Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
File: pXuo21YwYkxlOiY5F0s1kM4EFAY.mft (raw, json)
Hash identifier: AtKiW3OjdYDuhKXXOMaqF/qnY9ZP4DIepMsVUU871j8=
Subject key identifier: 34:C7:97:24:25:07:88:13:D1:43:E1:35:61:BE:37:7D:A6:88:75:E3
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 019DDCC33F6A0E4EA953E4EF2C7720158AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
Manifest number: 4F
Signing time: Thu 30 Apr 2026 05:01:16 +0000
Manifest this update: Thu 30 Apr 2026 05:01:16 +0000
Manifest next update: Fri 01 May 2026 05:01:16 +0000
Files and hashes: 1: 8yeFiATSyAXfiOazb7-TVzpxgPA.roa (hash: /+IrcoQvrMrLoWvFl+U97S495MR+5y6wumyj8v/0eso=)
2: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (hash: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=)
3: pXuo21YwYkxlOiY5F0s1kM4EFAY.crl (hash: TsWn7aZNV+B1PWSjTQAB/MR7D+9rnNotSZ3H7x3Bz6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:3f:6a:0e:4e:a9:53:e4:ef:2c:77:20:15:8a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Apr 30 05:01:16 2026 GMT
Not After : May 1 05:01:16 2026 GMT
Subject: CN=34c7972425078813d143e13561be377da68875e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:1a:75:cf:8c:51:51:a6:bb:e1:02:34:5b:
5e:a0:69:0d:3b:9c:03:b1:2d:b7:84:5f:a4:5d:73:
f8:70:83:9c:bd:69:b5:9c:2b:8a:8b:aa:6a:91:03:
44:3b:0f:22:4e:49:d4:3c:05:ee:55:6a:f9:ef:e4:
e0:af:4b:c2:9d:e4:1b:9e:f9:90:b2:7d:c3:74:7b:
a6:26:7e:83:38:86:3b:f3:b9:07:29:47:b6:cd:7b:
7f:f4:e1:9c:39:3d:07:5f:85:21:db:b7:3a:ee:71:
9a:e7:1c:c9:41:79:f7:db:d6:d5:ef:cb:84:77:23:
e7:47:74:a4:43:ad:4a:93:a8:ff:43:7a:75:8a:94:
5b:83:02:bd:be:45:db:40:24:eb:38:e4:d8:8b:f3:
9c:e7:0a:7e:3c:d5:b7:66:d0:40:7e:e2:77:5c:45:
37:36:ab:43:90:79:ea:47:d9:17:08:27:d4:5f:81:
80:b6:03:40:2b:27:38:35:d1:da:a6:c2:1f:80:df:
58:ad:28:17:c3:6d:f6:10:d3:01:68:9f:d1:e3:30:
57:80:f4:63:a2:62:11:fb:79:75:d6:51:2d:f9:3f:
1e:fb:b2:73:ca:28:b1:b5:33:42:88:9a:65:00:d4:
b1:51:41:3d:82:13:fb:b6:18:a4:cc:c0:9e:15:11:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C7:97:24:25:07:88:13:D1:43:E1:35:61:BE:37:7D:A6:88:75:E3
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:67:d2:67:46:54:66:63:de:06:d0:7f:0c:b7:88:e1:fa:aa:
11:5d:14:69:d3:40:85:2c:d6:b2:cc:14:a7:89:e8:22:f5:a2:
b4:9e:ad:54:44:ba:c7:bc:46:60:4a:7d:18:ae:fc:65:83:c9:
a4:4f:40:dc:79:c3:2e:86:af:b8:37:2b:a6:de:96:b0:e4:25:
83:4e:bd:c2:71:9e:58:43:fb:77:18:e2:2e:8f:19:5f:2a:44:
d5:c6:7f:79:a3:63:61:da:cb:cb:88:9e:e7:25:42:b0:8c:89:
65:b2:63:7b:4e:ad:00:00:55:30:2e:fb:58:e2:b3:e4:20:86:
d8:4a:80:c8:db:2c:f8:54:5d:d8:39:ba:a9:89:c8:5a:06:de:
64:6c:2b:12:24:1c:dd:a3:ee:03:85:12:a7:32:66:cf:29:2a:
39:a3:1d:2f:4b:94:2d:73:81:24:20:7d:24:49:da:07:50:6d:
3f:03:5f:4f:ea:5a:05:66:af:3e:51:c6:5d:0f:d0:02:48:bc:
56:68:b6:e2:32:63:4f:e9:93:2f:c6:fa:e0:61:62:0f:69:da:
d3:22:28:ab:30:dd:a7:2f:35:a0:f8:d3:70:a5:6d:fb:a7:37:
98:e2:4f:1f:0f:5b:41:96:2e:b6:7e:d0:26:80:5e:8d:46:ae:
ba:6a:7d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3cwz9qDk6pU+TvLHcgFYr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2JhOGRiNTYzMDYyNGM2NTNhMjYzOTE3NGIzNTkwY2Uw
NDE0MDYwHhcNMjYwNDMwMDUwMTE2WhcNMjYwNTAxMDUwMTE2WjAzMTEwLwYDVQQD
EygzNGM3OTcyNDI1MDc4ODEzZDE0M2UxMzU2MWJlMzc3ZGE2ODg3NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Eadc+MUVGmu+ECNFteoGkNO5wD
sS23hF+kXXP4cIOcvWm1nCuKi6pqkQNEOw8iTknUPAXuVWr57+Tgr0vCneQbnvmQ
sn3DdHumJn6DOIY787kHKUe2zXt/9OGcOT0HX4Uh27c67nGa5xzJQXn329bV78uE
dyPnR3SkQ61Kk6j/Q3p1ipRbgwK9vkXbQCTrOOTYi/Oc5wp+PNW3ZtBAfuJ3XEU3
NqtDkHnqR9kXCCfUX4GAtgNAKyc4NdHapsIfgN9YrSgXw232ENMBaJ/R4zBXgPRj
omIR+3l11lEt+T8e+7JzyiixtTNCiJplANSxUUE9ghP7thikzMCeFRGVmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTHlyQlB4gT0UPhNWG+N32miHXjMB8GA1UdIwQY
MBaAFKV7qNtWMGJMZTomORdLNZDOBBQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMt
ZTIzOWM5YTlmNjc0LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mZWExYjktZmMxYy00OTYwLWI5MDMtZTIzOWM5YTlmNjc0
LzEvcFh1bzIxWXdZa3hsT2lZNUYwczFrTTRFRkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmfSZ0ZU
ZmPeBtB/DLeI4fqqEV0UadNAhSzWsswUp4noIvWitJ6tVES6x7xGYEp9GK78ZYPJ
pE9A3HnDLoavuDcrpt6WsOQlg069wnGeWEP7dxjiLo8ZXypE1cZ/eaNjYdrLy4ie
5yVCsIyJZbJje06tAABVMC77WOKz5CCG2EqAyNss+FRd2Dm6qYnIWgbeZGwrEiQc
3aPuA4USpzJmzykqOaMdL0uULXOBJCB9JEnaB1BtPwNfT+paBWavPlHGXQ/QAki8
Vmi24jJjT+mTL8b64GFiD2na0yIoqzDdpy81oPjTcKVt+6c3mOJPHw9bQZYutn7Q
JoBejUauump9SQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:42:27 2026 by rpki-client