Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: 1I3XNR6DYcnwG77PQ1SY1SPHTxvBoJnFFYyHo0NY7DE=
Subject key identifier: EE:C4:71:03:37:EC:B5:02:AF:7E:03:4F:2A:FE:61:EF:16:9E:43:7E
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019FAA87EFC42BDF6D4083D8D77858FF2A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0EED
Signing time: Tue 28 Jul 2026 21:01:03 +0000
Manifest this update: Tue 28 Jul 2026 21:01:03 +0000
Manifest next update: Wed 29 Jul 2026 21:01:03 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: b2D9Jyl0j8rGwA+J35lpoWwx95HgRpjQvCRdPFdO+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ef:c4:2b:df:6d:40:83:d8:d7:78:58:ff:2a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Jul 28 21:01:03 2026 GMT
Not After : Jul 29 21:01:03 2026 GMT
Subject: CN=eec4710337ecb502af7e034f2afe61ef169e437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:37:05:75:fc:b3:8a:ed:f2:de:b6:d1:16:
26:7b:dd:11:c9:41:b8:1c:55:5d:2d:ae:f5:6a:7f:
92:69:af:63:2b:bd:de:6f:a6:76:38:d0:06:9a:e6:
3e:1e:69:34:1e:49:a9:f3:f9:0b:20:c5:d6:53:b9:
f1:54:73:8d:ce:c4:de:79:c0:be:96:9e:b1:bb:e1:
d9:39:8d:45:2d:2a:d2:0f:45:30:a3:7b:c3:84:69:
0a:86:98:d5:0f:88:36:3a:e9:c4:4c:a5:3b:23:a9:
41:7c:2e:30:a4:34:fe:72:62:79:18:65:c5:55:dc:
8e:6d:d6:c8:01:33:15:4a:01:4f:4f:60:d0:6d:97:
57:13:48:e2:a7:66:8a:f5:aa:74:2a:bd:33:63:0b:
ab:06:47:cc:45:6c:ac:27:65:33:21:5d:4f:cd:b9:
ff:f7:74:90:48:74:60:02:82:c4:e8:bc:38:5c:a0:
bd:6a:b6:88:5d:9c:ea:18:58:4f:9a:bb:d1:50:87:
8d:e9:fe:d2:ab:78:d4:6b:99:97:97:f0:54:ba:8f:
b8:7b:79:61:53:48:16:6a:9f:e6:65:e9:22:d3:aa:
c1:d0:ab:da:0b:38:95:f9:e7:b2:ee:c8:51:7a:fa:
f7:b5:4b:d8:f6:26:43:3a:41:03:95:38:9d:97:ea:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:71:03:37:EC:B5:02:AF:7E:03:4F:2A:FE:61:EF:16:9E:43:7E
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fb:bf:17:4d:8e:c1:d1:af:ac:f3:46:06:e4:01:47:6b:ad:
cb:f6:48:66:0a:f3:ab:7c:46:a7:ff:64:ad:10:52:5d:7b:0e:
bb:74:56:03:c3:ff:32:66:40:ec:2a:03:0e:63:75:06:40:4c:
67:ab:08:20:5e:7a:68:47:76:fe:80:cd:78:70:89:7d:44:21:
55:67:2f:2f:4e:40:cf:8e:a0:ce:c3:65:43:d0:0b:0b:47:84:
db:f5:04:4d:b7:57:02:88:ac:3c:39:7b:0b:cb:4e:2f:77:24:
dd:32:3d:5a:be:bc:98:9c:7c:33:78:6a:06:e3:95:6e:21:d2:
15:38:1e:d9:57:9c:28:7c:21:88:d5:67:c2:e9:dc:97:64:b5:
16:01:60:db:d7:ff:e0:0a:c1:ff:3a:e3:f8:8b:6b:7d:d0:06:
2c:18:e0:90:d3:42:09:e4:24:9c:32:d9:7e:71:08:55:2a:53:
eb:91:e1:5a:ce:fa:88:64:c7:10:a5:f5:0d:26:c8:81:cb:fa:
7d:cb:df:6e:85:3c:9c:b3:eb:09:f5:85:d5:2f:8b:ff:79:8c:
4e:fd:7e:9c:09:80:cc:f2:d6:51:74:27:5d:3a:7a:65:5e:15:
36:e8:8d:17:49:d5:a8:14:fc:45:b5:7f:2b:7e:9f:bd:5e:cc:
bc:41:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:10 2026 by rpki-client