Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: DVv2aqirv/vLrkL81yD/DTkNxS29iHv6RdRwSMQQSNU=
Subject key identifier: 5C:07:D4:9B:E5:21:4E:85:B1:8C:33:CE:8D:DC:9F:23:65:37:6B:D0
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 01A0E3D06A0BD0D20122D5780F4B18C4D24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: 0266
Signing time: Sun 27 Sep 2026 17:01:21 +0000
Manifest this update: Sun 27 Sep 2026 17:01:21 +0000
Manifest next update: Mon 28 Sep 2026 17:01:21 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: SfGEJvympM/9OFwnz/bGaJISAWvtSw+M623Zq6mYbbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:6a:0b:d0:d2:01:22:d5:78:0f:4b:18:c4:d2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Sep 27 17:01:21 2026 GMT
Not After : Sep 28 17:01:21 2026 GMT
Subject: CN=5c07d49be5214e85b18c33ce8ddc9f2365376bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:fd:35:90:83:9c:a7:77:dd:69:3c:bb:b4:
20:c4:00:53:3d:24:d3:cb:21:03:e4:cf:0b:3e:c6:
08:08:3e:15:4f:ab:3a:d5:de:15:73:4e:4d:ba:37:
da:6a:37:23:e8:fd:e8:00:0a:05:af:a4:f1:c4:06:
b9:9c:19:b0:4e:69:12:63:b7:48:8d:e4:32:25:78:
a2:ef:de:93:77:3c:08:32:ff:8c:13:61:68:80:9a:
7c:01:36:0c:c7:01:52:44:03:d0:48:40:4a:03:80:
34:bd:ce:48:35:b0:b6:dd:a6:67:a4:ea:65:25:6f:
45:22:50:e6:e0:81:ae:05:2d:e1:de:f3:2d:ac:6d:
a8:a5:11:6b:e7:48:73:42:02:f9:67:ea:8c:83:19:
79:79:c5:12:d5:95:cf:e2:f9:1b:12:d3:d4:2f:0f:
b7:43:52:0b:5d:1b:6c:0d:d5:9c:d5:cc:66:4d:c1:
51:11:b5:e0:00:62:7e:38:ca:af:85:1e:7c:90:54:
f8:64:f2:24:4e:ef:32:00:27:99:23:16:48:90:85:
fd:28:72:02:dc:ff:eb:ab:e9:9b:35:b8:28:ed:ca:
e3:ff:0c:52:5b:ae:fd:4a:97:57:d1:0d:2c:1d:2f:
6b:94:1d:b2:08:a0:9e:c7:1d:c5:26:58:6d:08:79:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:D4:9B:E5:21:4E:85:B1:8C:33:CE:8D:DC:9F:23:65:37:6B:D0
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:08:df:bb:67:ab:2c:e0:b4:f8:b0:0b:d3:d5:07:0d:d0:1f:
7a:e8:e0:b0:d0:b4:cb:69:4e:a6:38:fd:e9:5f:0e:7a:21:06:
c2:d0:8f:13:5b:c9:17:78:29:22:13:7b:21:48:0a:f5:7c:2d:
e4:86:be:ac:89:4d:56:e2:82:97:18:97:2e:a8:24:52:fe:61:
81:0c:b8:49:d1:7d:d5:5b:df:0a:db:46:82:8b:81:c2:63:d3:
90:ac:de:7c:52:84:44:fb:70:2f:51:a8:e6:91:d3:7a:7a:45:
9c:ac:b6:46:3b:5d:45:be:4f:be:5f:bf:b0:dc:b9:fd:c7:12:
ca:91:b7:a3:33:28:36:34:0b:23:d4:f5:35:08:5e:b2:f5:c2:
29:a4:07:05:85:9d:99:ac:6a:ba:18:95:29:07:d6:d9:3d:1b:
b3:d3:f3:60:61:ef:67:05:b7:b7:68:74:80:f3:73:d6:ef:7e:
42:de:ac:47:55:06:5f:d0:53:1d:90:b3:6d:5b:6d:53:15:b0:
88:6f:dd:72:70:3f:dd:5b:17:6d:78:97:ce:d9:e9:15:4d:e3:
87:2c:ac:5e:28:c6:49:29:3c:09:29:df:58:b1:e6:a0:05:08:
6b:d1:6d:b7:94:76:34:cd:50:01:ca:b0:5d:86:e8:aa:aa:79:
3c:ba:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:57:14 2026 by rpki-client