Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: YNsi07U1CZjDIpQGGe0C8jm0wfIcSMWiWOhhSf2GjJ0=
Subject key identifier: 95:EE:23:CD:7D:C9:89:C4:63:DD:E2:FC:6D:34:3D:11:35:37:62:E4
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 019E1F1095C0E67C646E218EF8D091A534B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: F7
Signing time: Wed 13 May 2026 02:00:40 +0000
Manifest this update: Wed 13 May 2026 02:00:40 +0000
Manifest next update: Thu 14 May 2026 02:00:40 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: vmFIypQRXULuw1lQBh24Sph1E6ZY4AkqBc8qzgtWPs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:95:c0:e6:7c:64:6e:21:8e:f8:d0:91:a5:34:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: May 13 02:00:40 2026 GMT
Not After : May 14 02:00:40 2026 GMT
Subject: CN=95ee23cd7dc989c463dde2fc6d343d11353762e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:c7:28:6b:27:93:e4:d0:0e:e7:1d:8f:87:
2d:cb:64:c0:18:9c:c2:ab:56:b7:5d:b6:11:71:05:
37:ce:b1:4e:17:24:99:66:c3:ce:1f:1c:df:66:8c:
07:31:c7:a3:94:61:ec:ab:91:a8:0c:2b:86:6a:84:
a6:3a:52:3c:e7:e6:68:29:38:11:39:29:69:55:28:
b8:56:48:83:26:0f:4b:5a:6d:78:ab:74:04:c6:7a:
5d:d6:05:24:50:b8:ed:40:1f:71:a8:c9:59:15:8b:
2b:59:13:64:e0:50:7b:2d:d6:8f:dc:1e:8d:eb:e8:
40:19:67:d8:64:c3:fc:b3:d7:ed:1a:1f:e4:50:a7:
22:21:ce:0f:2d:ab:6f:4d:ae:40:30:85:f2:06:3b:
fd:55:d6:c8:83:fb:b3:7f:ed:ff:bc:c4:ab:5c:f6:
14:36:b2:8b:13:b0:2c:59:61:f4:24:38:f0:fc:e5:
20:bb:c6:46:76:08:38:8c:b3:d2:c9:3f:50:41:06:
52:ee:53:8c:b3:7d:fc:46:79:9d:f4:01:c2:4d:b1:
58:c2:3b:cc:14:86:5c:14:8e:38:49:fd:8d:c7:43:
38:3f:c8:0e:33:cd:ce:31:31:ad:84:40:8d:2d:c1:
74:e9:be:ca:60:b1:45:ba:10:4a:83:8e:b6:89:a4:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:23:CD:7D:C9:89:C4:63:DD:E2:FC:6D:34:3D:11:35:37:62:E4
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:35:c2:14:3d:e5:e7:51:47:1e:81:90:ee:69:bc:c4:1c:36:
56:6d:98:03:69:ae:ac:7b:23:25:b5:90:5d:ec:77:87:e1:2e:
66:55:41:40:10:61:f4:d7:c5:75:90:a5:e6:09:cc:e4:b4:51:
0e:55:2f:32:0c:72:61:bf:17:ed:8f:7c:e6:71:2d:09:af:0e:
71:c1:f4:85:65:bd:80:63:1a:76:ab:c4:a5:09:48:e9:09:44:
72:fc:9f:f1:ae:eb:9d:8f:ee:36:45:0d:b6:86:e5:aa:d5:64:
c2:46:00:4f:16:b7:77:ed:f6:96:03:c5:f3:0b:fe:a4:0c:e7:
80:52:5d:40:1f:86:52:31:49:f1:07:66:43:d8:9d:dc:e5:58:
08:64:9d:d3:54:c9:57:63:a7:a9:4a:e9:c0:51:b7:a3:62:f5:
43:ea:b9:15:72:41:3d:6d:02:73:2c:5c:e6:b9:13:09:e0:b2:
eb:58:42:7f:eb:d9:3b:c3:d7:99:82:cc:d3:92:07:25:fc:24:
a6:4b:3b:8e:8e:5b:f9:7e:d5:26:89:5a:ed:82:e7:3a:2b:3a:
f5:9d:a2:49:d1:c5:3a:f7:15:62:e7:a2:4b:7d:d4:50:ff:58:
56:ab:9e:6c:db:6f:98:35:38:36:32:a0:51:68:e1:52:2a:e0:
f1:56:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:35 2026 by rpki-client