Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: ylPbe5LZVOn3IriLqb2ZK2np66CUSo6Kn1UwaEbrfT8=
Subject key identifier: E7:3F:48:38:50:FC:42:5F:EC:9C:E5:77:16:A2:8C:13:0C:9E:31:A4
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019FAB9A4A64A6B7C4EB2468B557AE4B6C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 10A5
Signing time: Wed 29 Jul 2026 02:00:43 +0000
Manifest this update: Wed 29 Jul 2026 02:00:43 +0000
Manifest next update: Thu 30 Jul 2026 02:00:43 +0000
Files and hashes: 1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: 3sEK2BPz57OwLYYrD4FPchrovPdi1w+LpakPO1b1aGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:4a:64:a6:b7:c4:eb:24:68:b5:57:ae:4b:6c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Jul 29 02:00:43 2026 GMT
Not After : Jul 30 02:00:43 2026 GMT
Subject: CN=e73f483850fc425fec9ce57716a28c130c9e31a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:b7:05:2b:0d:c6:24:c5:f3:a1:64:3e:b9:
48:aa:20:47:9d:08:99:2a:5b:9f:c5:d5:c5:24:94:
f3:05:be:0f:13:03:05:14:e2:2f:26:f3:2b:dd:d5:
e1:52:af:6c:ff:22:43:d4:e8:37:a7:d4:d3:67:68:
a7:ce:20:b8:44:3f:06:e7:c1:c1:76:db:1b:54:31:
cd:70:d7:98:f7:df:73:10:33:24:86:d0:0c:95:54:
a5:d9:db:51:97:8e:02:67:de:b2:fd:52:3c:26:be:
2e:7d:80:26:fc:d6:82:59:89:e1:8d:7c:20:48:b1:
d8:24:a6:f3:db:3b:41:5d:78:42:d6:d5:97:83:e7:
a7:12:f5:e3:df:6c:e1:88:8d:18:84:b6:86:d1:60:
f0:41:ab:ef:28:37:80:be:ed:3f:02:7d:09:7c:06:
6a:64:a3:9b:b7:ae:82:a9:56:c7:68:93:a5:a5:18:
c2:af:78:9e:05:38:6c:d2:ac:25:4f:5a:09:02:12:
3a:bb:57:bc:87:f3:dc:cf:d0:89:32:6b:6e:2b:af:
1c:f5:cd:81:68:7b:78:09:8f:77:e6:4b:05:b9:83:
19:37:31:2d:e1:72:ea:ba:5a:08:5a:6d:47:5e:4c:
90:04:8e:ee:41:0f:75:21:f2:23:f2:3d:6f:0b:7c:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:48:38:50:FC:42:5F:EC:9C:E5:77:16:A2:8C:13:0C:9E:31:A4
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:c8:43:60:88:e4:d4:84:20:64:a8:0e:27:4f:9b:ad:e8:
54:a7:51:83:cb:98:b9:a3:ad:a7:da:e5:3f:86:93:58:db:cb:
1d:f7:d9:a2:c0:2e:91:17:8d:50:6b:94:6b:c3:13:63:69:98:
83:89:26:71:6e:7a:d0:f8:7e:e6:58:bf:1f:2d:f1:dd:3b:4b:
a7:34:b1:c6:3b:e8:73:5a:7f:c5:cf:5e:93:8a:38:7f:e5:93:
83:88:1a:1e:5e:f5:2a:e8:68:fc:9c:bd:7c:a1:8e:a7:09:9d:
96:c0:86:36:51:b4:ab:78:e9:a5:03:2b:f6:4a:8e:94:96:6a:
97:cc:bf:09:e0:e9:e6:85:3c:01:5c:32:40:07:f9:75:37:f2:
46:9d:c4:7f:8f:dd:93:d3:f1:fb:80:d8:45:b0:42:dc:15:de:
2c:80:bf:f6:7c:06:a8:dd:7a:c2:64:ca:cd:f0:6d:90:e5:87:
53:de:06:ee:4a:f6:4c:fa:25:8d:91:8f:40:1f:66:81:e2:7c:
5c:86:c8:2d:4a:d3:8c:20:24:b3:fb:fc:6f:2a:78:eb:ed:d2:
28:cd:e2:71:80:72:99:80:bd:ea:57:39:de:51:73:12:cd:84:
c1:60:d2:2e:a2:3b:7e:f9:76:f4:89:bc:a0:bf:18:5a:b1:93:
5d:2a:f8:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmkpkprfE6yRotVeuS2xhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2Q0Y2ZlNjBmOGEzMGE0ZDBmZjk0Yjk0ZWJhZGZjODhj
OWFjMTEwHhcNMjYwNzI5MDIwMDQzWhcNMjYwNzMwMDIwMDQzWjAzMTEwLwYDVQQD
EyhlNzNmNDgzODUwZmM0MjVmZWM5Y2U1NzcxNmEyOGMxMzBjOWUzMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXi3BSsNxiTF86FkPrlIqiBHnQiZ
KlufxdXFJJTzBb4PEwMFFOIvJvMr3dXhUq9s/yJD1Og3p9TTZ2inziC4RD8G58HB
dtsbVDHNcNeY999zEDMkhtAMlVSl2dtRl44CZ96y/VI8Jr4ufYAm/NaCWYnhjXwg
SLHYJKbz2ztBXXhC1tWXg+enEvXj32zhiI0YhLaG0WDwQavvKDeAvu0/An0JfAZq
ZKObt66CqVbHaJOlpRjCr3ieBThs0qwlT1oJAhI6u1e8h/Pcz9CJMmtuK68c9c2B
aHt4CY935ksFuYMZNzEt4XLquloIWm1HXkyQBI7uQQ91IfIj8j1vC3y5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc/SDhQ/EJf7JzldxaijBMMnjGkMB8GA1UdIwQY
MBaAFKV9TP5g+KMKTQ/5S5TrrfyIyawRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgt
ZTgwZjMyMDczZjNkLzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgtZTgwZjMyMDczZjNk
LzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/PIQ2CI
5NSEIGSoDidPm63oVKdRg8uYuaOtp9rlP4aTWNvLHffZosAukReNUGuUa8MTY2mY
g4kmcW560Ph+5li/Hy3x3TtLpzSxxjvoc1p/xc9ek4o4f+WTg4gaHl71Kuho/Jy9
fKGOpwmdlsCGNlG0q3jppQMr9kqOlJZql8y/CeDp5oU8AVwyQAf5dTfyRp3Ef4/d
k9Px+4DYRbBC3BXeLIC/9nwGqN16wmTKzfBtkOWHU94G7kr2TPoljZGPQB9mgeJ8
XIbILUrTjCAks/v8byp46+3SKM3icYBymYC96lc53lFzEs2EwWDSLqI7fvl29Im8
oL8YWrGTXSr4PA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:31 2026 by rpki-client