Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
File: raIk0OXYWSPj7P_C173W-b7Q3lY.mft (raw, json)
Hash identifier: aUjKaADJOtLOXnQVaIVLwY8GjuQu67Z/pLwE9Ud80VA=
Subject key identifier: 77:4D:C2:3A:27:5C:76:E5:67:B8:EB:0E:2E:9B:F4:84:59:74:B4:55
Authority key identifier: AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
Certificate issuer: /CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Certificate serial: 01A0EEF9B1BD27C861A48BC0DD55B311315A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
Manifest number: F5
Signing time: Tue 29 Sep 2026 21:02:16 +0000
Manifest this update: Tue 29 Sep 2026 21:02:16 +0000
Manifest next update: Wed 30 Sep 2026 21:02:16 +0000
Files and hashes: 1: UNpzg1fBXvY1R69SVFovHk6gy1w.roa (hash: meovwRk5rmV2wC72JrwzouzdrYO+qwuFP7XdlxUNR08=)
2: raIk0OXYWSPj7P_C173W-b7Q3lY.crl (hash: F7Dalk3RAdB7YDyUujhN8bs5Gr0ZyfjWqgdh8RkPYOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:b1:bd:27:c8:61:a4:8b:c0:dd:55:b3:11:31:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Validity
Not Before: Sep 29 21:02:16 2026 GMT
Not After : Sep 30 21:02:16 2026 GMT
Subject: CN=774dc23a275c76e567b8eb0e2e9bf4845974b455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:92:7f:c4:58:30:54:d9:1c:22:6b:46:20:
62:f7:ff:06:92:62:40:17:2b:33:d3:39:e2:f5:8d:
6f:31:08:a1:02:b9:ea:55:c0:5b:2f:da:a8:e1:4b:
a4:7f:03:fc:69:00:a6:39:f8:30:1f:f7:d4:52:c6:
6b:ab:dc:3b:2e:7a:35:21:54:d6:7e:16:68:a4:d4:
00:6c:85:c2:17:8c:dc:b9:0f:5f:6c:f2:e9:64:07:
48:8a:83:78:d4:b1:f3:ca:e1:12:e8:45:bf:cc:a1:
c2:ed:53:5b:05:0f:ec:9a:ec:f0:ff:c1:35:6a:25:
9a:f5:69:42:7d:1c:78:c4:c7:29:c3:7c:18:15:fc:
56:89:7e:a7:7c:c9:0e:f1:2d:75:45:e3:53:ed:81:
55:29:bf:7f:36:fb:a8:06:c7:04:28:91:d5:91:12:
24:d9:8c:e7:a9:e6:87:f5:11:09:5b:c5:7f:43:d4:
ab:85:4a:ed:f2:30:9b:0b:36:f4:7f:a1:96:29:61:
4c:7b:9e:03:07:0b:46:bd:4b:60:16:d1:e0:7c:81:
c6:9a:36:d0:86:dd:59:ac:61:95:95:b8:ae:f9:1a:
80:5c:cf:6f:19:04:8a:44:9e:ac:db:10:e4:67:82:
a4:67:1d:be:c0:35:27:91:d1:15:58:12:94:8e:09:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4D:C2:3A:27:5C:76:E5:67:B8:EB:0E:2E:9B:F4:84:59:74:B4:55
X509v3 Authority Key Identifier:
keyid:AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:be:d6:53:e9:fc:2e:95:66:68:a4:af:af:50:b4:11:4e:
07:27:78:e8:3e:af:e7:d8:3b:a1:1c:04:44:90:af:38:8a:66:
0d:ee:22:ae:44:a1:0b:84:56:ed:b2:b7:0e:a6:b2:94:f4:7c:
b1:23:24:3f:03:f0:db:5c:37:0a:4f:7d:2a:e0:22:07:b1:5e:
8f:79:0e:6d:d0:bf:2c:d0:4d:d2:a9:2a:e3:a7:c4:b9:55:d6:
7e:ec:51:2f:88:7c:39:18:09:ec:cd:db:10:65:56:e9:73:e5:
5f:4f:10:99:a7:53:e5:3f:43:75:09:f7:39:bb:8e:d0:0d:a6:
b2:0d:10:f9:26:50:6a:ed:98:c9:c2:87:38:de:c2:0b:ea:7d:
b2:e1:2a:92:1e:2b:26:90:a3:65:a5:2a:7a:7b:20:80:e9:67:
32:1e:62:d2:cd:42:d2:49:57:30:5f:1e:f7:66:f1:8f:74:12:
6d:54:06:16:db:bb:a6:e9:17:60:1a:ae:3c:ff:f6:c5:c4:ff:
b4:cf:bb:43:1b:32:a8:95:22:5f:d6:75:61:6b:fa:79:42:97:
4c:aa:7d:7b:3c:a3:cc:5d:a8:84:30:66:00:dc:41:c4:a3:3e:
7d:48:60:3d:f6:db:d7:08:ee:9b:79:70:06:c9:00:c5:b7:2b:
71:da:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:52:57 2026 by rpki-client