Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: kB/68t0/KLKFEU7MvgL/Qqq+A1b+QI2kyRO2BtbBlys=
Subject key identifier: AB:73:3E:F2:7D:1D:64:AF:46:C0:46:34:81:B0:A4:6B:6D:D7:AD:71
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 019EFC84395DFF860675FAD5D1D17443F5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: E4
Signing time: Thu 25 Jun 2026 02:03:04 +0000
Manifest this update: Thu 25 Jun 2026 02:03:04 +0000
Manifest next update: Fri 26 Jun 2026 02:03:04 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: frYp3oYfb8wWdfLqj92kmwPY/B+QGBMqUjuU9Cl250I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:84:39:5d:ff:86:06:75:fa:d5:d1:d1:74:43:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Jun 25 02:03:04 2026 GMT
Not After : Jun 26 02:03:04 2026 GMT
Subject: CN=ab733ef27d1d64af46c0463481b0a46b6dd7ad71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:ca:e1:8f:10:ac:eb:c7:40:23:33:08:8b:
1b:25:9b:ea:7a:7d:93:64:01:e1:4b:f5:69:56:83:
7b:cc:48:ec:10:0d:fc:5a:ff:24:b6:4e:5f:d2:99:
c1:6a:a5:08:93:9f:e9:f7:a2:8f:6d:2f:fb:7c:3b:
b2:75:75:f1:21:ea:52:e4:90:9f:76:f7:eb:1b:4d:
ab:cb:b9:e6:b6:e7:61:0b:ac:7c:e2:96:b3:2b:29:
bb:09:ad:c8:1f:63:eb:31:d0:04:ce:a6:ee:94:79:
80:b1:4b:e2:b6:59:6e:79:51:68:59:b0:e5:d8:a0:
ef:35:fd:5f:0e:72:01:cf:93:a4:4d:42:8d:0f:b8:
00:24:5f:75:2d:36:97:16:35:04:0f:2f:ad:ab:23:
07:5d:b4:dc:44:3e:6a:6c:8f:e8:37:95:f1:ab:59:
02:ac:46:27:5a:4c:a6:60:e0:b9:b3:b5:e0:3c:73:
5c:77:08:39:d2:79:e0:22:78:e2:78:7b:be:b6:00:
cd:79:c5:cd:7f:45:d3:ae:7b:cb:fc:e3:1f:62:f9:
1f:06:4b:65:f2:c5:26:32:fc:0a:03:ee:6d:04:7f:
58:55:a4:64:d8:d4:ae:47:2f:2a:71:e7:43:d5:a8:
2a:3f:1c:1c:40:65:2b:fa:a7:48:b0:2c:85:2b:23:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:73:3E:F2:7D:1D:64:AF:46:C0:46:34:81:B0:A4:6B:6D:D7:AD:71
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6b:47:d5:fe:a6:11:49:0d:6f:83:b6:a1:9a:2d:15:e8:7b:
eb:d6:93:f8:ae:6b:f8:24:74:b8:90:a7:c7:b1:ae:38:43:24:
09:bf:2b:54:ed:f8:7a:ff:b2:8b:ab:7f:da:c6:ef:9b:14:6c:
d1:a3:32:ea:0c:9b:d6:95:24:79:6c:e8:ec:34:31:9a:59:68:
40:cd:66:c5:e3:56:de:33:3a:b0:71:34:e2:86:0b:54:ae:f0:
3d:00:2a:63:ca:ce:77:f9:0b:7b:e1:4c:c9:2f:71:cb:a2:86:
35:56:e9:ae:0b:d7:d8:92:bf:bd:9f:ab:49:fb:98:4b:68:4b:
32:a8:6b:4b:75:9d:f1:7c:31:c4:06:19:30:c5:4f:2e:1e:b9:
38:ec:e5:f7:99:2a:dc:c3:d3:09:9b:5f:0d:a6:51:2c:6a:0e:
ea:9e:d6:8b:aa:8b:64:72:44:7c:d1:57:5f:b8:82:9a:88:c8:
d2:97:61:ea:6c:23:a2:9b:b0:9e:51:7e:70:f0:da:52:ce:71:
4d:71:5d:7d:58:7d:16:96:12:10:54:d1:50:88:80:3f:1f:73:
c3:86:af:2f:03:53:cc:8f:25:ed:bc:f7:cb:2b:cf:84:e9:92:
1e:ca:a8:47:e0:04:f0:3b:23:f1:b7:11:69:f0:e9:84:12:d9:
c7:eb:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:42:46 2026 by rpki-client