Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: OLod5Ipu7pQG+W1F0+pvTsh0qBal7yUXDD9zf8z3UCk=
Subject key identifier: 78:54:BB:CD:91:32:CE:A8:8B:E5:61:B4:1C:C0:83:41:4B:F6:91:58
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 019DA566C836779216F59642469CFCFC34E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: B8
Signing time: Sun 19 Apr 2026 11:01:09 +0000
Manifest this update: Sun 19 Apr 2026 11:01:09 +0000
Manifest next update: Mon 20 Apr 2026 11:01:09 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: bq/HiEbrfjSZGeSTM73rAovAL4Tk420DewTE36cCuJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:c8:36:77:92:16:f5:96:42:46:9c:fc:fc:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Apr 19 11:01:09 2026 GMT
Not After : Apr 20 11:01:09 2026 GMT
Subject: CN=7854bbcd9132cea88be561b41cc083414bf69158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:7e:1e:e4:e7:59:f0:44:86:d5:2e:62:f2:
19:34:a8:29:78:a4:cf:1d:4c:b7:de:97:12:5f:2c:
6e:ce:7c:1d:75:1b:41:89:35:d1:a1:d4:52:cf:93:
03:86:99:66:7b:11:1a:dc:df:05:eb:ff:5f:ae:f0:
90:2b:7f:70:18:42:ac:5f:c3:c3:a8:42:98:6d:88:
10:a7:18:4e:32:40:8b:c7:c0:58:bc:e0:13:2b:61:
ae:9f:15:10:62:c1:f2:93:2e:fb:2d:22:4e:de:f7:
c2:90:34:2a:33:ab:70:34:c9:59:c5:26:61:d3:83:
4f:ed:91:76:d9:64:28:e1:09:79:f2:57:8f:97:80:
ec:02:e1:9d:21:bd:4e:45:95:7a:69:7b:c8:97:53:
5f:a3:a4:0c:10:5f:75:8c:33:e5:f4:ec:43:f7:75:
ee:44:30:e7:6f:67:b7:07:c1:59:a8:e9:2a:62:f3:
04:00:3e:63:8c:95:6c:cc:ea:de:08:f4:81:11:b4:
15:1a:28:d8:68:f2:12:db:72:63:a4:b4:ef:05:dc:
10:71:ce:b5:51:36:97:c0:78:47:65:93:93:d4:16:
6c:e7:52:fd:c6:fb:22:11:c8:ef:32:63:29:f0:86:
87:8b:54:9a:0f:2a:68:d1:0d:fe:27:3a:cd:8c:6f:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:54:BB:CD:91:32:CE:A8:8B:E5:61:B4:1C:C0:83:41:4B:F6:91:58
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e8:46:d6:b6:ec:88:35:15:96:b5:d9:b3:e5:6a:9f:9b:49:
81:8d:df:23:49:18:a4:fe:8b:ac:fc:c1:67:22:de:bc:83:7e:
0c:c7:ca:b2:02:09:8c:af:49:cb:d7:32:50:0f:d7:a8:f2:25:
06:72:69:a7:d6:28:3b:f7:f4:51:34:51:52:09:b9:61:be:8f:
47:a0:af:40:50:0a:01:14:2e:9c:82:1e:97:7f:15:b7:2d:e3:
03:eb:2f:8e:dd:43:d0:c1:97:ed:24:cd:a6:9e:84:50:11:e9:
e0:89:14:05:ef:d9:4f:7d:63:80:62:bd:87:5e:56:7f:2b:a5:
ed:83:f9:2f:55:c7:cb:81:f2:1d:cb:30:09:f6:85:4b:e3:40:
11:25:75:96:62:1a:25:0a:65:a4:c4:4a:db:1a:3a:0e:c8:ad:
e5:01:6e:f7:98:05:16:57:73:f2:f9:ad:1e:78:d4:bd:1e:27:
d1:ea:6f:2d:ff:09:04:58:d3:c4:6c:6f:ee:6f:d2:c3:41:fe:
24:2e:6b:ad:ef:34:f4:3e:08:78:cb:67:9d:0c:ef:bc:93:0c:
6c:c4:ad:f1:46:e3:7d:07:71:e7:d0:63:37:b4:a2:ea:80:21:
9c:4d:61:05:86:5a:b8:14:42:26:df:90:1f:fb:be:9b:04:83:
3e:f9:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:16:44 2026 by rpki-client