Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: 8OYnB2CfBlrnOOA6gA6aQKetnrBATeZEnTXVGarABew=
Subject key identifier: 6D:2E:0A:32:6B:35:06:B4:06:CE:63:7A:D0:FC:A6:48:90:4C:51:26
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019F8F7EAD3E96A7FCC1906FF4F9356A475D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0EDF
Signing time: Thu 23 Jul 2026 15:01:11 +0000
Manifest this update: Thu 23 Jul 2026 15:01:11 +0000
Manifest next update: Fri 24 Jul 2026 15:01:11 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: qr5vg1X/imB5smPHAOmfwmEB0ZRiQ6agjikcvN/afc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:ad:3e:96:a7:fc:c1:90:6f:f4:f9:35:6a:47:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Jul 23 15:01:11 2026 GMT
Not After : Jul 24 15:01:11 2026 GMT
Subject: CN=6d2e0a326b3506b406ce637ad0fca648904c5126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:bf:eb:c3:81:f2:2a:0b:d4:67:09:f2:a4:
5c:95:4f:cb:7e:6e:11:96:a9:78:11:f8:3e:08:5d:
21:6f:97:bd:02:4f:89:48:40:7d:60:9d:dc:0c:46:
ea:1d:32:f6:97:94:c0:3e:79:17:81:15:b3:81:fc:
8c:c2:84:2d:b2:be:56:4e:74:da:2f:43:4f:f1:6d:
4a:93:c4:17:1d:54:f8:31:b3:90:a4:29:25:45:e0:
64:a4:b3:b5:5d:1a:22:c7:3c:ae:79:0b:ff:02:02:
f2:c2:b7:c1:9f:25:09:a5:20:2f:9c:d0:3a:c2:a5:
5b:42:e1:5a:09:03:3a:17:0f:26:3c:da:04:40:a5:
b7:8f:47:54:3e:45:2d:2c:5a:c8:dd:4f:10:ea:a6:
a8:f8:7f:89:9a:82:b7:dc:a7:24:98:6b:7c:a2:43:
73:cf:ab:6e:15:78:89:bb:1b:d5:1f:a6:b4:82:54:
0b:90:01:2e:e5:0f:b5:06:09:a2:e9:d7:4a:15:8b:
62:ee:d6:67:1d:bf:5b:73:c6:dd:42:0b:a6:75:36:
8a:cb:6c:fe:a7:45:e2:94:51:de:7d:79:6d:c1:97:
7c:32:ee:6d:c6:1a:fa:20:9f:b0:64:15:c1:49:ca:
d7:9a:7c:35:a4:65:3f:bf:60:35:bf:98:52:dd:b9:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:0A:32:6B:35:06:B4:06:CE:63:7A:D0:FC:A6:48:90:4C:51:26
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:27:45:d2:81:4e:b7:55:93:1f:31:c0:c2:b4:b7:f5:9a:a0:
66:21:2d:54:cb:aa:00:32:b5:16:4b:5c:7b:12:a9:c0:6d:7d:
55:58:77:a4:fd:59:c0:fb:77:8a:d8:f6:2e:93:57:6f:4d:4e:
41:36:1a:78:e5:63:11:bf:ba:b8:d6:15:36:7c:4b:bc:d6:d3:
08:80:3b:4f:56:64:42:57:3d:cf:24:54:12:44:df:86:de:98:
34:db:8d:c3:da:a7:84:b3:e2:ad:4d:c6:68:89:c1:d5:18:1e:
cc:02:2d:35:f3:9a:15:5f:06:34:32:1b:b4:f0:09:d4:e1:8e:
49:3e:2f:6e:8d:05:02:7a:a5:4c:b6:04:84:ad:e5:35:8a:94:
f2:6e:c5:2a:6e:ab:ec:f8:05:b8:04:ca:70:c5:0b:ec:55:1a:
4e:05:11:32:fc:4b:c2:8d:a0:87:f3:3b:93:98:48:40:15:4c:
c4:55:80:e6:7e:8f:79:9e:ba:0a:6a:dc:25:31:20:77:bf:73:
3d:90:3c:33:1b:ed:40:8a:b6:0e:52:6b:ca:66:df:47:c3:e4:
83:b1:6a:63:8f:46:ad:74:85:87:66:7d:2b:0e:08:b2:ef:b4:
32:b4:ef:b9:0b:b8:0f:52:16:84:5c:4c:33:b9:38:a4:ac:f3:
16:31:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:19 2026 by rpki-client