Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
File: raIk0OXYWSPj7P_C173W-b7Q3lY.mft (raw, json)
Hash identifier: PB565rr0G67ISPjtiu0hogL33Gx5Gn3QKFOVQ1CwnCM=
Subject key identifier: 08:E2:39:59:F9:D8:0A:71:A7:A2:01:CB:C9:DD:A3:03:B1:93:D7:95
Authority key identifier: AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
Certificate issuer: /CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Certificate serial: 019F9549732FF47F8C2CE35A02DBC65ED7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:46 +0000
Manifest this update: Fri 24 Jul 2026 18:00:46 +0000
Manifest next update: Sat 25 Jul 2026 18:00:46 +0000
Files and hashes: 1: UNpzg1fBXvY1R69SVFovHk6gy1w.roa (hash: meovwRk5rmV2wC72JrwzouzdrYO+qwuFP7XdlxUNR08=)
2: raIk0OXYWSPj7P_C173W-b7Q3lY.crl (hash: WSRvTz5WBjjVpGOLJOeFLeIwTKW9tAJzIiiXF91txog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:73:2f:f4:7f:8c:2c:e3:5a:02:db:c6:5e:d7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Validity
Not Before: Jul 24 18:00:46 2026 GMT
Not After : Jul 25 18:00:46 2026 GMT
Subject: CN=08e23959f9d80a71a7a201cbc9dda303b193d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:a7:0b:2c:00:76:6f:b3:ca:2e:10:f7:da:
58:09:e8:ef:20:2d:4c:c3:3d:29:37:87:41:9c:cc:
04:eb:00:1c:b0:15:5f:e1:f9:ba:26:01:13:2d:24:
7c:75:19:2c:44:d3:e8:70:73:1b:04:73:93:a8:a1:
d3:25:ef:4d:11:b1:36:22:e1:1e:c9:46:4c:e3:89:
5d:f8:29:e6:c7:9f:af:14:a5:32:a6:4e:56:3a:72:
74:d6:c3:56:d7:5f:cf:f4:a7:de:d3:02:1d:29:9a:
91:62:43:5f:e7:54:5b:3d:96:8c:e9:42:82:51:c3:
5a:52:3c:c4:23:c5:66:1a:74:0e:ee:0b:b3:0e:19:
79:92:7e:6f:33:07:0d:e6:25:86:e4:e0:be:7e:f9:
72:c5:bb:fa:fe:f7:95:73:f4:ff:98:b1:0c:bb:df:
46:33:35:56:15:05:4b:a6:6a:62:6c:4d:af:d2:7e:
6c:b1:9d:12:a8:fa:de:72:d3:cd:24:21:02:87:ce:
6d:a5:4c:ec:af:5b:dc:b7:0c:9a:19:e4:e2:d1:6c:
9a:e9:0f:47:1a:57:05:17:4d:06:27:73:b2:6d:e0:
db:e4:af:df:f6:7d:d6:44:ba:c0:ac:a8:be:04:c1:
b5:b8:0b:71:e9:2c:f1:39:f3:cf:0e:53:db:f6:40:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E2:39:59:F9:D8:0A:71:A7:A2:01:CB:C9:DD:A3:03:B1:93:D7:95
X509v3 Authority Key Identifier:
keyid:AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:11:fd:0b:53:83:0f:99:64:d6:c2:2c:bf:61:55:72:c7:83:
44:06:f2:fe:b5:ac:5f:1d:18:ee:94:e3:20:39:d3:a8:87:14:
2b:60:36:64:23:62:2e:66:5e:f6:ca:ff:08:60:fb:0e:34:7e:
01:4d:d2:ea:f3:e2:a0:cc:a1:eb:0c:c7:f8:d1:0d:15:01:0f:
75:b9:10:36:02:c1:97:29:05:f7:80:71:d9:1e:b8:07:3e:74:
17:28:bd:9d:08:6c:da:82:74:e1:3b:c6:66:41:02:f9:3d:95:
a2:a3:60:b7:63:3f:cb:45:5b:41:df:a9:61:87:e4:b9:73:bd:
b7:86:8c:42:d2:62:82:b8:91:24:c4:ac:ae:09:5e:5e:d2:07:
e1:f2:d1:d7:f5:d6:13:c6:15:91:33:70:2b:5c:dc:dd:a6:8a:
2c:2a:2c:fd:59:3c:54:ff:d0:4f:a4:32:60:6f:9d:60:c6:84:
45:46:e1:fb:c0:bc:cd:23:55:c7:74:dd:d9:d2:67:9a:4b:dd:
c7:ca:18:28:c0:7d:75:0b:28:4b:3e:a8:1e:fa:18:38:59:7f:
a5:47:78:7f:a3:ea:2b:c2:57:69:a5:c4:0a:5b:56:19:b1:78:
0c:a6:f3:f0:80:17:05:f2:71:64:b6:57:a3:e0:e6:aa:a1:0e:
e0:d5:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:26 2026 by rpki-client