UPE-FLY.crl (hash: e4WowpjFqskFHkEU8RnnSYzXDQ331TPgQuYiAJZtC3o=)
5: wzJa8puNpbqZtViee8O6ZMY35aY.roa (hash: r+r4b7VNCUGLIiJjt8S3vPuSlnDDGK/RAqESNM+cPlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:36:63:d8:03:bb:1f:51:7b:5f:ac:ca:17:7d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Sep 25 18:02:00 2026 GMT
Not After : Sep 26 18:02:00 2026 GMT
Subject: CN=2b34bab3fb5848bcaab8641612c2f9a6a403f3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:5b:24:33:5d:8a:b2:7d:74:6c:20:fb:93:
85:20:2f:7b:94:de:4b:2f:06:10:30:a9:cd:a0:b1:
f7:0d:a3:ee:33:8d:fa:4f:78:65:f7:4e:cd:11:b2:
03:35:84:57:11:33:c0:49:49:e7:c1:0e:f4:c4:a8:
77:5b:d2:4f:85:ec:8a:c1:c8:8f:ca:23:d7:9f:9f:
48:6a:fe:9d:68:3b:b3:b2:1d:a2:1f:ea:46:97:f6:
af:45:5b:70:33:59:80:b6:db:f2:62:9c:c8:08:a5:
58:3f:9c:04:0c:6f:ea:2e:d8:d7:0e:aa:12:c6:43:
7f:63:9f:1e:2c:05:32:0d:01:f8:29:2d:03:8a:ae:
31:3f:3b:37:b6:73:cd:61:d2:e1:dc:07:a8:99:e3:
49:7c:94:7d:3b:ef:40:69:58:ac:78:0f:4d:5d:99:
32:03:02:d1:c0:68:45:17:c1:e8:ab:cb:1c:c7:b0:
58:37:d4:e9:d8:e4:fd:a9:a5:3a:61:bb:d5:39:89:
c3:79:76:d5:13:7e:61:d2:7c:05:53:9a:11:1c:5d:
46:b2:31:0b:c1:9f:19:f5:6c:81:cf:7f:e7:31:af:
8d:b7:62:15:91:d1:5c:45:e8:b8:05:50:e1:83:ab:
4e:18:d3:ec:66:61:ec:f3:2e:7d:ce:ec:ed:a3:a1:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:BA:B3:FB:58:48:BC:AA:B8:64:16:12:C2:F9:A6:A4:03:F3:BE
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:15:31:2a:77:47:de:19:0d:9e:f6:ce:ea:03:6e:6d:9c:96:
ba:a8:94:9b:62:13:19:27:aa:67:6a:51:07:51:6f:83:06:e2:
6a:e2:7d:47:de:64:8e:d1:0d:2f:9a:eb:6e:cc:6d:b0:f9:41:
40:41:72:c2:87:8b:dc:66:ee:22:71:12:eb:94:d4:09:fa:42:
de:38:5f:e4:d7:93:25:c0:b3:76:98:8d:00:95:82:6f:80:96:
1c:32:1f:fc:66:59:63:fa:73:45:73:cb:2a:dd:c4:0e:48:a4:
9b:73:a2:b7:62:f8:85:f7:95:f6:6c:d1:d8:de:09:7e:92:6b:
26:0f:ee:45:e9:4b:05:e6:51:0a:0d:00:94:ce:01:fb:4a:82:
cb:94:6e:c2:c5:80:1c:3c:72:b1:67:81:3b:77:0a:95:01:fb:
fb:71:f3:93:a2:ff:7b:06:94:a0:5a:3b:78:06:8d:03:9b:29:
99:17:bb:40:8d:f2:6c:1d:3f:3a:be:31:40:c3:ec:71:d4:12:
af:4a:f9:b9:97:34:c9:99:7f:76:52:63:bf:69:e9:b8:9c:b6:
b1:b6:9c:56:3e:fe:99:01:29:ce:59:20:8c:ff:19:e5:2c:16:
a2:6a:c5:19:ed:70:fe:c5:9e:36:4f:a6:68:41:19:d2:06:20:
de:12:5e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuzZj2AO7H1F7X6zKF33eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWQzNWZjY2M2ZTlkN2M0ZWYxNzYyYjIwNDVmNzUwZjEz
ZTE0YjYwHhcNMjYwOTI1MTgwMjAwWhcNMjYwOTI2MTgwMjAwWjAzMTEwLwYDVQQD
EygyYjM0YmFiM2ZiNTg0OGJjYWFiODY0MTYxMmMyZjlhNmE0MDNmM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8JbJDNdirJ9dGwg+5OFIC97lN5L
LwYQMKnNoLH3DaPuM436T3hl907NEbIDNYRXETPASUnnwQ70xKh3W9JPheyKwciP
yiPXn59Iav6daDuzsh2iH+pGl/avRVtwM1mAttvyYpzICKVYP5wEDG/qLtjXDqoS
xkN/Y58eLAUyDQH4KS0Diq4xPzs3tnPNYdLh3AeomeNJfJR9O+9AaViseA9NXZky
AwLRwGhFF8Hoq8scx7BYN9Tp2OT9qaU6YbvVOYnDeXbVE35h0nwFU5oRHF1GsjEL
wZ8Z9WyBz3/nMa+Nt2IVkdFcRei4BVDhg6tOGNPsZmHs8y59zuzto6FURwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs0urP7WEi8qrhkFhLC+aakA/O+MB8GA1UdIwQY
MBaAFKWtNfzMbp18TvF2KyBF91DxPhS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt
MTU1ZmIzZmUyODdlLzEvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl
LzEvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRUxKndH
3hkNnvbO6gNubZyWuqiUm2ITGSeqZ2pRB1FvgwbiauJ9R95kjtENL5rrbsxtsPlB
QEFywoeL3GbuInES65TUCfpC3jhf5NeTJcCzdpiNAJWCb4CWHDIf/GZZY/pzRXPL
Kt3EDkikm3Oit2L4hfeV9mzR2N4JfpJrJg/uRelLBeZRCg0AlM4B+0qCy5RuwsWA
HDxysWeBO3cKlQH7+3Hzk6L/ewaUoFo7eAaNA5spmRe7QI3ybB0/Or4xQMPscdQS
r0r5uZc0yZl/dlJjv2npuJy2sbacVj7+mQEpzlkgjP8Z5SwWomrFGe1w/sWeNk+m
aEEZ0gYg3hJezg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:08:44 2026 by rpki-client