Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
File: pa01_MxunXxO8XYrIEX3UPE-FLY.mft (raw, json)
Hash identifier: FEFONb/zKlA7ShREWUt+aehIYF2vs3+T21lYVBJ+ZA0=
Subject key identifier: 9A:03:3C:D3:7F:88:59:BD:4F:90:0C:5F:5F:16:68:F2:B7:BB:4E:17
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 019F36AAB1C886E76AC162079A01EDB7FF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:03:04 +0000
Manifest this update: Mon 06 Jul 2026 09:03:04 +0000
Manifest next update: Tue 07 Jul 2026 09:03:04 +0000
Files and hashes: 1: 3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa (hash: dvct+dxdFU1Z+0nEPHjZJnc61yMaQjvQerVz4nTodfw=)
2: 8NQBTzVqOxdh672FdzJMDJYc68E.roa (hash: vTXSY8qXUfsBWc4TJHAhfsVdL2+DnUDe0Pz/Tu+Tjvg=)
3: f0XaU3JRJ6K9MeezgzrxaojrB30.roa (hash: ZXixPs38PlSZh6YZgQu2MOsCMeK7oZ2WYXWbH9QLltM=)
4: pa01_MxunXxO8XYrIEX3UPE-FLY.crl (hash: Zj6WXocj20kGttn6Jy7xvXdWI6mSjm8SoopLj1/t42A=)
5: wzJa8puNpbqZtViee8O6ZMY35aY.roa (hash: r+r4b7VNCUGLIiJjt8S3vPuSlnDDGK/RAqESNM+cPlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:b1:c8:86:e7:6a:c1:62:07:9a:01:ed:b7:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Jul 6 09:03:04 2026 GMT
Not After : Jul 7 09:03:04 2026 GMT
Subject: CN=9a033cd37f8859bd4f900c5f5f1668f2b7bb4e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:22:4b:fe:8d:d1:2b:52:2a:c1:5e:43:ee:
aa:21:4b:41:d3:c9:69:55:69:07:19:ac:e0:b7:12:
75:f3:e8:bc:89:ee:0c:de:5f:e9:52:43:cc:45:45:
97:12:4e:e6:bd:a9:91:45:3f:ce:45:30:34:c5:10:
88:a7:d8:3e:42:a1:ac:0b:c7:ac:56:c8:1b:c0:c1:
b4:de:12:d5:f4:4b:38:03:df:c1:ae:e0:07:23:de:
87:27:25:b9:6d:85:d3:ea:72:a7:db:a2:b5:7c:d1:
1d:24:41:83:41:83:c4:c6:1f:22:7b:56:c2:2f:bc:
a8:0e:4e:47:74:65:8d:f2:c8:84:81:95:47:32:e3:
ff:0a:80:96:8d:83:cd:b4:78:88:99:51:81:b3:c5:
bd:ce:5c:3c:f3:6a:e3:53:02:c6:7d:39:a0:7b:9c:
44:bf:5b:dc:51:03:2c:cf:80:54:9f:64:2f:36:59:
cf:1f:62:25:3b:cb:c6:74:94:7d:61:82:ed:b3:8c:
b0:0b:43:2b:82:9a:80:b0:87:51:b0:95:fd:8f:81:
dd:44:93:4c:2d:9d:53:a1:c4:0c:6b:d4:ba:5d:ec:
66:a3:9a:3c:2a:25:dc:81:08:30:2f:bc:66:c3:17:
44:6a:34:76:65:6e:b6:fb:8e:32:4b:b1:27:b7:c3:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:3C:D3:7F:88:59:BD:4F:90:0C:5F:5F:16:68:F2:B7:BB:4E:17
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:b2:bb:cd:f1:1d:0d:8a:a4:eb:89:1f:7a:31:24:01:11:
73:e6:4a:d2:ca:45:f3:0f:54:95:2a:07:36:4f:c2:40:8a:77:
0b:e0:3c:a9:d2:e1:62:2b:8f:58:32:20:18:d2:86:ec:f0:16:
e2:f4:78:ed:bb:b3:31:4a:e3:32:93:2d:e4:df:6c:41:bd:c6:
62:1a:58:38:73:be:0a:a6:39:96:7f:4f:82:5a:e2:d3:98:74:
71:f7:e9:9c:92:4f:81:b6:77:cf:e3:25:5c:06:5e:33:74:9b:
7c:00:be:73:3a:92:0a:e0:13:27:79:fc:3a:52:9f:0e:64:08:
fb:ba:39:a4:c3:8b:2e:78:34:ce:f6:23:f2:31:45:db:f9:7e:
ab:aa:f6:1a:5f:48:6f:a9:d4:56:c5:13:89:f1:1c:47:3f:59:
49:20:cd:56:c8:fe:26:52:8e:f0:42:39:ec:eb:94:76:80:8a:
17:3b:99:d5:a0:86:00:68:89:5a:90:4c:3c:aa:e8:0f:74:e7:
6c:6b:28:64:fe:dc:4d:69:47:09:5f:ac:a6:39:85:32:74:b3:
7c:e2:0f:41:6a:25:36:40:e2:73:08:00:2a:fe:59:bc:01:ed:
38:75:31:1e:fc:b7:a3:f2:54:6f:41:8d:1d:72:8c:35:a0:93:
ce:8c:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:04:06 2026 by rpki-client