Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: ZuStrl3SVgqLvqnPIbjg+D9VFUPrt5h/PjsYngrpeDc=
Subject key identifier: 81:47:17:E3:0E:7B:E5:12:7E:FB:7F:D3:86:51:6F:B2:EA:CD:21:1D
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 01A11BD09E1182AE2E52A74FEC71BBAA6FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: 0283
Signing time: Thu 08 Oct 2026 14:00:18 +0000
Manifest this update: Thu 08 Oct 2026 14:00:18 +0000
Manifest next update: Fri 09 Oct 2026 14:00:18 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: jCZaui7U4HGkxtr3I5Vtf7GPkiy/KgySh6CIci+/JaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:9e:11:82:ae:2e:52:a7:4f:ec:71:bb:aa:6f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Oct 8 14:00:18 2026 GMT
Not After : Oct 9 14:00:18 2026 GMT
Subject: CN=814717e30e7be5127efb7fd386516fb2eacd211d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:f4:9a:bb:8e:99:53:76:4b:f3:55:59:57:
09:c2:b8:9d:14:62:cf:72:6d:ae:54:21:0f:c9:a8:
64:a9:21:31:80:c8:b0:60:ad:66:88:1f:02:77:66:
b5:94:8f:17:c0:40:7d:21:9d:4c:81:c6:41:20:a5:
9f:35:6c:00:6c:4f:86:07:93:fc:ee:36:13:89:b1:
e5:82:f1:43:22:c4:41:32:94:7c:40:7c:dd:54:ef:
e7:1e:67:51:2e:56:c7:d5:3d:74:68:b0:85:5d:38:
b1:04:60:11:23:00:06:8b:04:a3:c1:a2:b4:10:c4:
04:4e:7f:d4:cd:7b:f2:e2:71:66:0e:bd:c2:e5:a9:
0d:fb:76:59:a8:e4:d9:42:8e:d0:cc:e3:c3:26:0f:
74:09:1f:3a:c2:65:71:d6:b2:2c:13:dc:1b:c8:d5:
38:63:84:e1:b4:6f:61:39:47:a7:f4:d6:24:3b:f8:
f9:96:19:ba:1a:83:91:ca:d8:57:a2:61:1d:ad:cc:
c0:cf:aa:bb:e6:b4:d3:d5:4d:c8:4c:cd:14:20:07:
2a:47:ba:47:57:d1:43:da:fe:61:52:b5:6b:1b:74:
b2:93:77:4e:74:ab:5d:ab:79:ab:40:b5:3d:5c:42:
76:6b:8e:0b:dd:90:25:22:c4:1f:89:37:00:60:23:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:17:E3:0E:7B:E5:12:7E:FB:7F:D3:86:51:6F:B2:EA:CD:21:1D
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3c:ce:49:54:30:84:33:f9:d5:5d:e5:ab:bf:2d:28:bf:f3:
4e:92:0e:84:3a:b9:e9:30:2b:cd:d9:12:6a:b8:ab:10:58:25:
02:d3:8f:09:b3:1d:97:fc:09:38:4d:5f:26:ca:45:69:aa:e2:
78:8e:5b:c6:d3:39:91:b1:da:73:bd:08:d3:a2:70:3e:83:fa:
13:de:c6:3f:25:bc:d2:20:c9:55:5e:b0:3f:c7:c3:a5:f4:34:
1b:49:b9:98:d4:86:9a:35:6d:29:88:40:01:b2:c1:cc:b9:69:
29:f3:6b:e8:ae:c1:66:75:63:42:0d:d4:01:cd:ef:cd:53:86:
41:c1:6a:3b:9c:31:8c:d3:bd:ca:33:f8:10:ef:99:55:0e:4e:
e5:d5:c1:39:34:f4:8a:1e:f6:70:6f:06:d0:c4:a5:77:c3:f4:
fc:73:ed:d2:f4:63:c9:47:e3:b8:70:46:0a:61:97:5b:93:2d:
59:ad:b1:a9:f6:4d:b7:22:1f:7b:a2:43:cf:aa:d8:97:e4:61:
52:d6:4a:3b:ef:cf:ff:5b:13:81:cb:29:90:11:8a:be:15:b9:
f4:7a:f3:77:23:05:e3:d8:04:53:01:12:58:72:c5:e6:4e:7d:
5f:7a:ee:3e:43:ec:1b:39:fb:f0:5b:c5:6a:c0:b8:87:f9:a3:
0d:da:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:53:01 2026 by rpki-client