Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: NSAFZFK1vOcEljW3BMEr7zabGhUKumf8w2F1jJK4qNU=
Subject key identifier: 91:B6:98:C6:C0:22:BE:03:6E:7B:FD:2A:E8:4D:76:42:0F:68:E0:B3
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01A17D73346F2627CB91DD73C0663C261555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1AD5
Signing time: Tue 27 Oct 2026 13:01:04 +0000
Manifest this update: Tue 27 Oct 2026 13:01:04 +0000
Manifest next update: Wed 28 Oct 2026 13:01:04 +0000
Files and hashes: 1: FWUxyacyiKqIoSJEQ1c1Sq_jmcg.roa (hash: i0xM3c9+wGN/ik6EJX4mc3yIwy7razkTWsrudIwxLa8=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: pJDde0hqBPbQ3xD115i+3HZIoNhFKP98ybMgRZzVWyE=)
3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:34:6f:26:27:cb:91:dd:73:c0:66:3c:26:15:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Oct 27 13:01:04 2026 GMT
Not After : Oct 28 13:01:04 2026 GMT
Subject: CN=91b698c6c022be036e7bfd2ae84d76420f68e0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:1c:ed:d4:af:b8:d8:9e:84:02:05:f7:f6:
84:e8:45:88:cb:10:81:87:a1:26:e4:c0:f2:43:cb:
2f:da:b4:f9:27:74:ee:aa:dc:8e:6e:d8:a0:4b:91:
d7:f9:29:11:c0:54:e0:6e:cf:6c:e2:4d:50:f0:51:
49:70:13:93:74:ad:f3:1d:fd:2f:49:0a:9f:1f:6a:
62:50:1d:42:e7:d2:14:32:5e:fb:8d:66:a8:2b:76:
19:3b:69:ae:aa:dc:39:7e:88:da:81:88:53:48:ec:
f8:7b:36:7a:63:e2:be:87:14:23:ee:8b:6f:ca:64:
e6:26:28:2a:ed:97:43:41:a5:04:f8:31:98:47:7b:
eb:b0:81:5a:62:27:a8:97:88:49:6a:fe:fc:7a:d8:
34:25:bd:bc:99:44:0c:4b:ad:be:e6:e2:30:ed:10:
d1:b3:28:fb:1e:cb:e6:0b:9c:7b:53:29:36:b1:bd:
da:43:4e:17:80:15:0d:2c:56:cd:19:3c:f3:32:c8:
9e:b7:b0:d1:d1:b4:7e:b8:3e:d2:5e:06:0f:08:20:
6e:19:05:ac:21:1d:92:92:8f:eb:70:27:37:42:34:
cd:5c:a4:6f:87:74:0b:9b:33:ac:c5:dd:0e:12:70:
b5:d7:93:3b:f2:25:65:01:d1:b0:5f:02:d9:08:03:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B6:98:C6:C0:22:BE:03:6E:7B:FD:2A:E8:4D:76:42:0F:68:E0:B3
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2a:3e:f3:66:28:2f:a2:1a:2c:a3:a1:24:7b:51:cb:02:2d:
47:11:45:52:9b:71:64:35:a1:ff:ac:44:e2:35:6b:7b:fb:60:
98:28:29:46:4a:06:1f:3b:9c:84:1e:68:a7:36:9a:cd:6c:c8:
c4:f8:15:3d:c3:96:ff:c2:c7:d8:1a:e3:db:78:0e:0a:6b:67:
d4:38:03:17:9c:16:42:69:c3:64:7b:d6:fe:a4:19:e6:c1:e5:
8c:59:33:64:74:ce:85:06:44:f2:0c:fb:d5:8b:71:73:20:cd:
22:ab:55:1a:d1:67:69:4c:b2:10:f5:13:42:ad:7d:42:cb:a4:
6f:82:8a:c3:ba:f1:ac:06:bc:24:e0:b9:b6:a6:46:e3:d0:cc:
40:d1:91:ec:f3:67:e5:80:01:4e:a6:e9:49:e9:63:25:c2:d2:
11:59:c8:85:18:4f:66:1a:14:8c:d9:5c:2b:91:b6:08:3c:a5:
8d:c0:6f:33:a6:2d:b6:f8:81:b4:a1:ac:19:9b:2f:42:10:7f:
59:f3:1e:df:34:4d:f1:0e:56:7b:a1:90:c1:4d:4c:47:b4:5e:
e9:6f:bb:16:df:0d:60:89:4a:ea:b2:7c:44:2d:79:67:30:b4:
8f:a5:00:71:13:64:84:61:cd:93:e2:30:e3:1f:f0:fd:bc:39:
0e:66:df:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9czRvJifLkd1zwGY8JhVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjYxMDI3MTMwMTA0WhcNMjYxMDI4MTMwMTA0WjAzMTEwLwYDVQQD
Eyg5MWI2OThjNmMwMjJiZTAzNmU3YmZkMmFlODRkNzY0MjBmNjhlMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD4c7dSvuNiehAIF9/aE6EWIyxCB
h6Em5MDyQ8sv2rT5J3TuqtyObtigS5HX+SkRwFTgbs9s4k1Q8FFJcBOTdK3zHf0v
SQqfH2piUB1C59IUMl77jWaoK3YZO2muqtw5fojagYhTSOz4ezZ6Y+K+hxQj7otv
ymTmJigq7ZdDQaUE+DGYR3vrsIFaYieol4hJav78etg0Jb28mUQMS62+5uIw7RDR
syj7HsvmC5x7Uyk2sb3aQ04XgBUNLFbNGTzzMsiet7DR0bR+uD7SXgYPCCBuGQWs
IR2Sko/rcCc3QjTNXKRvh3QLmzOsxd0OEnC115M78iVlAdGwXwLZCAO4twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG2mMbAIr4Dbnv9KuhNdkIPaOCzMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyo+82Yo
L6IaLKOhJHtRywItRxFFUptxZDWh/6xE4jVre/tgmCgpRkoGHzuchB5opzaazWzI
xPgVPcOW/8LH2Brj23gOCmtn1DgDF5wWQmnDZHvW/qQZ5sHljFkzZHTOhQZE8gz7
1YtxcyDNIqtVGtFnaUyyEPUTQq19Qsukb4KKw7rxrAa8JOC5tqZG49DMQNGR7PNn
5YABTqbpSeljJcLSEVnIhRhPZhoUjNlcK5G2CDyljcBvM6YttviBtKGsGZsvQhB/
WfMe3zRN8Q5We6GQwU1MR7Re6W+7Ft8NYIlK6rJ8RC15ZzC0j6UAcRNkhGHNk+Iw
4x/w/bw5DmbfEg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:34:31 2026 by rpki-client