Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: m3Parxs6id1pDNZzOpUvZR4aajqUvsa6bUizxCJdF6g=
Subject key identifier: 2D:A8:4A:2C:46:EB:72:B9:C5:51:A3:1B:C4:96:48:4D:CD:4D:B2:A5
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 01A124D4852C74DED42E00C16C29AD229BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: 0202
Signing time: Sat 10 Oct 2026 08:01:09 +0000
Manifest this update: Sat 10 Oct 2026 08:01:09 +0000
Manifest next update: Sun 11 Oct 2026 08:01:09 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: EMubzjH4l3IDdfzS6L6/37vuEGEbHCnTGJAqcoMzNdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:85:2c:74:de:d4:2e:00:c1:6c:29:ad:22:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Oct 10 08:01:09 2026 GMT
Not After : Oct 11 08:01:09 2026 GMT
Subject: CN=2da84a2c46eb72b9c551a31bc496484dcd4db2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:36:df:8b:51:a4:21:58:f8:2f:30:9a:f6:
51:a4:7d:65:51:4d:f9:cc:77:e1:c5:36:9a:50:d2:
ca:df:86:86:a9:96:bf:59:ae:5e:ab:b3:ef:38:c8:
9d:19:f0:d5:77:0d:63:90:02:95:34:a3:7d:9c:f9:
83:4f:24:90:e4:1e:6d:f7:33:f5:a6:8c:6e:22:a8:
f5:43:89:53:30:55:13:0e:d0:55:1b:4f:6c:01:ba:
de:e2:b4:c6:a2:ed:37:36:52:b7:67:89:ba:a8:8b:
d6:90:7f:4b:ab:84:ed:8b:ef:b8:f9:3a:50:3b:2d:
f5:c5:7e:c5:b4:73:a6:e1:f0:d7:b6:48:0f:d4:22:
c5:09:3a:5e:90:11:56:17:ae:99:2e:5f:0c:c7:f9:
b4:27:83:2c:d1:16:3c:af:4a:2c:93:d4:ad:82:19:
25:4e:ed:5b:c5:55:4c:75:c4:dc:71:de:ed:de:de:
49:89:c0:dd:8c:ba:9c:6c:9e:c1:46:33:d8:d1:17:
f7:69:9e:4b:2a:eb:2c:a0:db:f2:7d:a6:6a:96:1a:
76:fe:49:f5:86:08:34:ca:fa:0e:c8:db:c8:d1:39:
e8:9d:92:8f:c2:ff:d8:57:e1:41:46:3b:ce:e4:72:
2c:50:08:5f:74:36:74:0f:5c:71:ee:d1:7e:a2:60:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:4A:2C:46:EB:72:B9:C5:51:A3:1B:C4:96:48:4D:CD:4D:B2:A5
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ee:ae:97:0e:e2:a9:d7:81:75:1c:73:f4:63:61:eb:18:f4:
c1:3c:d9:a4:44:3f:28:80:91:92:52:d6:1a:5f:2c:ff:ff:b9:
f3:45:51:ee:33:9f:07:2b:cf:aa:ca:2b:91:14:a0:29:0a:06:
ca:98:e4:a9:10:12:0e:6b:5c:26:b6:4c:c1:3d:3b:d0:8d:d3:
75:5c:a1:08:d7:00:ed:19:13:21:9e:74:fb:f0:8a:fc:4d:93:
22:48:96:bb:1b:46:a7:8d:f6:e5:db:9e:63:44:0e:0a:7b:cf:
d8:6d:4d:1e:6f:15:27:75:89:a7:96:22:3a:89:48:51:4c:b0:
e9:9e:06:03:77:a2:97:e9:66:03:23:64:29:28:33:06:46:a9:
7f:de:c0:aa:92:bc:15:b1:84:33:cc:65:79:8a:01:b8:9c:ca:
8b:7d:2e:42:17:56:0c:b4:e5:96:ac:4d:f0:24:37:96:ca:cc:
07:9e:56:00:33:95:d0:8d:08:f4:7b:38:8e:65:77:d1:5c:3c:
6f:1b:71:f4:bd:04:e4:43:61:13:70:80:73:08:75:f0:bd:8c:
8f:a6:34:7b:eb:05:e9:21:2c:66:0a:26:93:92:ff:a3:00:76:
95:2f:06:49:9a:2a:62:42:40:00:2f:ee:97:0e:56:db:29:f6:
ae:4f:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:15:35 2026 by rpki-client