Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: CsIGear7Aj33YGb13IvUdrq7Ov1KEjNRyIX+49w7PQI=
Subject key identifier: A4:0E:1A:DA:DF:0C:E0:CE:AD:47:8A:B8:A7:1A:2B:71:A7:9F:8A:54
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 019DA379258EDF348D28B8E6D989B6C62028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: B7
Signing time: Sun 19 Apr 2026 02:01:58 +0000
Manifest this update: Sun 19 Apr 2026 02:01:58 +0000
Manifest next update: Mon 20 Apr 2026 02:01:58 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: l7rtWzrKYfi75pdKGJpQjk/tOfzN3QhIPY+4ut1Xfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:25:8e:df:34:8d:28:b8:e6:d9:89:b6:c6:20:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Apr 19 02:01:58 2026 GMT
Not After : Apr 20 02:01:58 2026 GMT
Subject: CN=a40e1adadf0ce0cead478ab8a71a2b71a79f8a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:87:19:36:06:0b:7a:98:5e:38:20:99:0c:
71:3a:bd:69:c3:8e:f1:34:eb:51:4f:91:b4:cb:df:
8d:da:c2:8f:72:31:ca:ae:ee:af:75:58:fd:8c:74:
1e:b3:2a:0e:f8:57:60:01:c0:18:ad:9a:a3:54:17:
fd:91:93:fa:01:18:70:a3:0b:88:3c:4e:4b:c3:26:
19:9d:5a:db:ba:26:19:41:af:ea:fb:cb:4b:ca:8b:
22:d5:72:92:ac:e1:c1:09:f4:af:68:9c:47:bd:0d:
a1:f8:9c:1c:b4:b3:71:8c:68:34:ce:88:b4:2b:98:
25:f2:c7:95:9c:d5:50:34:a1:a1:21:c3:8c:26:8c:
94:a6:86:48:f2:cc:dd:58:72:69:2c:c4:8d:a0:ee:
6b:a9:82:23:73:3b:45:73:2e:95:54:a7:fc:4b:0a:
9c:a0:27:4f:cb:b7:a6:2b:9a:ea:b0:3d:6e:db:29:
ca:7d:aa:6b:fc:d9:ef:fd:57:2d:d9:43:c0:c4:ec:
a2:81:96:aa:a4:cb:2b:f2:73:1a:94:66:53:37:4f:
41:e2:32:6a:1e:ba:2b:15:bb:dc:ee:16:6a:04:11:
7c:61:b5:95:7a:38:ee:a8:c4:f8:25:40:64:19:62:
d4:75:c0:df:d9:32:5f:e6:50:f8:8d:ad:45:5f:dc:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:1A:DA:DF:0C:E0:CE:AD:47:8A:B8:A7:1A:2B:71:A7:9F:8A:54
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:b6:0e:71:6f:2d:88:fd:84:52:ed:57:37:e2:38:10:99:
64:1e:c8:ec:fd:35:32:83:3a:b3:c5:37:d8:31:02:44:e2:01:
20:54:cf:16:dd:d4:f1:50:44:4c:2e:d5:76:8b:be:c2:5f:67:
df:2c:74:95:95:80:90:12:74:dd:1a:89:c2:43:8c:17:60:54:
e9:51:51:7d:7f:1b:c2:c0:69:ac:82:93:b4:38:e2:fc:7e:fc:
85:1c:7b:a0:bc:ae:ab:de:17:d1:af:24:b5:a8:1e:91:21:ab:
d7:51:b3:c3:c9:d6:cc:73:6d:5e:ea:25:58:2c:8d:19:e2:a8:
36:e7:cd:f5:3d:eb:f1:24:99:86:82:31:3d:2d:68:ad:71:c0:
12:7e:2c:c6:24:a9:7a:94:17:59:4b:35:f0:c8:10:5b:23:37:
f0:c0:7b:45:06:bb:1b:e5:32:db:62:b0:10:67:7e:b7:32:e4:
ba:55:eb:2c:a5:6e:02:ea:c7:a4:40:83:3d:aa:b7:bd:9a:8b:
83:eb:eb:c2:b2:93:ae:d0:da:e2:24:66:fb:ab:38:b5:7c:20:
58:84:1d:7b:b9:fa:7d:6b:bd:cc:31:e6:13:dc:8e:51:96:c7:
42:79:94:b2:db:e0:18:c3:d6:96:c9:bc:ee:42:88:19:cf:9e:
fa:4f:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:12 2026 by rpki-client