Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: cKwpuT4qCMQkqHQxajQPsg/RDPhh2By2ppboHBHp9lw=
Subject key identifier: 4F:CB:2E:31:38:D2:B9:FB:78:9E:2C:A9:53:B2:DD:A2:56:AA:BF:C1
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019FA8998A8A740A1D99704BDF329965D8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0EEC
Signing time: Tue 28 Jul 2026 12:01:02 +0000
Manifest this update: Tue 28 Jul 2026 12:01:02 +0000
Manifest next update: Wed 29 Jul 2026 12:01:02 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: crZUrrSjvuZP1s+oSdGMzOxo5aLEX26A8PrmBcaAdRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:8a:8a:74:0a:1d:99:70:4b:df:32:99:65:d8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Jul 28 12:01:02 2026 GMT
Not After : Jul 29 12:01:02 2026 GMT
Subject: CN=4fcb2e3138d2b9fb789e2ca953b2dda256aabfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:df:fa:d5:55:05:76:f1:3f:65:f9:d4:9a:
18:93:1d:c2:b4:36:3f:4a:16:85:52:6b:3c:e7:e9:
28:81:fe:b5:04:64:57:59:85:bb:9a:1a:c3:27:ba:
35:2b:1b:54:00:fe:54:50:82:51:37:8e:54:8e:0b:
ae:40:a8:77:e5:b6:66:99:bb:c5:ec:4f:19:12:bd:
47:bd:7c:33:91:81:06:4e:50:f5:a7:90:29:44:d8:
b0:1a:fe:5b:2b:a4:f7:aa:04:5b:b3:da:d3:65:0c:
04:b7:38:bc:33:44:05:ce:89:83:c0:6b:7f:6d:a5:
8a:9d:28:50:24:f5:ee:fc:85:e8:52:c0:2d:4c:f1:
f9:b9:13:99:1f:db:0a:c6:99:87:fa:46:0e:ea:44:
a1:cc:c5:c9:4b:50:71:26:0e:d2:f9:01:39:12:22:
25:f6:70:b8:32:e2:a3:75:2f:bf:24:4a:d8:6d:71:
f8:25:e1:b7:41:e2:1e:3b:eb:03:f7:72:3e:cc:84:
5d:0d:6d:57:f5:3e:83:35:2a:ed:83:64:21:54:a7:
90:59:00:85:2c:93:ba:6d:6e:3c:eb:82:41:ac:f0:
15:65:02:9c:2a:e3:29:ea:a7:56:ea:7f:3a:6e:1e:
34:65:d1:11:d2:26:41:e6:84:24:f4:e6:e3:c2:98:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:2E:31:38:D2:B9:FB:78:9E:2C:A9:53:B2:DD:A2:56:AA:BF:C1
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:62:09:c7:5d:77:7a:3f:73:5c:3e:3c:13:42:11:ba:c1:e4:
65:7b:d1:a3:47:99:e0:bf:e6:5a:a6:84:2e:15:d7:e7:2a:65:
55:77:57:e2:22:c6:51:99:6c:42:28:54:05:a7:8c:b9:5b:6c:
72:62:80:50:31:bc:22:b8:e2:4c:d6:2b:57:f6:ca:67:4e:4f:
0d:72:b6:2c:e5:96:c5:04:05:31:0b:62:fa:d0:b5:1a:2c:4d:
23:33:99:da:07:5b:14:ef:94:aa:9f:66:93:4a:8d:ea:29:b5:
f1:c6:79:59:a3:51:f5:1a:78:9a:f2:09:87:d4:2a:94:fc:b8:
f9:45:52:e0:ef:e9:c8:67:75:9a:23:26:85:17:e6:42:c7:c7:
a7:13:ce:bb:7d:a4:e7:13:d8:da:cb:66:f6:65:62:90:b0:ac:
9a:db:3a:d8:9c:b3:04:4d:39:cd:65:73:6c:46:25:cd:56:95:
3b:e2:77:7c:fb:c7:1f:ee:0f:6c:79:82:3e:0d:3a:4c:19:f6:
c5:4d:c3:9d:4b:1a:f8:72:71:8b:f4:67:fc:c1:20:50:bc:ef:
7c:81:13:cb:87:81:84:ab:a6:f4:7c:71:94:88:18:b5:2e:aa:
fc:46:c4:c4:e2:cc:f9:f8:81:c7:4d:04:a2:39:1c:6f:cc:b3:
c5:9f:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:17 2026 by rpki-client