Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
File: pa01_MxunXxO8XYrIEX3UPE-FLY.mft (raw, json)
Hash identifier: 8IEatmgGN2ZV0S1MSqZp+u+E8nofEHnxFyWlr9Ws/qM=
Subject key identifier: 93:1E:44:76:1F:15:5F:86:CB:82:DF:AC:B6:56:B3:43:13:03:AD:7D
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 019F916D2EE4DE3DA260C595F4B72341234A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:19 +0000
Manifest this update: Fri 24 Jul 2026 00:01:19 +0000
Manifest next update: Sat 25 Jul 2026 00:01:19 +0000
Files and hashes: 1: 3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa (hash: dvct+dxdFU1Z+0nEPHjZJnc61yMaQjvQerVz4nTodfw=)
2: 8NQBTzVqOxdh672FdzJMDJYc68E.roa (hash: vTXSY8qXUfsBWc4TJHAhfsVdL2+DnUDe0Pz/Tu+Tjvg=)
3: f0XaU3JRJ6K9MeezgzrxaojrB30.roa (hash: ZXixPs38PlSZh6YZgQu2MOsCMeK7oZ2WYXWbH9QLltM=)
4: pa01_MxunXxO8XYrIEX3UPE-FLY.crl (hash: SPrh2JQ4Xs8/fANbdqYu4mNU8BQH7Ox+yGqcCJ7afhc=)
5: wzJa8puNpbqZtViee8O6ZMY35aY.roa (hash: r+r4b7VNCUGLIiJjt8S3vPuSlnDDGK/RAqESNM+cPlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:2e:e4:de:3d:a2:60:c5:95:f4:b7:23:41:23:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Jul 24 00:01:19 2026 GMT
Not After : Jul 25 00:01:19 2026 GMT
Subject: CN=931e44761f155f86cb82dfacb656b3431303ad7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:93:3b:8d:1a:15:99:25:c6:16:c4:da:84:
b3:74:72:9b:d9:47:db:04:1b:1c:7d:e2:5d:a8:7a:
46:5f:e6:fa:fd:a8:a1:76:58:dd:9d:f4:11:c5:eb:
e4:f1:2d:22:6e:82:86:1b:2a:4b:14:80:18:18:40:
84:ba:22:8a:77:8a:7d:1e:91:4d:55:76:84:d4:b3:
3c:f9:c8:db:58:e3:3c:44:f0:88:2d:10:f1:be:f9:
35:c7:ca:5e:d1:83:16:69:6a:fa:c7:bf:89:fb:41:
ef:ba:9d:0c:65:e8:9b:de:15:33:c7:ec:bc:30:88:
36:22:24:c9:d4:58:c2:a9:6e:49:71:d2:2f:9d:a1:
80:2c:f5:f8:cb:d3:e5:7a:6d:4a:c9:fb:dc:cc:38:
b7:6b:9a:37:ef:3a:81:99:fd:70:24:a6:cf:fb:6b:
7a:89:c7:27:53:bf:a2:6d:15:cd:2b:cb:d0:70:f3:
21:fc:64:89:a3:e2:dc:a7:6c:08:f2:37:68:63:d4:
e3:64:90:4d:9e:08:83:dd:3b:be:28:8f:35:80:1d:
7b:aa:27:6d:55:8a:3e:a5:ca:52:74:03:88:9c:d6:
88:b1:29:ce:f8:64:f8:9d:b4:67:04:4e:ed:7f:e2:
12:a6:fc:72:eb:08:39:fe:6a:1e:f1:a6:9b:b8:38:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:44:76:1F:15:5F:86:CB:82:DF:AC:B6:56:B3:43:13:03:AD:7D
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fb:75:27:49:58:8d:4f:a0:98:6d:d8:01:14:1e:f0:de:0e:
61:ac:d1:7f:3d:05:4f:e9:3f:4e:08:59:d2:2d:aa:9c:df:d7:
af:25:f4:ed:84:94:28:29:37:24:8e:90:dd:75:ed:60:53:86:
f7:e0:ac:6b:a2:71:70:37:45:f1:2f:ab:e4:be:f5:ac:f4:ab:
24:60:6c:82:d1:d9:d6:bc:96:45:9b:8f:dd:f7:cd:e5:2c:ab:
1b:09:e6:fb:2d:1d:ef:0b:e8:a7:33:e5:00:74:db:bc:ee:69:
00:5e:b4:10:61:90:a9:0d:42:f6:e0:b7:07:c1:a8:cf:77:92:
0d:c8:81:80:cf:f1:0f:fd:31:5a:22:ea:a4:c3:94:35:69:e6:
bc:c9:2a:b5:4e:3f:0f:da:26:25:d2:5f:67:a7:86:38:63:b1:
14:5a:d6:10:fa:bd:3f:fd:4a:85:87:1f:e5:a7:a9:cd:08:36:
37:e3:ba:ce:b2:e2:ef:17:57:81:a5:47:d5:2a:6d:53:13:48:
33:b5:db:ed:32:d2:76:6f:ef:28:14:d6:8d:d6:b3:43:7c:67:
55:bc:9b:34:cb:39:9d:bb:b9:e4:d3:02:9a:44:bf:1d:7d:75:
a6:37:b0:89:eb:c8:46:9f:f6:75:e9:44:67:e8:73:d3:f5:f5:
0b:a4:ce:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:33 2026 by rpki-client