Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: 0rReupcHyHKU+EjW+6sERwafMHRBmN2dyR3qypEesLo=
Subject key identifier: 0D:FC:B7:03:3D:19:88:C1:11:7F:59:17:1C:A5:02:23:C8:7B:2E:90
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 019FF97E9990DC1C40752CBBB7F91093ACE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: 0167
Signing time: Thu 13 Aug 2026 05:00:51 +0000
Manifest this update: Thu 13 Aug 2026 05:00:51 +0000
Manifest next update: Fri 14 Aug 2026 05:00:51 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: y0i2xJ+jS0W6MWFWfmha9w20hBjiLyC9hExEQE/Osx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7e:99:90:dc:1c:40:75:2c:bb:b7:f9:10:93:ac:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Aug 13 05:00:51 2026 GMT
Not After : Aug 14 05:00:51 2026 GMT
Subject: CN=0dfcb7033d1988c1117f59171ca50223c87b2e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:07:00:ad:db:f6:dd:b8:d2:91:b8:07:c2:
a6:ce:ea:ae:d7:29:0b:21:92:95:32:44:26:6b:f3:
99:62:37:70:9d:56:6d:f9:21:fc:10:3d:df:7a:cd:
51:04:3f:94:3d:d7:db:60:9f:ab:a1:d2:2d:1d:1a:
e3:5d:bf:73:c7:d4:da:f5:eb:c2:b8:b3:fc:e8:24:
65:29:29:d2:6e:b9:ad:36:3b:9e:85:a0:12:25:ec:
8c:92:f6:47:76:cc:37:19:e7:5c:c9:19:06:91:47:
b1:94:8e:cb:89:12:88:20:83:17:e7:bf:38:66:d8:
e6:5d:69:83:a3:af:ce:0e:75:21:6a:07:ea:71:8e:
02:9b:18:8d:11:4b:50:5d:e3:d5:df:d6:cc:6f:7e:
dc:46:6b:bb:17:ea:1c:4f:da:4f:53:fe:ae:9d:01:
7e:25:e6:d1:76:97:10:63:9b:56:44:bc:95:58:0d:
17:40:eb:3b:a4:71:a9:a0:c2:d2:52:d9:20:71:cd:
2a:f3:8f:a5:e3:6c:3c:9c:84:21:a0:30:b7:b0:81:
34:3b:27:2b:4c:5b:92:f9:63:94:1f:78:8e:0e:8c:
af:91:bd:45:0e:41:cf:d2:5a:ea:79:8a:72:03:11:
e4:ed:c7:9d:59:06:b3:05:2c:f8:3d:bc:f7:2b:34:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:B7:03:3D:19:88:C1:11:7F:59:17:1C:A5:02:23:C8:7B:2E:90
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:35:d5:58:06:2b:04:f3:7d:c9:6c:bb:b8:90:92:9e:49:fa:
fa:f1:ad:d4:15:56:ab:97:8c:1d:ea:cd:f5:59:b5:34:03:a3:
a5:64:9e:d1:34:18:aa:c4:3b:e2:82:0f:03:de:02:65:53:9e:
e7:ed:ad:17:79:bd:0f:cc:ac:9b:77:74:fa:ec:1e:d7:89:f2:
b5:21:0b:c2:94:9f:da:f1:2f:6b:9d:17:02:b5:15:84:db:21:
26:c4:52:4e:64:07:fe:9d:9e:28:84:fd:95:ea:d1:d1:53:04:
f2:08:72:07:f0:20:2c:9a:a6:06:cf:60:a0:7b:b7:03:4a:cb:
f8:d4:f8:af:bf:4e:b1:23:d6:6d:9b:33:02:b1:f9:dd:92:20:
77:23:47:fb:74:ea:e2:1a:22:2a:d7:b8:4c:b6:54:7b:8d:34:
fe:dd:44:91:63:0f:61:2d:58:b6:2c:84:1c:49:70:26:0c:65:
fa:52:f0:3e:f7:74:87:bf:40:c6:4c:f8:55:b9:66:71:e9:81:
9a:82:e3:2a:f5:f9:9c:99:d2:c3:60:1b:3e:8c:16:11:68:8a:
81:b1:51:6f:d9:33:e8:02:3f:69:75:c8:94:df:7b:31:e1:d6:
3f:dc:61:0f:b3:3d:58:cb:33:69:ca:c0:04:75:e9:4e:54:25:
09:00:f1:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5fpmQ3BxAdSy7t/kQk6zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2JhOGRiNTYzMDYyNGM2NTNhMjYzOTE3NGIzNTkwY2Uw
NDE0MDYwHhcNMjYwODEzMDUwMDUxWhcNMjYwODE0MDUwMDUxWjAzMTEwLwYDVQQD
EygwZGZjYjcwMzNkMTk4OGMxMTE3ZjU5MTcxY2E1MDIyM2M4N2IyZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zwHAK3b9t240pG4B8Kmzuqu1ykL
IZKVMkQma/OZYjdwnVZt+SH8ED3fes1RBD+UPdfbYJ+rodItHRrjXb9zx9Ta9evC
uLP86CRlKSnSbrmtNjuehaASJeyMkvZHdsw3GedcyRkGkUexlI7LiRKIIIMX5784
ZtjmXWmDo6/ODnUhagfqcY4CmxiNEUtQXePV39bMb37cRmu7F+ocT9pPU/6unQF+
JebRdpcQY5tWRLyVWA0XQOs7pHGpoMLSUtkgcc0q84+l42w8nIQhoDC3sIE0Oycr
TFuS+WOUH3iODoyvkb1FDkHP0lrqeYpyAxHk7cedWQazBSz4Pbz3KzQ/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA38twM9GYjBEX9ZFxylAiPIey6QMB8GA1UdIwQY
MBaAFKV7qNtWMGJMZTomORdLNZDOBBQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMt
ZTIzOWM5YTlmNjc0LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMtZTIzOWM5YTlmNjc0
LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjXVWAYr
BPN9yWy7uJCSnkn6+vGt1BVWq5eMHerN9Vm1NAOjpWSe0TQYqsQ74oIPA94CZVOe
5+2tF3m9D8ysm3d0+uwe14nytSELwpSf2vEva50XArUVhNshJsRSTmQH/p2eKIT9
lerR0VME8ghyB/AgLJqmBs9goHu3A0rL+NT4r79OsSPWbZszArH53ZIgdyNH+3Tq
4hoiKte4TLZUe400/t1EkWMPYS1YtiyEHElwJgxl+lLwPvd0h79Axkz4VblmcemB
moLjKvX5nJnSw2AbPowWEWiKgbFRb9kz6AI/aXXIlN97MeHWP9xhD7M9WMszacrA
BHXpTlQlCQDxxw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:55 2026 by rpki-client