Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: AR76lYzp4iRtaPza31O0EFdRoC6jBVIi+imqVMXRgTQ=
Subject key identifier: BC:2B:F9:57:5B:EC:D1:EB:90:EB:2F:8D:9E:38:C3:02:60:76:06:0E
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 019D9B19CB11C871699FF5525A8A6043A198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: 2D
Signing time: Fri 17 Apr 2026 11:00:51 +0000
Manifest this update: Fri 17 Apr 2026 11:00:51 +0000
Manifest next update: Sat 18 Apr 2026 11:00:51 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: 0UajXM9rm52N+Ww4nh+9Pp4A5dY5IyiNP7ojXYwN8jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:cb:11:c8:71:69:9f:f5:52:5a:8a:60:43:a1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Apr 17 11:00:51 2026 GMT
Not After : Apr 18 11:00:51 2026 GMT
Subject: CN=bc2bf9575becd1eb90eb2f8d9e38c3026076060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:9d:32:3a:49:de:b5:65:27:19:d8:3c:21:
69:7e:dd:8f:9a:17:8f:37:ff:9c:fb:51:fd:66:94:
f9:b9:93:d7:03:51:e6:7f:eb:0d:56:03:a6:d4:aa:
b2:88:ee:9b:24:36:41:56:6f:a2:5a:5e:d1:bb:35:
a8:4c:d8:ec:77:9d:b3:14:be:63:c2:26:73:18:d8:
6a:e1:a9:ed:d6:7f:68:d4:22:c6:0c:1c:3c:12:8b:
9a:77:da:ab:b5:97:14:62:c0:7f:6b:ac:3d:90:ea:
a3:ef:69:d9:14:12:ce:51:4a:fe:6d:4c:09:fd:3d:
72:64:65:0d:b3:e1:07:f8:53:0f:81:90:e2:c6:93:
b7:a6:79:41:55:b5:33:76:8a:45:29:6c:cb:d8:21:
7d:99:79:f6:54:2c:e7:22:ce:1b:2d:83:19:90:09:
26:6a:89:10:ec:70:75:4a:34:dd:22:3d:3c:68:86:
f1:b1:ce:26:76:e1:14:22:3d:13:1d:89:ad:a1:52:
96:77:2c:d0:22:e7:a5:b5:e4:b8:b2:d3:83:ce:a6:
65:56:07:db:42:ac:f0:57:82:25:ff:6a:38:ba:e8:
60:12:ae:87:c8:f1:b5:3d:34:b2:d5:38:42:62:af:
ed:46:f8:dd:bb:bb:41:79:55:75:d2:fc:e7:48:d7:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:F9:57:5B:EC:D1:EB:90:EB:2F:8D:9E:38:C3:02:60:76:06:0E
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:97:ca:14:26:25:3c:42:02:86:d6:d4:82:76:a8:d7:d7:3d:
98:c9:51:f7:7d:b3:3b:f7:15:d4:ed:d0:ef:0b:cc:ca:aa:16:
dc:5d:f4:eb:0e:2d:cf:3b:eb:cb:b4:71:98:50:d4:39:4f:9d:
88:e4:02:d2:78:0f:22:77:d5:7e:d7:b0:75:d0:d7:bc:7b:8b:
10:3e:a7:74:2e:60:48:99:30:60:e4:1b:de:24:a5:34:ce:28:
fd:f4:7a:eb:a1:8e:18:da:4d:f6:8b:7e:e3:79:e5:ff:4c:c1:
28:3e:d8:79:2a:64:10:be:97:e8:ee:52:52:21:6f:d2:f4:4c:
11:0d:dd:fe:bc:07:04:4c:6b:5e:2a:2b:80:d3:85:b4:4a:f4:
35:2f:73:41:44:42:29:8e:91:bb:3d:dc:04:d3:f8:e6:ab:ee:
d4:25:ef:41:14:10:e2:68:2f:e7:2e:8f:0c:48:24:77:e4:7b:
b7:fa:d7:52:e1:41:a6:b3:a9:db:1b:1c:ac:ef:a6:a5:b9:bf:
6e:9f:9c:c0:b5:b7:4f:b4:eb:e5:c1:e7:60:17:06:4d:7e:4f:
53:43:dd:1a:64:75:fe:26:15:37:e3:3d:8c:c4:50:58:90:93:
45:62:f2:4a:be:65:c9:32:37:02:14:61:75:68:84:03:be:ce:
c3:96:05:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGcsRyHFpn/VSWopgQ6GYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2JhOGRiNTYzMDYyNGM2NTNhMjYzOTE3NGIzNTkwY2Uw
NDE0MDYwHhcNMjYwNDE3MTEwMDUxWhcNMjYwNDE4MTEwMDUxWjAzMTEwLwYDVQQD
EyhiYzJiZjk1NzViZWNkMWViOTBlYjJmOGQ5ZTM4YzMwMjYwNzYwNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKKdMjpJ3rVlJxnYPCFpft2PmheP
N/+c+1H9ZpT5uZPXA1Hmf+sNVgOm1KqyiO6bJDZBVm+iWl7RuzWoTNjsd52zFL5j
wiZzGNhq4ant1n9o1CLGDBw8Eouad9qrtZcUYsB/a6w9kOqj72nZFBLOUUr+bUwJ
/T1yZGUNs+EH+FMPgZDixpO3pnlBVbUzdopFKWzL2CF9mXn2VCznIs4bLYMZkAkm
aokQ7HB1SjTdIj08aIbxsc4mduEUIj0THYmtoVKWdyzQIuelteS4stODzqZlVgfb
QqzwV4Il/2o4uuhgEq6HyPG1PTSy1ThCYq/tRvjdu7tBeVV10vznSNf69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwr+Vdb7NHrkOsvjZ44wwJgdgYOMB8GA1UdIwQY
MBaAFKV7qNtWMGJMZTomORdLNZDOBBQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMt
ZTIzOWM5YTlmNjc0LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMtZTIzOWM5YTlmNjc0
LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJfKFCYl
PEIChtbUgnao19c9mMlR932zO/cV1O3Q7wvMyqoW3F306w4tzzvry7RxmFDUOU+d
iOQC0ngPInfVftewddDXvHuLED6ndC5gSJkwYOQb3iSlNM4o/fR666GOGNpN9ot+
43nl/0zBKD7YeSpkEL6X6O5SUiFv0vRMEQ3d/rwHBExrXiorgNOFtEr0NS9zQURC
KY6Ruz3cBNP45qvu1CXvQRQQ4mgv5y6PDEgkd+R7t/rXUuFBprOp2xscrO+mpbm/
bp+cwLW3T7Tr5cHnYBcGTX5PU0PdGmR1/iYVN+M9jMRQWJCTRWLySr5lyTI3AhRh
dWiEA77Ow5YFmg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:54:18 2026 by rpki-client