Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: sR6yrd/XkEJiVsZIpV8Fd+q2t4Mw+jB0ZocdRQSlcqo=
Subject key identifier: 1D:D4:80:47:9C:17:E7:4E:FB:05:1D:D3:5D:21:A1:2A:B9:84:04:A6
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01A0815337549D89F90556640870B5E127B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1A52
Signing time: Tue 08 Sep 2026 14:01:49 +0000
Manifest this update: Tue 08 Sep 2026 14:01:49 +0000
Manifest next update: Wed 09 Sep 2026 14:01:49 +0000
Files and hashes: 1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: 6oLdQlqXaluo/JYI0VLEXqxlY8pt4rnRNjRe/lXzZL8=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:53:37:54:9d:89:f9:05:56:64:08:70:b5:e1:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Sep 8 14:01:49 2026 GMT
Not After : Sep 9 14:01:49 2026 GMT
Subject: CN=1dd480479c17e74efb051dd35d21a12ab98404a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:ba:99:de:3b:81:44:93:c4:0d:4a:e6:b8:
6a:db:28:46:b6:91:09:da:84:67:20:9e:c0:a5:e7:
4b:f3:19:77:08:1c:5e:fe:d6:b5:df:58:8e:18:39:
13:a5:11:7d:d3:85:28:17:51:73:78:f9:73:3c:b6:
85:bd:66:f0:8f:99:87:84:95:86:86:55:e6:14:d0:
ae:be:1c:e9:59:fd:15:e1:fd:a0:3c:cd:b2:a4:20:
9c:90:b6:c7:bf:08:59:ad:49:98:5a:7d:30:64:cd:
6c:a1:73:b2:84:07:45:29:93:e6:43:ee:58:0c:61:
75:81:a8:60:d4:0c:be:51:17:d3:9f:9f:51:95:03:
02:8e:65:b8:a1:e8:96:8c:0e:a5:9b:c4:13:f8:1e:
e6:48:e6:b3:e0:37:1f:bd:b1:af:78:50:57:5c:db:
3f:d0:ac:6f:95:d8:64:16:3f:74:c9:74:46:ba:7b:
2f:32:cc:9d:23:ac:6d:d6:eb:73:e8:2c:77:f8:17:
7e:d6:11:b7:bd:c7:88:26:14:0d:2b:60:09:5b:ff:
cb:a3:ed:a2:56:20:25:59:96:57:f6:40:dd:ee:6d:
e6:c7:3c:aa:91:c5:f3:39:75:81:15:ca:8d:4e:c2:
d2:66:ca:5a:b6:96:94:73:ed:65:27:dc:60:a5:fd:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:80:47:9C:17:E7:4E:FB:05:1D:D3:5D:21:A1:2A:B9:84:04:A6
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:be:7c:c6:64:15:78:bb:16:bd:61:6f:83:1e:e8:25:e6:53:
cc:86:00:bf:a6:34:fb:07:a3:e6:c2:84:df:75:4b:51:5d:2d:
66:3b:1e:8f:40:70:a7:b7:65:1c:07:57:26:1f:7c:ec:e2:ba:
8d:c5:64:ea:1d:75:92:df:d5:23:fa:0c:64:d8:b0:b3:5b:72:
40:0e:ac:e2:c4:4f:2e:0a:d9:e6:98:f7:c5:52:8e:fa:6a:29:
62:e6:92:25:14:3f:9c:01:04:18:b3:34:18:1d:94:e8:dc:72:
fe:70:94:b0:26:28:76:b0:91:54:31:58:80:71:fd:54:f8:4e:
0a:10:33:e1:54:1a:f5:96:58:33:f1:a7:d1:c4:43:f3:7b:9f:
e3:af:07:a2:62:06:33:b2:6d:b0:48:22:e7:0c:29:15:2a:23:
69:83:dc:b1:61:b5:d3:45:ca:7e:dd:a8:10:a2:fa:75:f5:01:
71:e0:a3:a7:80:3b:d7:a7:e9:61:69:36:61:17:a9:2f:7a:72:
2c:89:ca:b1:a0:45:a9:32:6d:54:ff:7e:05:51:60:c5:49:31:
c0:a7:c8:8e:cd:03:8e:e1:3d:90:ea:3b:18:a1:01:de:f5:af:
23:59:19:04:15:d9:f9:e8:8c:91:c0:c7:d2:32:e3:f5:a9:06:
11:85:8e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCBUzdUnYn5BVZkCHC14Se1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjYwOTA4MTQwMTQ5WhcNMjYwOTA5MTQwMTQ5WjAzMTEwLwYDVQQD
EygxZGQ0ODA0NzljMTdlNzRlZmIwNTFkZDM1ZDIxYTEyYWI5ODQwNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10m6md47gUSTxA1K5rhq2yhGtpEJ
2oRnIJ7ApedL8xl3CBxe/ta131iOGDkTpRF904UoF1FzePlzPLaFvWbwj5mHhJWG
hlXmFNCuvhzpWf0V4f2gPM2ypCCckLbHvwhZrUmYWn0wZM1soXOyhAdFKZPmQ+5Y
DGF1gahg1Ay+URfTn59RlQMCjmW4oeiWjA6lm8QT+B7mSOaz4DcfvbGveFBXXNs/
0KxvldhkFj90yXRGunsvMsydI6xt1utz6Cx3+Bd+1hG3vceIJhQNK2AJW//Lo+2i
ViAlWZZX9kDd7m3mxzyqkcXzOXWBFcqNTsLSZspatpaUc+1lJ9xgpf1pKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3UgEecF+dO+wUd010hoSq5hASmMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL58xmQV
eLsWvWFvgx7oJeZTzIYAv6Y0+wej5sKE33VLUV0tZjsej0Bwp7dlHAdXJh987OK6
jcVk6h11kt/VI/oMZNiws1tyQA6s4sRPLgrZ5pj3xVKO+mopYuaSJRQ/nAEEGLM0
GB2U6Nxy/nCUsCYodrCRVDFYgHH9VPhOChAz4VQa9ZZYM/Gn0cRD83uf468HomIG
M7JtsEgi5wwpFSojaYPcsWG100XKft2oEKL6dfUBceCjp4A716fpYWk2YRepL3py
LInKsaBFqTJtVP9+BVFgxUkxwKfIjs0DjuE9kOo7GKEB3vWvI1kZBBXZ+eiMkcDH
0jLj9akGEYWOPQ==
-----END CERTIFICATE-----
Generated at Wed Sep 9 01:12:06 2026 by rpki-client