Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: yTC65xBJwj4Wz1od454VncA1SG/NFtXiIKsqlqhYi1I=
Subject key identifier: 90:59:9E:EB:F7:0F:5D:99:94:18:90:B2:B4:76:CA:8D:88:0B:E4:97
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 01A0E519DDD8B59317F589001990DBAC81A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: 01E1
Signing time: Sun 27 Sep 2026 23:01:12 +0000
Manifest this update: Sun 27 Sep 2026 23:01:12 +0000
Manifest next update: Mon 28 Sep 2026 23:01:12 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: Kd7y5akZgEK2gbljn8JFaxYvnzT5XbwTBxPL2VjDghQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:19:dd:d8:b5:93:17:f5:89:00:19:90:db:ac:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Sep 27 23:01:12 2026 GMT
Not After : Sep 28 23:01:12 2026 GMT
Subject: CN=90599eebf70f5d99941890b2b476ca8d880be497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:ab:d1:be:0a:ae:dd:a4:22:42:8e:58:9c:
92:3b:95:ad:20:08:95:7c:af:4f:06:5b:1c:99:ec:
2b:d6:01:70:09:d6:4d:ca:a1:81:b4:27:52:c0:92:
cc:16:15:de:b9:15:fb:68:d5:fd:af:70:56:36:1f:
cd:80:49:a2:63:da:78:fe:80:2c:b6:dd:63:6b:ff:
76:54:19:57:3f:19:bd:90:01:c6:e2:fc:91:c0:4f:
cb:2c:1f:17:11:14:17:a2:5a:60:28:38:c2:da:28:
8c:72:a8:b8:56:18:e1:07:e5:4d:91:b2:4a:ca:04:
16:82:2d:d0:f3:44:90:a9:d0:67:51:73:26:51:86:
83:af:89:b0:d3:23:cd:13:9f:fe:58:e9:aa:48:2e:
e5:c8:81:eb:37:04:8e:64:04:d3:a8:93:40:66:36:
6a:58:40:54:da:ab:74:61:a4:53:c7:ef:e7:da:28:
65:c7:db:b8:cb:80:27:ff:e6:4c:24:c2:02:d5:4f:
7f:62:4d:ef:a9:2f:3d:4f:4f:4d:72:de:5d:a5:59:
b4:d4:8e:2f:5f:55:95:80:18:c9:a3:e3:3f:26:c6:
df:5b:0d:6f:dc:6b:0f:a0:1b:a7:b4:27:4f:a9:29:
f7:a2:f4:e0:14:6d:d1:77:83:2b:3c:eb:2e:52:ce:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:59:9E:EB:F7:0F:5D:99:94:18:90:B2:B4:76:CA:8D:88:0B:E4:97
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fd:40:03:b5:76:81:a5:b4:26:94:f9:73:4e:7b:d1:1b:fa:
02:79:ba:47:6d:15:0f:a3:c4:fd:7f:de:6f:97:96:57:37:49:
4e:c9:b5:8a:f2:79:ed:5f:bd:62:c7:82:ff:4e:99:68:4a:96:
f5:14:f5:9e:d6:40:f3:dc:c3:d6:bb:ab:5e:0b:d0:40:e1:61:
b5:09:a0:0d:95:6f:64:a8:eb:5c:9a:82:33:15:8f:07:37:1c:
86:bb:44:1f:75:f1:85:d7:09:86:ad:6a:33:53:02:89:e2:c8:
40:91:91:27:d4:7c:98:b7:be:fa:ba:b6:4e:3f:36:04:fb:0a:
10:dd:45:b8:75:53:0b:4a:15:c3:22:7d:40:12:22:ab:35:3c:
68:5d:e1:6f:d6:b4:aa:b0:11:b8:3e:7d:b8:d0:66:6a:7f:0e:
ac:5f:51:3c:d2:17:4e:bd:14:bc:ba:ec:2a:c8:a7:c8:5d:0c:
1d:ad:42:a6:88:66:bd:e3:83:c6:1a:f5:7b:5b:04:86:fa:98:
eb:be:f7:c2:2f:55:01:ee:31:66:2e:63:b6:70:02:0e:62:e6:
22:f3:98:06:76:ef:5e:75:43:54:f8:bc:c7:cb:3f:42:c6:cf:
f5:29:33:dc:10:b8:0b:49:4d:17:b1:79:07:cf:b6:5e:0e:41:
56:9f:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:37:13 2026 by rpki-client