Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
File: pa01_MxunXxO8XYrIEX3UPE-FLY.mft (raw, json)
Hash identifier: 1KEpx3+adWvW1e8U85IS+2S31N5MPHsN3Dln1KnfsdY=
Subject key identifier: 69:B5:B5:75:26:12:51:86:60:79:24:99:96:51:65:FF:D7:29:61:AB
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 01A020553545D89E38B5441CDC972DB78145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:00:50 +0000
Manifest this update: Thu 20 Aug 2026 18:00:50 +0000
Manifest next update: Fri 21 Aug 2026 18:00:50 +0000
Files and hashes: 1: 3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa (hash: dvct+dxdFU1Z+0nEPHjZJnc61yMaQjvQerVz4nTodfw=)
2: 8NQBTzVqOxdh672FdzJMDJYc68E.roa (hash: vTXSY8qXUfsBWc4TJHAhfsVdL2+DnUDe0Pz/Tu+Tjvg=)
3: f0XaU3JRJ6K9MeezgzrxaojrB30.roa (hash: ZXixPs38PlSZh6YZgQu2MOsCMeK7oZ2WYXWbH9QLltM=)
4: pa01_MxunXxO8XYrIEX3UPE-FLY.crl (hash: 6o8zfSbaMvupdmNc+K5Htx6MV8zWqggJzXZ0lQ/32Uk=)
5: wzJa8puNpbqZtViee8O6ZMY35aY.roa (hash: r+r4b7VNCUGLIiJjt8S3vPuSlnDDGK/RAqESNM+cPlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:35:45:d8:9e:38:b5:44:1c:dc:97:2d:b7:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Aug 20 18:00:50 2026 GMT
Not After : Aug 21 18:00:50 2026 GMT
Subject: CN=69b5b5752612518660792499965165ffd72961ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:38:58:ea:0f:9e:d4:57:6a:1b:1c:5e:61:
55:14:bd:bd:5b:89:4e:cb:e7:c6:b6:f8:09:ca:25:
85:93:ae:89:68:19:47:dd:84:35:bc:2e:85:46:0e:
ae:18:24:37:9e:af:c9:18:d3:3f:aa:c3:b4:d1:d8:
ff:21:aa:52:fc:33:e3:c0:e2:07:4c:85:a2:8d:7a:
42:03:d2:be:66:40:63:5a:50:2d:7c:12:8e:b9:89:
54:fb:e8:bc:5a:b8:6a:cd:12:a1:32:33:cd:ee:15:
4e:80:b2:db:65:e0:79:80:20:56:6b:79:24:99:69:
49:28:db:84:7e:15:25:91:df:45:ca:17:a6:12:98:
16:c2:1f:a9:74:86:fd:f0:9b:c6:8e:99:47:b9:f5:
c9:86:61:2f:50:1c:82:3e:24:af:7e:97:b6:7a:1a:
99:2a:4f:88:34:91:6a:b2:cd:de:63:d0:38:42:42:
44:5a:d8:f9:c7:fe:cb:20:d3:bd:d2:ba:31:f5:de:
7c:3e:91:7c:8e:e8:07:d1:fc:c4:d4:f4:ba:90:e1:
ae:86:09:95:6a:d8:df:c8:95:bc:24:91:3a:5d:aa:
16:8d:71:c7:3c:63:35:d1:75:9b:26:9f:98:b5:fc:
e0:90:7c:ec:97:be:ce:15:49:37:ca:bb:99:81:0e:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:B5:75:26:12:51:86:60:79:24:99:96:51:65:FF:D7:29:61:AB
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a3:1d:80:31:07:04:7b:2c:80:49:4c:00:ce:99:e5:3b:0f:
61:8c:60:83:c7:68:cf:a8:fd:54:50:d0:e8:98:d5:14:2e:c3:
0c:85:ae:43:73:d8:dd:aa:3a:5c:ee:60:05:90:39:8a:f0:78:
ea:6f:2e:16:9b:74:35:7b:28:01:c2:6e:37:3b:25:e2:bc:cc:
56:de:71:20:3d:e8:0c:ee:e5:a5:27:55:46:42:1b:83:7a:f0:
f5:bb:7c:24:d3:24:a2:5b:fa:49:14:e4:9b:62:7d:f5:f9:b6:
58:8f:a6:8a:29:9a:0e:f4:62:64:11:f7:26:52:a6:71:e1:9f:
74:75:7f:11:22:20:17:0e:bd:be:49:1f:0f:e4:cf:b4:33:85:
c3:df:27:09:fb:c2:86:df:8e:72:5a:39:1c:0b:1f:53:7a:c2:
37:70:1b:7c:c9:a6:f2:af:e5:5e:93:d3:99:5e:20:92:88:66:
eb:c6:8a:63:0d:d4:2f:13:29:22:0b:02:bb:0b:57:6e:3e:18:
7c:6f:af:3b:97:fd:60:fd:fd:95:6c:2c:d7:0d:f2:85:e5:d5:
8c:3d:69:6c:2c:6d:f6:28:8d:cb:b5:72:2b:34:6a:bc:2c:26:
a2:cc:3c:1b:5b:30:5c:aa:78:6f:dc:33:93:f8:cf:81:fd:5e:
84:fe:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:59 2026 by rpki-client