Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
File: pa01_MxunXxO8XYrIEX3UPE-FLY.mft (raw, json)
Hash identifier: RsZ1VMU9XLuc1LvtGWqZOg5Fms1cvlSbWamnto6bt+Q=
Subject key identifier: 89:A9:D2:67:57:7B:4E:49:17:41:DC:19:48:CB:3F:11:87:88:02:AB
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 01A0C66A9BF953D8079CDF91AD987B0EB444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:10 +0000
Manifest this update: Tue 22 Sep 2026 00:01:10 +0000
Manifest next update: Wed 23 Sep 2026 00:01:10 +0000
Files and hashes: 1: 3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa (hash: dvct+dxdFU1Z+0nEPHjZJnc61yMaQjvQerVz4nTodfw=)
2: 8NQBTzVqOxdh672FdzJMDJYc68E.roa (hash: vTXSY8qXUfsBWc4TJHAhfsVdL2+DnUDe0Pz/Tu+Tjvg=)
3: f0XaU3JRJ6K9MeezgzrxaojrB30.roa (hash: ZXixPs38PlSZh6YZgQu2MOsCMeK7oZ2WYXWbH9QLltM=)
4: pa01_MxunXxO8XYrIEX3UPE-FLY.crl (hash: k3fzrcPyy2fieC9uTOJvf5aGRg5YzwV9e9v98Br62ZY=)
5: wzJa8puNpbqZtViee8O6ZMY35aY.roa (hash: r+r4b7VNCUGLIiJjt8S3vPuSlnDDGK/RAqESNM+cPlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:9b:f9:53:d8:07:9c:df:91:ad:98:7b:0e:b4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Sep 22 00:01:10 2026 GMT
Not After : Sep 23 00:01:10 2026 GMT
Subject: CN=89a9d267577b4e491741dc1948cb3f11878802ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:53:59:fd:6d:ca:a8:80:36:d5:d0:34:47:
5c:1e:aa:7a:a6:db:95:87:d6:c0:31:9f:50:33:7d:
5c:d9:27:e2:68:5d:71:e0:b0:46:15:55:5f:45:26:
44:2a:2d:30:18:28:8f:b0:41:bb:22:3b:9b:26:90:
89:ea:6f:d0:87:c4:82:83:4f:c2:2a:8d:4d:3d:7f:
15:59:ca:da:78:16:b4:f5:b7:a1:9e:a0:2c:12:49:
a8:80:dc:ff:e2:99:72:a9:1d:d0:f5:19:e9:7e:90:
9b:45:50:00:44:0f:b3:38:19:f5:8d:b6:99:b0:16:
56:d4:87:5b:e5:03:d8:52:6b:98:85:ad:bc:21:db:
cc:d5:14:6e:84:03:54:7a:98:08:1d:d8:02:96:54:
7a:bc:6e:0d:90:ef:d2:61:bf:c2:57:55:dc:d6:d1:
1e:98:5b:ac:b4:93:81:b1:84:c6:57:c8:fc:3e:3f:
4a:6c:86:2a:4d:e4:c3:b0:da:64:23:42:32:3d:fd:
8e:54:20:4f:08:2e:49:7e:ed:b2:89:32:93:8f:46:
2c:df:dc:f3:15:29:9c:c0:9f:88:61:92:41:7e:75:
e3:13:f6:bf:98:56:7f:e7:6b:17:df:e7:12:91:61:
e1:d8:17:b5:f3:43:b0:6d:13:19:e5:fe:a9:f7:b1:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:D2:67:57:7B:4E:49:17:41:DC:19:48:CB:3F:11:87:88:02:AB
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8d:ac:c1:49:25:37:d8:77:05:42:85:3e:8a:18:b7:a4:ae:
a5:bc:61:f3:e5:ae:2e:15:b5:7b:e7:96:b4:cb:d5:a1:27:76:
cc:bd:88:18:53:44:25:8d:ea:ca:e4:55:d6:d7:ed:bb:a0:76:
f3:e8:7f:34:a0:e5:12:16:2a:77:4f:8c:e6:46:d6:65:a7:02:
fa:23:66:3c:22:6b:c2:5a:d8:77:af:b3:8d:26:df:08:42:c4:
37:32:df:d2:3d:55:b6:5c:a1:be:56:1d:0a:d6:d7:a8:b3:15:
70:ae:a3:e8:ae:f9:fd:68:a1:f1:96:a6:6a:1c:44:22:74:4d:
c2:02:44:ba:9d:02:f1:8a:f9:8a:17:bb:d7:15:f0:d7:9c:20:
f4:23:4b:7f:5b:d6:bc:29:ec:a6:f1:4b:8b:a6:99:08:40:48:
2e:0a:78:bc:b5:ed:98:f6:43:2c:c3:d3:4b:a1:c6:5a:86:35:
31:5f:16:4b:83:0f:4d:eb:5f:8d:e8:c7:4f:3e:cd:74:50:f6:
06:0e:84:86:62:78:77:b2:6f:7b:64:ee:72:b7:d7:0e:c9:e4:
0d:68:68:53:21:31:25:73:12:49:c1:97:be:48:89:2c:70:bc:
a1:9f:11:dc:b6:b2:e5:b9:40:ad:03:8e:d5:49:f7:af:ae:cc:
7c:5c:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:28:02 2026 by rpki-client