Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: 0aVhHl9qPVRjISDGsF+p+A97UwdsaIsFlkdF+neo4Ic=
Subject key identifier: 36:24:05:C5:FF:46:0B:75:F9:CA:1D:F3:94:E4:7E:21:D6:FC:AF:1B
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 019D14904B0C7EB83C9EF118634DCD3578A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: 6D
Signing time: Sun 22 Mar 2026 08:01:33 +0000
Manifest this update: Sun 22 Mar 2026 08:01:33 +0000
Manifest next update: Mon 23 Mar 2026 08:01:33 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: oY2Mo2PLZgB/p5EVWNDFjsZmL3wgmo/IBEvHgf/VDDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:90:4b:0c:7e:b8:3c:9e:f1:18:63:4d:cd:35:78:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Mar 22 08:01:33 2026 GMT
Not After : Mar 23 08:01:33 2026 GMT
Subject: CN=362405c5ff460b75f9ca1df394e47e21d6fcaf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:40:8a:3c:4a:08:c8:8c:26:0e:9b:ce:a4:
ef:df:2d:d7:83:0a:ec:96:fc:da:c2:16:97:44:95:
1d:7a:3c:c0:da:c1:e3:70:d8:e1:5b:de:97:44:87:
31:05:b2:59:96:1c:3b:2f:a1:04:c2:cd:77:b7:41:
52:cf:f7:de:49:80:89:09:fa:41:4e:8d:b8:e0:e3:
d4:28:44:21:64:f5:f7:dd:2a:bc:fd:1e:4a:9e:c8:
88:ab:1a:cd:e2:fe:9b:76:ac:97:2d:8d:12:80:6f:
c8:ee:17:ca:96:e1:44:49:de:ce:a1:f6:c0:e3:32:
dc:b3:f2:60:22:99:fd:41:c6:34:bd:f5:1b:f8:28:
08:18:8f:63:ed:88:4a:e7:3a:11:14:f4:79:d3:72:
e7:f5:c7:fd:f7:3f:53:1e:55:4b:a6:8f:91:9d:d4:
c4:2b:8b:5b:7d:31:0a:53:7b:ec:6d:0c:88:19:60:
b5:3f:26:99:41:67:3e:64:b0:e8:a1:b3:4e:48:89:
31:e4:86:d9:e8:ce:47:03:42:18:43:05:37:3f:cc:
e7:ea:23:ae:fa:0e:31:c2:0f:c6:00:bf:cc:66:15:
56:60:15:db:80:f7:9c:64:da:60:d9:a0:f8:00:8d:
9c:2c:66:2b:60:97:01:5e:4c:9a:c6:bb:49:a5:63:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:05:C5:FF:46:0B:75:F9:CA:1D:F3:94:E4:7E:21:D6:FC:AF:1B
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a7:88:aa:09:c1:d1:35:8f:c7:a7:de:10:15:d1:e5:1d:63:
f8:af:0b:36:38:91:8b:3e:bc:6f:b5:fa:f3:a4:6a:4a:5b:e0:
66:0c:84:5b:84:44:99:ff:3b:ff:c3:b9:b7:36:32:51:c9:a7:
a4:0e:c6:e9:c6:81:61:41:cd:c6:ca:62:27:8e:f0:fa:d6:6a:
49:f8:f4:f0:b2:be:ae:7e:ea:e2:83:c1:96:6e:5d:58:b2:45:
98:db:51:cc:bf:28:9c:e7:db:3a:5b:dc:89:5d:07:50:35:6b:
b7:1f:98:b9:74:dd:2d:ea:e7:95:f4:e6:5d:3c:78:5d:f8:68:
c0:f2:34:e9:0a:2d:53:b6:c1:c3:b5:94:e5:fc:a6:0a:9d:90:
d2:2e:7a:ce:0b:17:b5:7b:da:8b:12:c3:f2:fd:c3:a7:3b:2d:
ec:c7:43:d4:82:8c:5d:53:f9:97:b3:b7:e4:ef:57:b2:12:c1:
13:2e:aa:e9:54:b9:95:2d:c8:7e:43:bd:0d:31:de:99:3d:c4:
c4:7a:84:00:20:13:4e:3a:f4:76:37:e9:39:e7:98:5d:e7:c7:
f6:33:7d:6f:d4:f2:49:57:71:d2:b2:de:23:09:1c:5d:48:0a:
8a:5e:19:ca:a6:7a:b0:dc:74:02:45:55:fd:65:07:42:e8:a7:
99:26:55:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0UkEsMfrg8nvEYY03NNXiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjVlYWFmOTFhMTY2MmM5NmZiZWY5ZGU0YzVmYTFlMWQw
ODc0OTcwHhcNMjYwMzIyMDgwMTMzWhcNMjYwMzIzMDgwMTMzWjAzMTEwLwYDVQQD
EygzNjI0MDVjNWZmNDYwYjc1ZjljYTFkZjM5NGU0N2UyMWQ2ZmNhZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQBAijxKCMiMJg6bzqTv3y3Xgwrs
lvzawhaXRJUdejzA2sHjcNjhW96XRIcxBbJZlhw7L6EEws13t0FSz/feSYCJCfpB
To244OPUKEQhZPX33Sq8/R5KnsiIqxrN4v6bdqyXLY0SgG/I7hfKluFESd7OofbA
4zLcs/JgIpn9QcY0vfUb+CgIGI9j7YhK5zoRFPR503Ln9cf99z9THlVLpo+RndTE
K4tbfTEKU3vsbQyIGWC1PyaZQWc+ZLDoobNOSIkx5IbZ6M5HA0IYQwU3P8zn6iOu
+g4xwg/GAL/MZhVWYBXbgPecZNpg2aD4AI2cLGYrYJcBXkyaxrtJpWNm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYkBcX/Rgt1+cod85TkfiHW/K8bMB8GA1UdIwQY
MBaAFK4l6q+RoWYslvvvneTF+h4dCHSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84NTNiMzgtZWU0Ny00MDRjLWEzOTkt
Y2MxYTdjY2FiNzAyLzEvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84NTNiMzgtZWU0Ny00MDRjLWEzOTktY2MxYTdjY2FiNzAy
LzEvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKeIqgnB
0TWPx6feEBXR5R1j+K8LNjiRiz68b7X686RqSlvgZgyEW4REmf87/8O5tzYyUcmn
pA7G6caBYUHNxspiJ47w+tZqSfj08LK+rn7q4oPBlm5dWLJFmNtRzL8onOfbOlvc
iV0HUDVrtx+YuXTdLernlfTmXTx4XfhowPI06QotU7bBw7WU5fymCp2Q0i56zgsX
tXvaixLD8v3Dpzst7MdD1IKMXVP5l7O35O9XshLBEy6q6VS5lS3IfkO9DTHemT3E
xHqEACATTjr0djfpOeeYXefH9jN9b9TySVdx0rLeIwkcXUgKil4ZyqZ6sNx0AkVV
/WUHQuinmSZVcg==
-----END CERTIFICATE-----
Generated at Sun Mar 22 13:29:56 2026 by rpki-client