Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: ryOoUSHotu5bEqDPTaGGwUdBEYLG1lelbx7mFqQIMwE=
Subject key identifier: 0B:98:86:2A:E8:C5:54:1D:16:3C:F6:2B:61:04:AB:3F:98:F0:CB:FA
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 01A0D94D604E9545570C79F34E03A714DF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1AB3
Signing time: Fri 25 Sep 2026 16:02:01 +0000
Manifest this update: Fri 25 Sep 2026 16:02:01 +0000
Manifest next update: Sat 26 Sep 2026 16:02:01 +0000
Files and hashes: 1: Br8jDqLYrkaBjiJL6wr8w6b0avs.roa (hash: W7Sv+CJ6euSWOJRS/NssioWUOsmXYLBpEHMl3h7F400=)
2: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (hash: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=)
3: hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa (hash: QzJoFvzXpwwE2bEYMhJWP3eLZe6Rf1UyZdose9+ReX4=)
4: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (hash: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=)
5: mzjq_E9j-9cKk2TKoQGkLBC5u4Q.roa (hash: 2CE2j2LCoSSQcA7NTRzO1EXIEEufcX6KVxq3KWqXbTI=)
6: qoAheOHH9UlqCoE7XA-QfCZLxZw.roa (hash: VVjSLN2hXu/mswe8VPF+IlHQVMhQLF+wIH35GZEPXZ0=)
7: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: +XmQx6+yfujUU00O7O/cxpwMPyDnFEOSUF/O2gY8AGY=)
8: xJ55egTi-SOwIls63DtlY0C_yhc.roa (hash: kC3zkfZ5rMjuoKk4EnSBPzpT5cCfNNDGdDzD8ejaa+g=)
9: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (hash: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:60:4e:95:45:57:0c:79:f3:4e:03:a7:14:df:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Sep 25 16:02:01 2026 GMT
Not After : Sep 26 16:02:01 2026 GMT
Subject: CN=0b98862ae8c5541d163cf62b6104ab3f98f0cbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:2a:a2:99:e0:41:a9:45:e2:19:30:0b:d2:
ac:72:1d:c7:cd:cc:a4:98:7f:05:84:f5:40:c3:5c:
e6:eb:50:2a:24:06:30:4c:a1:c0:48:33:98:e4:a6:
20:d5:cc:4d:98:5b:aa:bb:16:84:34:f5:b8:2a:d3:
8f:3e:54:09:da:b5:1d:90:8d:39:b4:ce:e5:48:de:
60:62:9c:e0:45:4b:43:cc:4e:eb:0b:68:77:2a:25:
da:18:e0:eb:90:89:0b:81:2c:0f:af:3d:fc:7a:97:
6b:2a:15:4d:c5:5d:22:83:f7:a8:09:14:4c:13:c2:
88:08:c1:17:69:70:06:14:74:e3:f2:66:f9:8d:c5:
d4:fe:5a:a4:0d:89:cc:23:33:f4:cd:6b:93:a5:37:
2a:81:6f:bb:c1:76:e2:a8:dd:08:48:de:08:25:72:
3f:df:60:c1:0b:7d:c0:6f:e5:cf:dd:5b:94:83:af:
dc:14:6b:4d:6d:57:57:66:1e:92:c2:e4:ff:2a:02:
63:84:d0:9e:c2:05:f8:ae:1a:19:a3:ce:ec:7e:d6:
0c:5e:7e:df:ac:64:59:8f:20:66:b9:b5:2c:b0:17:
db:91:42:06:e7:d4:e7:72:b7:e8:be:48:f0:cd:9a:
12:41:2d:b9:63:2f:17:c2:29:b0:21:99:a1:99:3a:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:86:2A:E8:C5:54:1D:16:3C:F6:2B:61:04:AB:3F:98:F0:CB:FA
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6f:e9:bf:62:ca:43:f5:0c:4a:84:af:da:2a:e9:0f:0f:de:
a2:d3:0a:8d:29:7b:4c:90:d0:04:d0:5b:c5:c1:77:55:49:6f:
72:4d:85:51:a1:c4:a3:eb:84:01:42:30:7c:c5:16:5f:3d:36:
17:97:42:fb:cf:a5:d2:f3:7a:cd:fc:04:79:0a:94:5c:03:fd:
c7:15:20:1b:6a:85:65:6d:e9:c5:c0:be:21:64:7a:d5:84:75:
27:21:86:35:35:9c:67:c2:62:30:be:01:41:d1:6d:d2:6b:dc:
d9:a7:73:da:cb:75:86:67:68:bf:63:96:c6:d3:00:7a:df:fe:
98:0b:b2:e9:d9:80:9a:4f:fc:eb:33:de:fc:a0:fb:43:6a:99:
c4:c5:ba:59:b2:0d:81:ce:b3:45:c1:9b:77:42:21:be:17:32:
4c:92:45:d3:30:ca:04:ba:87:96:81:e1:56:7d:18:ac:50:b5:
60:e1:f6:29:57:b2:97:33:cd:91:1a:4f:0b:86:22:5a:e8:43:
39:f6:ce:88:61:9a:49:2e:51:28:88:d8:5d:d2:68:35:7e:b7:
eb:c8:53:e0:d3:4c:d7:7b:5a:31:71:cf:51:b1:9f:6b:9c:8c:
3c:86:9c:42:6b:fd:43:2d:ab:25:8b:4c:57:c3:ad:22:dd:a4:
95:12:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:50:28 2026 by rpki-client