Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: Q+RmFxNQmi1W/Q8WEh440E1xUZCOrMxdJjzyZ/nBVCY=
Subject key identifier: 81:E7:2F:51:DC:7F:4E:9D:BE:59:A5:67:9A:DA:58:37:7B:C1:E9:C6
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019FAB638A180A2AE06A428ED956EED24DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1A16
Signing time: Wed 29 Jul 2026 01:00:55 +0000
Manifest this update: Wed 29 Jul 2026 01:00:55 +0000
Manifest next update: Thu 30 Jul 2026 01:00:55 +0000
Files and hashes: 1: Br8jDqLYrkaBjiJL6wr8w6b0avs.roa (hash: W7Sv+CJ6euSWOJRS/NssioWUOsmXYLBpEHMl3h7F400=)
2: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (hash: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=)
3: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (hash: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=)
4: mzjq_E9j-9cKk2TKoQGkLBC5u4Q.roa (hash: 2CE2j2LCoSSQcA7NTRzO1EXIEEufcX6KVxq3KWqXbTI=)
5: oT6qaGLEY2PXeVQf5JD39QL3oms.roa (hash: jE9/tHML59/9TwNMlho3PGTuiexsMBV6cBmss7rI7lg=)
6: qoAheOHH9UlqCoE7XA-QfCZLxZw.roa (hash: VVjSLN2hXu/mswe8VPF+IlHQVMhQLF+wIH35GZEPXZ0=)
7: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: lPeljT4VRtzw0d+dxZqA/7DFpMu+ZZQqUgN3ne6MHck=)
8: xJ55egTi-SOwIls63DtlY0C_yhc.roa (hash: kC3zkfZ5rMjuoKk4EnSBPzpT5cCfNNDGdDzD8ejaa+g=)
9: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (hash: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:8a:18:0a:2a:e0:6a:42:8e:d9:56:ee:d2:4d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jul 29 01:00:55 2026 GMT
Not After : Jul 30 01:00:55 2026 GMT
Subject: CN=81e72f51dc7f4e9dbe59a5679ada58377bc1e9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:13:c2:39:55:62:bd:ec:31:96:9e:88:aa:
af:52:38:d5:64:7e:dd:47:56:d0:20:ed:49:ac:91:
ce:8d:2c:7e:20:1d:71:18:62:a2:37:17:67:df:c3:
20:e1:73:2b:f4:76:b7:2c:f1:65:19:8f:02:b1:f4:
46:cc:89:f1:c7:63:3e:04:e6:57:ce:c0:d2:a5:3e:
a9:6f:21:81:9f:68:0d:b6:4a:61:4a:a0:fa:37:c5:
ee:6c:80:9c:58:f1:c4:9a:61:7b:1c:0a:2b:10:ff:
0c:ed:3a:60:a5:f0:fe:25:dc:c0:3c:b8:34:e0:85:
e7:ee:ba:1f:b3:2b:62:46:bf:2f:56:6d:7c:f9:7f:
e1:84:e9:66:c4:ab:46:95:6c:f1:7e:8d:55:17:37:
27:c8:36:42:8a:38:f5:50:7a:b4:09:ca:bc:05:72:
3b:ce:0e:b3:af:c4:d8:1f:2d:5f:c2:c0:e0:cd:b6:
19:1f:2c:70:fb:fe:83:7e:54:18:0b:38:7f:47:45:
38:22:2a:63:87:a8:d5:93:df:e4:17:7e:59:46:63:
ea:41:cf:33:e6:8d:54:e4:a5:0d:b2:f8:14:5f:70:
08:52:ba:01:47:7b:73:ab:cc:ad:d7:81:e2:fa:3a:
2b:cf:b3:a4:dc:4c:10:33:98:f0:f4:a9:f9:d0:4d:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E7:2F:51:DC:7F:4E:9D:BE:59:A5:67:9A:DA:58:37:7B:C1:E9:C6
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c0:a5:c9:f5:74:18:1f:7f:fd:bf:7c:94:b2:07:a3:51:17:
ed:46:4f:0b:7d:d0:ba:87:80:95:b0:ce:d2:f6:cb:43:52:09:
26:fa:f3:85:42:87:98:d0:20:c1:7c:bb:81:66:bb:00:28:43:
1e:03:88:a4:ac:3a:41:b3:e8:9e:0f:b0:3c:8b:65:3c:16:ed:
e9:cd:d6:65:f3:bd:fa:b9:2e:42:1b:37:2f:14:4d:07:4d:35:
46:af:dc:ff:3f:22:f0:d4:26:19:42:88:71:67:cf:a7:32:2c:
57:50:d7:94:db:bf:b6:12:5a:1a:e2:98:e2:5f:f6:31:53:40:
fe:dd:2c:b9:22:c9:7c:80:dd:5d:4f:11:b3:ea:69:4e:20:37:
2f:1f:74:05:04:ed:72:3f:12:4b:7b:53:13:da:6d:5c:b1:40:
ef:11:fd:eb:73:57:d2:32:8e:d8:62:38:56:62:6d:17:53:2a:
03:0b:30:d0:7c:de:bb:d8:96:e3:b0:86:6f:89:b3:6e:ee:e3:
73:f4:91:6e:9f:e1:80:86:09:bd:60:d5:bf:01:eb:7b:e8:4a:
ed:ae:f6:5a:4c:77:82:34:4f:8f:ff:2e:be:3a:16:92:dd:4e:
44:37:26:75:98:03:e7:8c:37:5f:f6:fe:3a:be:2d:69:86:1e:
15:af:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:12 2026 by rpki-client