Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: 88aFn5U9lv7Pqn/95x7jj7k95nQvzjB87DP4OZ3bcG8=
Subject key identifier: BC:8B:A3:8E:60:CD:A0:EC:77:22:00:27:FF:AB:31:28:21:06:DA:D9
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 019F95127FC3B1EB45BFB8FB40F9B0F8D89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: 0133
Signing time: Fri 24 Jul 2026 17:00:45 +0000
Manifest this update: Fri 24 Jul 2026 17:00:45 +0000
Manifest next update: Sat 25 Jul 2026 17:00:45 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: iWHe3KXiGQT4Vm9HBEQbO9S52fDQnHLcyIHB0AbZRo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:7f:c3:b1:eb:45:bf:b8:fb:40:f9:b0:f8:d8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Jul 24 17:00:45 2026 GMT
Not After : Jul 25 17:00:45 2026 GMT
Subject: CN=bc8ba38e60cda0ec77220027ffab31282106dad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e9:c5:b7:dc:eb:ca:c0:7b:ec:b5:19:0a:b3:
6e:01:cb:03:25:88:c5:2c:df:49:43:63:5d:7d:20:
0f:e1:0b:8a:ee:20:03:a5:09:b3:8b:7c:fb:e6:d5:
46:dd:a9:d8:92:6d:c7:24:7b:24:f1:cd:7b:ab:55:
3d:05:d0:3e:8a:28:41:a6:db:f5:75:e5:77:dd:0a:
56:d7:3f:a7:24:1e:71:a3:e7:9f:76:a5:18:5c:10:
1a:8f:e2:c5:aa:a6:05:5e:97:6f:54:3c:42:03:b2:
41:48:eb:a7:02:9f:35:cf:89:29:a6:aa:75:6e:16:
46:62:91:2a:bd:73:da:f0:02:13:25:c0:0d:e3:2c:
cb:85:78:3d:c6:00:4c:27:49:9b:e1:92:b4:46:73:
40:e3:ff:3c:f7:57:aa:f5:b9:ce:f2:96:ac:f8:03:
e9:79:3f:a4:ae:4a:0d:fc:54:14:11:a6:68:27:dc:
4e:65:a2:fc:d3:8b:4d:75:82:cc:9b:55:e3:05:f4:
96:9c:de:62:cb:d9:1f:19:c9:e7:1c:80:15:88:d1:
78:bb:53:62:24:2b:7b:c6:3e:01:ec:3d:d4:28:b8:
8f:8d:bc:8c:92:33:9f:23:86:2e:cf:c0:6b:59:e2:
0b:7f:6b:ac:01:e4:23:3e:4d:2c:b9:65:a8:11:68:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:A3:8E:60:CD:A0:EC:77:22:00:27:FF:AB:31:28:21:06:DA:D9
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5b:06:89:97:c7:f1:07:f7:a2:ec:e5:78:b0:c6:8a:30:ba:
4d:19:04:03:17:d8:92:ef:4d:f4:1f:2d:fb:9b:0d:b0:44:08:
18:8c:c5:50:70:a4:ef:49:25:3d:64:e0:d4:4e:c1:76:6b:46:
d0:ec:d8:da:29:fd:d9:78:28:3b:f0:0c:2c:f2:c3:27:a9:72:
c7:38:ea:31:3e:84:01:1b:f5:60:8d:65:52:ff:f6:34:0d:3e:
d4:a6:16:de:6b:52:51:13:c5:2f:84:fa:4e:ab:ad:e6:47:d0:
81:a8:3a:1e:2e:ce:48:1d:9b:94:82:36:92:f7:0b:e0:91:68:
9a:4d:bb:10:83:cd:51:3b:93:c0:63:bc:f0:e2:00:e9:ec:34:
cc:1e:b3:03:c5:6c:87:bf:24:db:9b:d5:de:8f:01:8a:0d:b2:
75:ba:85:73:b1:c6:b5:1c:4e:ef:bf:b9:7e:e7:b8:bf:3b:e1:
5c:b2:d6:29:a9:59:cc:fb:53:23:63:67:a4:e3:8f:b3:e8:3a:
d2:a4:12:88:ed:95:0f:78:43:69:b8:3f:49:50:7b:c7:77:cf:
1c:ce:8e:e6:2a:95:4c:2c:ee:52:be:8a:ad:a9:de:99:c0:60:
70:22:79:b5:86:47:fd:1a:19:e7:c1:eb:f9:b8:b7:bc:31:7b:
e1:47:53:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEn/DsetFv7j7QPmw+NicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2JhOGRiNTYzMDYyNGM2NTNhMjYzOTE3NGIzNTkwY2Uw
NDE0MDYwHhcNMjYwNzI0MTcwMDQ1WhcNMjYwNzI1MTcwMDQ1WjAzMTEwLwYDVQQD
EyhiYzhiYTM4ZTYwY2RhMGVjNzcyMjAwMjdmZmFiMzEyODIxMDZkYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+nFt9zrysB77LUZCrNuAcsDJYjF
LN9JQ2NdfSAP4QuK7iADpQmzi3z75tVG3anYkm3HJHsk8c17q1U9BdA+iihBptv1
deV33QpW1z+nJB5xo+efdqUYXBAaj+LFqqYFXpdvVDxCA7JBSOunAp81z4kppqp1
bhZGYpEqvXPa8AITJcAN4yzLhXg9xgBMJ0mb4ZK0RnNA4/8891eq9bnO8pas+APp
eT+krkoN/FQUEaZoJ9xOZaL804tNdYLMm1XjBfSWnN5iy9kfGcnnHIAViNF4u1Ni
JCt7xj4B7D3UKLiPjbyMkjOfI4Yuz8BrWeILf2usAeQjPk0suWWoEWijPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyLo45gzaDsdyIAJ/+rMSghBtrZMB8GA1UdIwQY
MBaAFKV7qNtWMGJMZTomORdLNZDOBBQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMt
ZTIzOWM5YTlmNjc0LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMtZTIzOWM5YTlmNjc0
LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlsGiZfH
8Qf3ouzleLDGijC6TRkEAxfYku9N9B8t+5sNsEQIGIzFUHCk70klPWTg1E7BdmtG
0OzY2in92XgoO/AMLPLDJ6lyxzjqMT6EARv1YI1lUv/2NA0+1KYW3mtSURPFL4T6
Tqut5kfQgag6Hi7OSB2blII2kvcL4JFomk27EIPNUTuTwGO88OIA6ew0zB6zA8Vs
h78k25vV3o8Big2ydbqFc7HGtRxO77+5fue4vzvhXLLWKalZzPtTI2NnpOOPs+g6
0qQSiO2VD3hDabg/SVB7x3fPHM6O5iqVTCzuUr6KranemcBgcCJ5tYZH/RoZ58Hr
+bi3vDF74UdTJA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:21:22 2026 by rpki-client