Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: RVfV42aKYwqr+Fw4E3/1AHhCF7bo8p8UF3Rjwaxtjz0=
Subject key identifier: 43:74:7B:BF:B3:65:B0:C1:3C:BD:08:3A:F7:76:E0:A8:1C:46:CE:CF
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 01A0F155FBBE43136DF79724207529B8B425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: 026D
Signing time: Wed 30 Sep 2026 08:02:19 +0000
Manifest this update: Wed 30 Sep 2026 08:02:19 +0000
Manifest next update: Thu 01 Oct 2026 08:02:19 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: g4t0IhS4Qhxo1JC0Qlkk25ZJGtQrmvAvSjmn8Gio3tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:fb:be:43:13:6d:f7:97:24:20:75:29:b8:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Sep 30 08:02:19 2026 GMT
Not After : Oct 1 08:02:19 2026 GMT
Subject: CN=43747bbfb365b0c13cbd083af776e0a81c46cecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:27:74:f4:8b:98:0d:bb:9d:2c:fc:ec:da:
36:45:75:f1:6b:3d:88:d0:a7:11:64:3f:59:cc:43:
42:e1:ed:81:92:78:d9:79:8d:63:a0:50:fe:46:f6:
b1:d6:61:f3:eb:a0:9b:4f:18:5d:af:c5:1c:b1:2e:
bf:07:81:09:94:58:c7:d7:50:fb:cd:30:3f:84:e4:
03:3d:8a:1b:0f:59:ae:29:6b:81:c1:2e:1a:c2:91:
4d:69:f1:76:bd:19:84:47:42:10:d8:b0:05:11:2b:
ba:5e:94:1d:ed:5e:bb:e1:95:80:d4:60:c7:dc:81:
e4:88:1d:cf:e1:a0:aa:9c:b9:4e:54:50:d1:a5:83:
3b:9d:a9:45:0b:70:3d:0a:6b:20:b6:00:86:8f:63:
9a:f7:fe:43:42:bf:d6:58:b6:db:09:0b:ee:9b:45:
8d:98:0b:3c:79:23:a3:03:52:3f:47:90:88:11:38:
31:13:55:50:01:5a:28:c8:e9:84:46:69:89:48:2c:
25:b7:ba:5c:03:37:a9:74:3e:ce:00:5f:21:7a:d1:
a4:56:21:8c:5c:4f:0f:6a:d4:a4:ce:d8:56:e4:0c:
10:5d:22:17:ee:bf:d1:85:88:8a:9c:05:25:13:f3:
17:38:a2:75:8d:4f:a9:2a:eb:c5:fa:8a:01:57:20:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:74:7B:BF:B3:65:B0:C1:3C:BD:08:3A:F7:76:E0:A8:1C:46:CE:CF
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:21:de:0a:7c:1e:90:5f:08:52:a7:d2:e1:38:3a:ea:de:bf:
d7:9f:e8:9c:97:34:b9:1c:d2:7d:57:45:26:3e:13:d5:be:b4:
d3:ad:ac:1e:da:8d:db:3b:5c:7e:05:a2:cc:6a:64:d9:f3:e6:
e5:78:8f:e2:1c:8e:f7:b6:19:63:33:96:4c:e4:11:41:6e:9c:
6c:8c:a6:28:c3:ba:18:df:e9:f3:ed:23:5e:80:d1:97:1a:2d:
f8:da:34:53:6b:3a:3c:5b:93:b8:b7:6d:e0:d0:7b:a5:47:34:
10:22:67:17:91:79:0e:bb:8a:5a:54:78:9f:14:62:0d:78:38:
46:fb:8b:75:9d:9a:1b:cd:7b:7a:bb:82:86:78:d6:66:97:b2:
64:f5:ce:12:1f:df:25:90:10:2a:03:c5:67:57:c3:77:76:d7:
cd:7b:49:16:ff:3e:c5:c0:92:f9:08:e0:4e:90:5a:da:14:c1:
2c:df:ca:ed:6d:4e:31:40:5c:ff:cf:13:93:df:a8:57:f0:3a:
0d:8b:2b:fb:f0:12:d2:75:65:fd:1c:99:e5:f5:18:09:83:dc:
c3:8a:47:34:b1:e9:be:00:c9:6b:30:5e:58:5f:26:92:17:af:
96:27:7a:4e:1d:14:6d:ef:bb:99:9d:a1:bb:9a:e2:62:05:d4:
62:52:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:35:47 2026 by rpki-client