Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: T0wuOHwaoITnjXBt2h5uLAX2w7XTyJ2Yw2PrlsTD9sM=
Subject key identifier: C6:8C:74:91:D5:5A:EB:F8:06:5A:79:33:6F:C1:92:6E:BE:BD:EB:9D
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 01A0E1072658A2C03C00C1DB2C72DAE62A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1AB7
Signing time: Sun 27 Sep 2026 04:02:17 +0000
Manifest this update: Sun 27 Sep 2026 04:02:17 +0000
Manifest next update: Mon 28 Sep 2026 04:02:17 +0000
Files and hashes: 1: Br8jDqLYrkaBjiJL6wr8w6b0avs.roa (hash: W7Sv+CJ6euSWOJRS/NssioWUOsmXYLBpEHMl3h7F400=)
2: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (hash: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=)
3: hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa (hash: QzJoFvzXpwwE2bEYMhJWP3eLZe6Rf1UyZdose9+ReX4=)
4: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (hash: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=)
5: mzjq_E9j-9cKk2TKoQGkLBC5u4Q.roa (hash: 2CE2j2LCoSSQcA7NTRzO1EXIEEufcX6KVxq3KWqXbTI=)
6: qoAheOHH9UlqCoE7XA-QfCZLxZw.roa (hash: VVjSLN2hXu/mswe8VPF+IlHQVMhQLF+wIH35GZEPXZ0=)
7: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: +T91z8NojEfN+/yQufBHuC4qSdAw7uyFA1F7cUsDP8I=)
8: xJ55egTi-SOwIls63DtlY0C_yhc.roa (hash: kC3zkfZ5rMjuoKk4EnSBPzpT5cCfNNDGdDzD8ejaa+g=)
9: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (hash: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:26:58:a2:c0:3c:00:c1:db:2c:72:da:e6:2a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Sep 27 04:02:17 2026 GMT
Not After : Sep 28 04:02:17 2026 GMT
Subject: CN=c68c7491d55aebf8065a79336fc1926ebebdeb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:db:dc:8c:ec:07:db:ad:41:43:7e:0e:ce:
79:3d:b1:e5:29:2d:31:e1:8a:7b:a2:70:d4:74:37:
7f:17:7c:94:c7:fe:9d:ed:98:7f:37:7f:72:6e:98:
01:9b:f3:6d:9b:25:d2:c2:43:80:08:24:c5:4d:74:
4c:ce:b6:96:c6:7e:59:fc:44:a8:bf:36:27:32:36:
32:ed:14:94:ae:9d:f4:df:ac:85:a3:46:55:b1:70:
46:cc:96:b6:12:07:86:79:fb:85:33:a7:fe:1a:a8:
60:5e:fa:d6:87:10:94:57:e8:fa:4a:04:f3:63:d4:
8b:b1:30:62:e3:5c:47:09:f0:57:45:7d:12:07:f7:
88:0b:4e:c1:9a:32:12:5b:d1:19:39:1c:84:cb:4e:
af:90:3e:f2:82:0d:bf:d1:73:00:74:1c:89:2d:e6:
3a:f0:ef:22:da:bb:f8:be:17:1a:31:fc:1b:aa:82:
69:bc:89:22:cd:29:06:54:fe:f3:28:63:9b:02:da:
b3:98:74:8a:fa:ed:06:87:fe:bc:b2:67:39:5f:78:
01:67:30:b7:e6:97:7b:44:b7:9a:f9:a4:03:b8:08:
72:49:f6:a3:b0:20:22:75:d7:ad:34:2f:82:65:3f:
5c:35:23:6b:70:40:bb:76:83:89:d2:95:fc:b8:75:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:74:91:D5:5A:EB:F8:06:5A:79:33:6F:C1:92:6E:BE:BD:EB:9D
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:72:4c:a2:43:49:eb:aa:2e:59:57:0c:da:42:c4:00:b1:1f:
df:d9:4b:3e:9c:a9:b7:b3:8d:58:52:10:19:2c:f8:b8:2b:ca:
43:a7:2c:b6:ee:c4:15:57:e3:28:b9:be:13:25:04:ff:51:81:
a6:84:f1:12:14:0e:36:6b:82:23:d8:e1:db:e4:bc:1c:3e:b8:
ca:3e:65:29:9d:05:fb:c9:9f:38:b9:24:e4:bb:9c:25:4c:f5:
96:b4:41:66:c0:c7:20:57:de:bd:c6:a9:f9:65:12:ab:e0:6b:
00:f4:1d:81:e7:49:b9:95:7f:bd:e5:c8:61:ae:44:a9:95:bd:
71:f7:ee:5e:30:53:66:0e:0e:8d:7c:e2:2b:1d:29:07:ff:52:
0f:f6:75:36:49:4b:d1:a7:c2:43:c9:a1:1b:5e:b7:94:00:ce:
1a:e4:b9:00:cb:be:30:83:ea:d9:d5:5e:12:db:99:31:34:7f:
29:8a:8b:85:25:82:05:34:ee:2b:ed:0f:f4:9a:1f:1a:a7:2f:
1f:17:61:4e:d0:1c:27:0d:8f:98:3e:4c:43:d3:27:6a:f3:cf:
b8:73:7f:a2:55:f5:4d:17:b5:5a:6b:e0:33:81:58:7c:1f:90:
01:14:65:5f:18:64:9e:c7:0f:02:8a:cb:08:d3:df:6b:85:6c:
82:e5:bc:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhByZYosA8AMHbLHLa5ipjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjYxYThkZjUzMjkyYzczMGUyYWUxZGZjZmM0ZmUzZmY3
NmIxZDAwHhcNMjYwOTI3MDQwMjE3WhcNMjYwOTI4MDQwMjE3WjAzMTEwLwYDVQQD
EyhjNjhjNzQ5MWQ1NWFlYmY4MDY1YTc5MzM2ZmMxOTI2ZWJlYmRlYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2vb3IzsB9utQUN+Ds55PbHlKS0x
4Yp7onDUdDd/F3yUx/6d7Zh/N39ybpgBm/NtmyXSwkOACCTFTXRMzraWxn5Z/ESo
vzYnMjYy7RSUrp3036yFo0ZVsXBGzJa2EgeGefuFM6f+GqhgXvrWhxCUV+j6SgTz
Y9SLsTBi41xHCfBXRX0SB/eIC07BmjISW9EZORyEy06vkD7ygg2/0XMAdByJLeY6
8O8i2rv4vhcaMfwbqoJpvIkizSkGVP7zKGObAtqzmHSK+u0Gh/68smc5X3gBZzC3
5pd7RLea+aQDuAhySfajsCAiddetNC+CZT9cNSNrcEC7doOJ0pX8uHXIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaMdJHVWuv4Blp5M2/Bkm6+veudMB8GA1UdIwQY
MBaAFK4mGo31MpLHMOKuHfz8T+P/drHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQt
NTY5NWQ4OWQ3YjM2LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xYTg0OWUtODYxYy00YzRkLWJjZjQtNTY5NWQ4OWQ3YjM2
LzEvcmlZYWpmVXlrc2N3NHE0ZF9QeFA0Xzkyc2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3JMokNJ
66ouWVcM2kLEALEf39lLPpypt7ONWFIQGSz4uCvKQ6cstu7EFVfjKLm+EyUE/1GB
poTxEhQONmuCI9jh2+S8HD64yj5lKZ0F+8mfOLkk5LucJUz1lrRBZsDHIFfevcap
+WUSq+BrAPQdgedJuZV/veXIYa5EqZW9cffuXjBTZg4OjXziKx0pB/9SD/Z1NklL
0afCQ8mhG163lADOGuS5AMu+MIPq2dVeEtuZMTR/KYqLhSWCBTTuK+0P9JofGqcv
HxdhTtAcJw2PmD5MQ9MnavPPuHN/olX1TRe1WmvgM4FYfB+QARRlXxhknscPAorL
CNPfa4VsguW8LA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:29 2026 by rpki-client