Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: 1y4oyAf8XHwfc5ljlr68q6t5SNRIidUK+mCNU8wj2g0=
Subject key identifier: 86:99:27:9E:CA:88:65:BB:D0:0D:E2:67:AF:E3:49:D2:45:86:24:7C
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 019FA9079D10AC68597677BD8E7A27703825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: 01C3
Signing time: Tue 28 Jul 2026 14:01:16 +0000
Manifest this update: Tue 28 Jul 2026 14:01:16 +0000
Manifest next update: Wed 29 Jul 2026 14:01:16 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: tFqe6R7LiYlPl9AJ9PcVb8wOyQ6r1Ld/NPV+h1W9LH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:9d:10:ac:68:59:76:77:bd:8e:7a:27:70:38:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Jul 28 14:01:16 2026 GMT
Not After : Jul 29 14:01:16 2026 GMT
Subject: CN=8699279eca8865bbd00de267afe349d24586247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:a4:ed:dd:88:3b:e0:c7:20:1c:97:1b:8f:
1b:37:3e:c1:70:82:7d:f7:29:bf:20:62:a2:b6:44:
43:b9:01:2d:b3:87:3f:f5:4b:81:32:88:e7:ed:7d:
15:47:7a:d2:71:e9:cf:fe:30:9f:b4:5e:2b:5c:e6:
59:e0:26:70:17:fe:3f:79:e5:14:2b:e3:d0:cd:4d:
ac:a0:05:00:76:c0:57:77:36:4f:23:31:c7:9f:ad:
6a:80:82:2f:cd:3f:04:01:23:7c:e3:e0:fd:1f:d3:
bb:f1:00:41:4e:09:7d:ba:dc:83:1d:bb:13:81:a6:
55:44:99:88:ef:92:5a:a6:22:53:70:e0:e3:0d:00:
0c:e4:0b:a6:09:28:c4:07:96:b3:08:83:9a:07:39:
d9:bf:cb:36:e4:7e:6a:34:d1:17:b4:70:50:03:f2:
fc:48:6a:d0:c8:c5:eb:d0:12:4a:10:3b:10:44:21:
70:c2:48:a4:75:fd:b4:c8:97:50:32:74:6b:2c:db:
e3:ec:55:3c:0e:58:8a:5c:85:eb:74:17:8e:53:03:
58:d6:bd:0f:e4:43:78:42:c9:79:0a:90:36:0b:a3:
67:3c:62:33:a8:1c:4a:08:82:77:6a:29:58:bb:33:
71:27:30:70:bf:89:52:bc:99:7d:cd:2f:66:22:0e:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:99:27:9E:CA:88:65:BB:D0:0D:E2:67:AF:E3:49:D2:45:86:24:7C
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:32:9e:0b:30:86:e0:16:98:75:4b:c7:17:7e:85:4f:73:e1:
c2:f0:20:1e:f9:30:6b:37:c5:61:30:c4:ae:a7:82:b4:88:04:
1e:39:fa:73:11:1a:ef:04:a8:83:47:47:83:ef:ee:47:a3:e5:
c5:0b:59:71:02:d9:69:0d:49:fe:23:51:e5:3d:c1:65:65:b9:
5a:9a:49:63:bf:e7:a9:10:6d:c7:98:4f:42:fa:8e:de:73:88:
2f:75:d2:aa:4e:31:d2:e7:5e:b5:ec:e5:a8:cb:79:e4:ab:e3:
2c:05:bf:e8:c2:21:da:8b:2c:b2:9c:02:29:90:bb:53:3a:d1:
ba:e4:0c:db:c6:49:81:77:3d:4f:50:81:77:cf:63:6a:81:31:
30:9d:24:2a:18:df:5e:98:b9:57:6b:4e:58:7e:9e:43:75:21:
ef:81:25:3a:ad:a1:34:d3:67:96:de:2e:72:06:85:12:b6:6d:
b9:f2:91:a4:f6:3f:76:b7:a0:0d:38:e0:0a:af:e2:f5:42:ae:
dc:2c:90:8a:08:89:c7:f5:2a:90:10:32:6a:07:59:d9:27:49:
7b:b2:57:79:e6:4e:b9:93:76:79:32:a5:a0:de:50:ab:c5:85:
5e:24:74:2e:e3:65:d1:3c:2f:7c:05:18:30:82:8f:6d:eb:33:
b6:ed:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:22:10 2026 by rpki-client