Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: wpx2OWOhNpRC1hTbV7QWEcvxaujrJ0jZFA+UPHo/dIA=
Subject key identifier: 07:57:EF:B0:93:8E:E5:89:92:A5:29:B6:77:8D:D4:7E:9A:10:6D:42
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01A0D7CBF34B1E64457B6044E6E4B02FEE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0F89
Signing time: Fri 25 Sep 2026 09:01:02 +0000
Manifest this update: Fri 25 Sep 2026 09:01:02 +0000
Manifest next update: Sat 26 Sep 2026 09:01:02 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: yP1K09+zq3q6hw2ZjnbxhHxW7FiqcXFMAMyjwgblluQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:f3:4b:1e:64:45:7b:60:44:e6:e4:b0:2f:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Sep 25 09:01:02 2026 GMT
Not After : Sep 26 09:01:02 2026 GMT
Subject: CN=0757efb0938ee58992a529b6778dd47e9a106d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:92:27:db:83:81:20:c6:3b:20:8c:84:b9:
bc:f0:df:d7:b5:a6:ed:63:30:94:3e:d6:ba:76:57:
d0:61:94:93:0d:74:00:c1:bc:7d:bf:34:33:22:6d:
22:b2:8c:29:b2:cb:37:0b:bc:13:f2:87:11:08:8c:
2a:b1:e4:ea:76:e5:17:b9:d9:ca:83:b6:b0:fd:1a:
e0:25:83:b7:00:e2:ae:d2:d3:8a:20:ce:3f:b4:a6:
d2:04:bb:8e:df:d8:a9:84:92:e2:7d:37:36:2a:45:
84:11:b0:7d:34:8a:8e:69:04:e9:72:a7:39:e3:f8:
87:a5:94:d1:95:12:28:3a:1c:cb:f4:24:58:2f:f8:
21:ac:07:23:83:ec:98:43:2e:c1:87:46:ea:6e:e0:
cd:70:e3:a1:3f:d1:c0:9f:46:ad:d5:fe:1b:97:1c:
45:69:33:e5:6b:69:73:82:9f:c9:9b:4e:7d:99:83:
10:2c:59:f1:c2:89:91:d1:c1:86:df:d8:54:ef:6f:
52:81:84:91:9b:9e:3d:97:d7:42:7e:90:e9:8a:2c:
d1:5c:b4:53:94:f1:22:41:49:a7:84:a6:8d:04:ff:
c8:a2:b7:40:97:42:53:b2:07:52:77:a7:a3:73:ce:
ce:a6:27:7c:49:59:d6:0c:fd:eb:67:da:ed:54:82:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:EF:B0:93:8E:E5:89:92:A5:29:B6:77:8D:D4:7E:9A:10:6D:42
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:82:b4:7f:70:d6:0c:1d:b5:ec:74:08:9b:13:2e:4d:b5:b9:
72:b5:41:fe:3b:21:97:b7:51:fc:d1:70:b1:17:04:1c:9c:58:
a5:1e:ed:a8:5a:97:e5:9c:a9:2c:ee:b5:00:f9:4a:fb:76:e6:
58:a5:bc:6e:1b:c4:53:6d:24:8f:a5:22:0e:6b:1e:f0:47:b1:
f0:c5:2c:a8:8f:74:d4:0c:4e:93:9f:ff:34:59:45:88:d8:5b:
5a:53:8f:3e:8d:29:aa:3f:1f:57:49:1b:8d:c8:7a:2b:44:78:
97:e2:3b:76:11:e2:e7:b5:0b:a1:dc:88:ed:54:fa:8c:47:13:
df:57:11:35:12:ef:ef:34:f3:e2:15:68:bb:ba:52:ca:d3:48:
19:96:53:48:8a:23:50:1f:ec:15:a0:1a:83:2e:75:94:b9:d3:
ae:f4:d2:81:1f:20:1e:58:d9:fc:5f:c5:22:93:02:2f:bd:f6:
c8:96:76:40:ab:d9:f3:b0:05:5f:cf:3a:7b:12:8e:3b:1f:5a:
fb:7c:06:8c:6d:97:e7:82:e8:a3:21:e8:c7:6e:37:de:2d:9a:
6d:dc:4b:f5:b3:03:43:47:ae:7f:87:f7:19:62:28:e1:d9:af:
65:ef:6b:cb:6b:4b:17:be:a4:3c:89:2f:05:60:b0:10:7a:a4:
e1:72:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:19:37 2026 by rpki-client