Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: 0+dJ/Cdmbesv0s/mUPaTpPWEJxA/ZCNwz+o/Pa36nTc=
Subject key identifier: 73:34:1A:C8:11:EB:9D:11:85:D4:3C:37:F7:89:7F:4C:95:9C:39:0F
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 01A1174F6981CC253EE00E160BC549A923F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: 01FB
Signing time: Wed 07 Oct 2026 17:00:42 +0000
Manifest this update: Wed 07 Oct 2026 17:00:42 +0000
Manifest next update: Thu 08 Oct 2026 17:00:42 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: JfW38/NtjVxnS8GQu5XLYvgEDsBUsO/wilwOz70Y/Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:69:81:cc:25:3e:e0:0e:16:0b:c5:49:a9:23:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Oct 7 17:00:42 2026 GMT
Not After : Oct 8 17:00:42 2026 GMT
Subject: CN=73341ac811eb9d1185d43c37f7897f4c959c390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:41:f7:31:66:20:d0:0a:51:da:50:32:26:07:
b5:e3:42:8f:ee:58:00:be:3a:65:49:da:88:e3:7d:
df:34:99:16:57:02:ac:f8:b1:6e:d1:ab:0d:f2:78:
8a:99:e4:4b:7d:9d:0b:7e:9b:d9:21:95:72:95:ec:
67:d2:d2:5d:18:2b:a4:ad:91:48:29:67:b4:09:71:
22:4d:7b:92:0b:1b:ef:a5:74:b1:57:b7:c6:2e:11:
ea:92:f6:47:44:40:6c:ca:81:ef:f5:38:3f:41:54:
c3:15:01:33:5c:77:bf:9c:45:09:80:9b:2b:7a:fa:
ce:c4:ab:ff:0e:04:2b:ff:e2:5f:d4:51:4b:a3:d7:
e1:66:31:95:10:14:fc:6f:23:77:55:9c:36:15:15:
e2:bd:fe:63:df:11:9e:2d:55:8a:86:10:f2:08:6a:
25:69:7d:4d:42:ea:99:65:83:27:92:5a:8e:19:c4:
44:17:b3:b9:e0:4a:47:3a:c8:23:05:6c:14:c4:73:
01:81:c3:f0:89:c3:40:17:ec:cb:77:d1:dd:16:e4:
6c:c2:6d:9c:1f:d5:d4:09:02:90:6b:08:e5:f0:cc:
dd:79:3d:6f:8a:31:1b:2a:2c:6f:1a:34:a7:b1:07:
e5:d0:0c:c6:61:85:66:be:ba:b7:6e:af:0a:44:61:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:1A:C8:11:EB:9D:11:85:D4:3C:37:F7:89:7F:4C:95:9C:39:0F
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e5:8e:ef:0c:8f:b2:7e:e6:be:76:f6:78:dd:f9:0f:8a:25:
c0:aa:21:b7:fe:a1:ce:af:43:64:69:3b:1e:c4:fc:9a:9d:cb:
1f:4b:67:72:b2:2f:02:ee:99:4c:19:d0:08:78:7a:1f:4d:03:
85:d4:26:27:ee:67:7d:45:3e:63:98:d8:4b:4f:6a:3c:7f:39:
3d:d8:87:a7:8a:1e:22:c2:df:f7:05:00:46:b5:09:04:48:97:
be:5c:ba:72:bb:e0:91:5f:c6:bf:3d:78:0b:b0:41:69:ec:2d:
55:6e:7b:76:1a:de:26:f4:85:a3:f6:10:0c:00:83:9a:1f:7a:
8e:43:82:c8:f6:45:d4:e2:0e:d3:f2:6d:28:63:4d:3e:7a:4c:
06:fa:4f:7b:2e:c0:aa:3f:10:9d:2c:2f:ff:3d:f5:eb:80:d4:
e4:65:61:41:a4:22:01:e0:a8:bd:12:05:c3:6a:5c:b3:b6:95:
12:b3:5d:0c:c3:ab:b4:30:d8:a0:28:37:b5:69:42:29:ff:0b:
17:45:e8:8f:fc:3d:c5:da:6b:1e:d2:18:44:54:27:6a:c9:29:
1c:85:67:b9:43:b0:84:c4:a7:b5:9d:0c:33:dd:b9:04:47:bf:
a2:94:3d:a7:fc:87:e4:cd:f9:74:9d:6f:17:e3:bc:5c:73:ad:
97:cb:59:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXT2mBzCU+4A4WC8VJqSP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2JhOGRiNTYzMDYyNGM2NTNhMjYzOTE3NGIzNTkwY2Uw
NDE0MDYwHhcNMjYxMDA3MTcwMDQyWhcNMjYxMDA4MTcwMDQyWjAzMTEwLwYDVQQD
Eyg3MzM0MWFjODExZWI5ZDExODVkNDNjMzdmNzg5N2Y0Yzk1OWMzOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UH3MWYg0ApR2lAyJge140KP7lgA
vjplSdqI433fNJkWVwKs+LFu0asN8niKmeRLfZ0LfpvZIZVylexn0tJdGCukrZFI
KWe0CXEiTXuSCxvvpXSxV7fGLhHqkvZHREBsyoHv9Tg/QVTDFQEzXHe/nEUJgJsr
evrOxKv/DgQr/+Jf1FFLo9fhZjGVEBT8byN3VZw2FRXivf5j3xGeLVWKhhDyCGol
aX1NQuqZZYMnklqOGcREF7O54EpHOsgjBWwUxHMBgcPwicNAF+zLd9HdFuRswm2c
H9XUCQKQawjl8MzdeT1vijEbKixvGjSnsQfl0AzGYYVmvrq3bq8KRGHZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM0GsgR650RhdQ8N/eJf0yVnDkPMB8GA1UdIwQY
MBaAFKV7qNtWMGJMZTomORdLNZDOBBQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMt
ZTIzOWM5YTlmNjc0LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMtZTIzOWM5YTlmNjc0
LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuWO7wyP
sn7mvnb2eN35D4olwKoht/6hzq9DZGk7HsT8mp3LH0tncrIvAu6ZTBnQCHh6H00D
hdQmJ+5nfUU+Y5jYS09qPH85PdiHp4oeIsLf9wUARrUJBEiXvly6crvgkV/Gvz14
C7BBaewtVW57dhreJvSFo/YQDACDmh96jkOCyPZF1OIO0/JtKGNNPnpMBvpPey7A
qj8QnSwv/z3164DU5GVhQaQiAeCovRIFw2pcs7aVErNdDMOrtDDYoCg3tWlCKf8L
F0Xoj/w9xdprHtIYRFQnaskpHIVnuUOwhMSntZ0MM925BEe/opQ9p/yH5M35dJ1v
F+O8XHOtl8tZdQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 02:21:41 2026 by rpki-client