Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
File: 0xryhyw_VQMHOGbf_vSItxeD2rY.mft (raw, json)
Hash identifier: pxieB8AWyP5ml+UCwsy2XSCMa3mKZyPzkHauoEdoDlw=
Subject key identifier: FA:6F:57:9D:D2:61:63:4A:CD:83:BA:12:E1:1A:2B:7F:02:B7:1D:DA
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 01A001A5F621FDC95D6320A429ACCFDA92AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
Manifest number: 1700
Signing time: Fri 14 Aug 2026 19:00:48 +0000
Manifest this update: Fri 14 Aug 2026 19:00:48 +0000
Manifest next update: Sat 15 Aug 2026 19:00:48 +0000
Files and hashes: 1: 0xryhyw_VQMHOGbf_vSItxeD2rY.crl (hash: W376klfBYut1F8VpKjXu8vc12P8qqVu2wbm9aU+Lmno=)
2: CrO8u8Oq5BkBEcatDjBKbWW3E7M.roa (hash: imrBuoJmOz69UhOC1sn6VQqSOK7SozDwdVoRAOrOv0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:f6:21:fd:c9:5d:63:20:a4:29:ac:cf:da:92:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: Aug 14 19:00:48 2026 GMT
Not After : Aug 15 19:00:48 2026 GMT
Subject: CN=fa6f579dd261634acd83ba12e11a2b7f02b71dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:bb:0b:f4:ed:7e:80:3e:10:f8:d2:30:15:
14:d0:18:b5:f2:82:94:b5:15:1f:c3:94:21:b8:b5:
85:f4:e9:d4:3b:76:a5:6a:59:a4:0d:b7:53:a6:33:
3a:eb:30:cf:8e:ed:83:13:99:3c:87:be:2e:9e:89:
94:7f:64:b0:b7:5e:45:b7:82:5d:1c:24:29:36:e9:
c5:e1:48:b2:90:98:70:93:42:b2:be:a4:47:f0:d1:
49:4c:96:ce:99:30:47:f2:1d:85:92:1c:a3:ff:f5:
e1:62:de:d5:d3:c8:98:9b:f0:60:24:44:f9:7f:ac:
fd:93:dc:d9:c9:f8:1a:89:ee:1b:88:38:91:20:c2:
f1:1c:ef:a9:0a:ca:16:ff:2d:ad:e2:47:76:55:a5:
61:db:a4:95:86:e9:d5:24:fd:cd:e3:1e:b1:fb:27:
98:6d:9c:8d:ff:88:cc:46:e3:a0:e7:d3:00:ae:95:
fa:46:26:db:72:13:53:e1:34:cd:be:6f:44:6a:04:
7c:80:35:68:1c:8f:cc:79:78:db:93:1d:85:2d:d6:
58:1c:37:3e:8f:95:d2:dc:3f:96:db:08:6e:54:02:
95:fd:e3:73:1c:21:f4:5b:bc:f9:75:fe:8b:cb:83:
f1:8c:0c:34:75:29:17:73:c1:8a:ed:22:c1:9e:26:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:57:9D:D2:61:63:4A:CD:83:BA:12:E1:1A:2B:7F:02:B7:1D:DA
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:e9:91:9a:cd:8b:95:25:3a:eb:5a:ed:aa:62:46:03:30:
72:a6:0d:8a:1e:60:2d:0d:30:33:91:b6:60:c1:72:1c:67:64:
0e:4a:da:e2:30:8a:36:2c:1d:ee:1e:63:16:3e:c9:84:f9:8d:
67:1f:c1:55:9f:91:d0:97:83:bc:2c:4e:b5:9b:d2:bd:47:cb:
cf:8f:8e:d9:f4:dc:22:05:d4:d5:da:c4:a5:05:fa:2b:b9:e2:
06:09:a6:0e:62:d3:ee:fe:a2:34:d1:61:43:62:80:fc:b2:ce:
f6:b9:0e:22:db:31:9a:fe:cf:8d:b8:02:65:e0:92:c8:dd:95:
bd:a3:28:dd:da:0e:d5:3a:6e:7d:3e:fb:eb:47:1f:2c:d0:52:
72:98:09:32:58:0e:e1:9a:2b:ce:72:89:a5:ce:c1:88:29:2d:
5c:27:e7:07:45:c1:68:a5:3d:13:6c:9b:2c:02:97:e2:8b:23:
cf:25:ae:97:70:2a:f6:66:13:48:05:3a:ac:90:74:5d:db:94:
1a:d2:93:4b:dd:5b:05:c4:ae:10:c3:7b:8c:45:89:e6:64:3b:
5e:d2:c9:c6:9f:d3:94:40:80:ad:36:7d:e3:18:85:73:f0:a4:
dc:eb:52:64:14:f0:7a:63:ff:ef:08:d4:a9:71:67:36:72:96:
19:5d:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:44 2026 by rpki-client