Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: d7XDib/8z7yxzTuClmk6GutDvdJ4Rdo55l51JNGvCfw=
Subject key identifier: DF:9A:8E:97:40:C0:D0:53:E5:F4:68:78:BA:1D:96:8E:B0:C0:CD:A0
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 01A176953A9781CB975CE6E707BFF373D39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 1A53
Signing time: Mon 26 Oct 2026 05:00:53 +0000
Manifest this update: Mon 26 Oct 2026 05:00:53 +0000
Manifest next update: Tue 27 Oct 2026 05:00:53 +0000
Files and hashes: 1: 2dj72cUvrZqEtdbBtFlSnYa4QKM.roa (hash: 0SrJodFZpH/UDhRtcg5lODDwzwQCCfVOAxUCuTTXZOI=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: apUl4y8GDBvPHkj6Yg4DsoHCp7XHjqt2WdRK0mZsg4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:3a:97:81:cb:97:5c:e6:e7:07:bf:f3:73:d3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: Oct 26 05:00:53 2026 GMT
Not After : Oct 27 05:00:53 2026 GMT
Subject: CN=df9a8e9740c0d053e5f46878ba1d968eb0c0cda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:d8:59:4b:dd:de:61:ef:c0:32:9f:27:a2:
2b:50:84:35:a0:83:46:0e:67:42:50:97:43:db:d2:
6d:95:81:06:d1:8b:ca:16:f0:56:1a:69:80:54:f2:
84:f7:a1:b4:5d:f2:75:2c:01:e6:78:e0:5b:71:85:
f8:b5:66:da:ea:f4:28:5d:45:cb:db:ea:93:5b:69:
bd:f7:80:db:4a:65:ca:6e:3a:7f:f8:e3:05:ad:86:
47:c2:90:e3:73:21:6e:cb:56:3a:91:02:1e:12:9c:
4f:13:64:b5:e3:35:b9:f6:54:70:f1:80:5a:27:49:
1a:f1:51:e6:5a:59:06:eb:99:9f:b0:28:20:2d:e2:
c0:6d:bf:ac:58:fd:0e:7f:4e:78:af:cc:91:6e:a7:
53:a7:07:1d:77:cd:4b:09:7b:c8:97:4f:04:24:2c:
d1:b0:e0:02:2b:02:28:78:5d:f3:77:a5:f1:67:5a:
5c:60:50:db:c6:ee:43:65:9c:3c:4e:23:cb:36:28:
60:be:80:3f:ef:b2:a0:cc:9c:d9:17:3a:2b:59:be:
a4:44:ac:dc:ec:98:bc:04:ed:49:e4:62:5f:95:bc:
a7:68:e9:31:b1:a3:3c:16:15:30:dd:45:59:31:e9:
45:26:31:f9:2f:42:00:ab:75:22:6c:98:76:20:5c:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:8E:97:40:C0:D0:53:E5:F4:68:78:BA:1D:96:8E:B0:C0:CD:A0
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:43:05:8c:30:c7:05:13:82:cb:33:44:62:82:08:b9:2a:ee:
d5:fc:e4:b8:7f:9b:57:f8:01:b6:6b:57:3f:c9:79:ff:2c:9a:
b8:00:92:d8:6b:37:85:59:7b:4e:74:75:51:af:95:90:ff:47:
0f:2b:93:d3:69:d8:ec:92:ec:e1:a5:89:7d:6c:17:a3:16:84:
e3:72:1a:f7:22:a6:af:82:8e:8a:fa:ae:3a:04:f7:c5:b8:3c:
eb:4b:ed:44:70:d4:23:78:57:10:1e:1c:5a:f6:db:e2:2e:95:
e8:94:cc:57:4f:99:e7:62:e3:b9:b0:ab:7d:74:b0:02:c2:31:
b6:63:64:48:d9:66:9a:5a:f0:c7:a2:3e:0b:49:55:18:7a:fe:
e6:2a:bf:6f:0e:09:ac:a6:2b:13:6e:85:7e:68:72:1d:b7:0a:
0a:8a:c5:96:c2:14:66:c8:fa:3e:44:e2:01:e8:46:7a:a4:ee:
96:2e:a9:41:2d:a1:ee:47:b7:13:cd:cc:a7:2d:24:e2:f0:ed:
73:cc:5f:be:36:ff:74:76:ee:14:9d:0a:f5:b5:01:14:4d:de:
5f:8d:67:34:3c:b0:c0:c4:85:d5:a7:ab:4f:68:3c:34:78:80:
26:fa:10:0e:90:e4:8a:e3:15:9a:a1:5e:e4:d9:ef:02:ee:e2:
fb:7d:cd:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2lTqXgcuXXObnB7/zc9OaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMTcyNDM5NTk5ZDdkYTUyNTc5Nzg5OWJmMjEzYjhlNjM1
NTQ5MTQwHhcNMjYxMDI2MDUwMDUzWhcNMjYxMDI3MDUwMDUzWjAzMTEwLwYDVQQD
EyhkZjlhOGU5NzQwYzBkMDUzZTVmNDY4NzhiYTFkOTY4ZWIwYzBjZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz3YWUvd3mHvwDKfJ6IrUIQ1oING
DmdCUJdD29JtlYEG0YvKFvBWGmmAVPKE96G0XfJ1LAHmeOBbcYX4tWba6vQoXUXL
2+qTW2m994DbSmXKbjp/+OMFrYZHwpDjcyFuy1Y6kQIeEpxPE2S14zW59lRw8YBa
J0ka8VHmWlkG65mfsCggLeLAbb+sWP0Of054r8yRbqdTpwcdd81LCXvIl08EJCzR
sOACKwIoeF3zd6XxZ1pcYFDbxu5DZZw8TiPLNihgvoA/77KgzJzZFzorWb6kRKzc
7Ji8BO1J5GJflbynaOkxsaM8FhUw3UVZMelFJjH5L0IAq3UibJh2IFzbEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+ajpdAwNBT5fRoeLodlo6wwM2gMB8GA1UdIwQY
MBaAFD8XJDlZnX2lJXl4mb8hO45jVUkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEt
ODg3MzMxZWZiNzE1LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85ZjlhYTktMDljMC00OGNjLWIwYTEtODg3MzMxZWZiNzE1
LzEvUHhja09WbWRmYVVsZVhpWnZ5RTdqbU5WU1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEMFjDDH
BROCyzNEYoIIuSru1fzkuH+bV/gBtmtXP8l5/yyauACS2Gs3hVl7TnR1Ua+VkP9H
DyuT02nY7JLs4aWJfWwXoxaE43Ia9yKmr4KOivquOgT3xbg860vtRHDUI3hXEB4c
Wvbb4i6V6JTMV0+Z52LjubCrfXSwAsIxtmNkSNlmmlrwx6I+C0lVGHr+5iq/bw4J
rKYrE26FfmhyHbcKCorFlsIUZsj6PkTiAehGeqTuli6pQS2h7ke3E83Mpy0k4vDt
c8xfvjb/dHbuFJ0K9bUBFE3eX41nNDywwMSF1aerT2g8NHiAJvoQDpDkiuMVmqFe
5NnvAu7i+33N0A==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:23:28 2026 by rpki-client