Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
File: riXqr5GhZiyW---d5MX6Hh0IdJc.mft (raw, json)
Hash identifier: ZL4bPQOu6B6EoRFqaV1A/vswSgATVzx7OnRWV3CFBXw=
Subject key identifier: 77:8D:05:3B:0F:31:D0:CB:30:3A:07:2C:6F:2A:9D:F2:17:04:01:47
Authority key identifier: AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
Certificate issuer: /CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Certificate serial: 019FCFA78B58C5D51E6315B3E98E5F76620A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
Manifest number: 01D7
Signing time: Wed 05 Aug 2026 02:01:31 +0000
Manifest this update: Wed 05 Aug 2026 02:01:31 +0000
Manifest next update: Thu 06 Aug 2026 02:01:31 +0000
Files and hashes: 1: IGeQzavDepXPW2JRBodeIJKbJT0.roa (hash: R+Y0Kt5axtO1z9YPtGYoVxdWFhFirYa/xiVOmRUUMuY=)
2: qaTAqrI1fUHmVwthqrZ_p4zXwY0.roa (hash: HUrv9uurkx2++8ILE32eKLmOAxI79xmY3LBCL4R3hHA=)
3: riXqr5GhZiyW---d5MX6Hh0IdJc.crl (hash: NivV+/TKTTFYcm+CbDXATrAoGtyPjA9zZBaEgdu9nf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:a7:8b:58:c5:d5:1e:63:15:b3:e9:8e:5f:76:62:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae25eaaf91a1662c96fbef9de4c5fa1e1d087497
Validity
Not Before: Aug 5 02:01:31 2026 GMT
Not After : Aug 6 02:01:31 2026 GMT
Subject: CN=778d053b0f31d0cb303a072c6f2a9df217040147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:4a:ed:75:c5:fb:b2:a7:46:a5:01:aa:d6:
92:f2:76:ea:b5:8e:4b:7d:84:41:b9:fa:22:3d:97:
a3:32:b9:91:e8:b3:b5:72:4e:ec:6b:4a:85:79:a6:
9a:92:3e:8c:2a:00:bc:57:a1:5d:93:8c:db:62:91:
86:44:84:d2:b1:01:da:bb:bc:16:19:f2:2e:5e:36:
11:0e:ce:53:59:1b:6a:3b:ff:33:6d:f1:a0:4a:8d:
e8:c7:a4:d7:04:89:a8:8b:f2:94:75:fe:08:31:c6:
1a:d4:d4:cb:5b:d5:58:61:b4:9f:77:b3:59:0d:54:
b3:ac:df:7f:8d:e0:2e:3c:94:f4:3d:c0:33:4c:05:
b5:29:27:51:63:8f:11:e8:20:0a:1b:ce:14:0e:8f:
5c:a5:33:46:59:28:16:20:53:97:e3:06:c8:92:ac:
0b:f9:6b:f6:a0:00:3e:d5:43:07:2c:91:26:3d:a3:
82:72:76:5d:eb:8a:70:28:d8:a2:d9:02:e8:e7:1f:
00:d0:2a:97:65:59:b3:29:dd:a2:b4:ca:dd:07:29:
5b:30:8d:19:3d:a4:57:20:f8:84:98:1a:0b:77:ef:
11:51:d8:2f:eb:5f:08:93:fc:3e:eb:3b:bf:0b:9d:
44:02:8c:05:24:54:a1:3a:4a:29:9d:2b:91:20:55:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8D:05:3B:0F:31:D0:CB:30:3A:07:2C:6F:2A:9D:F2:17:04:01:47
X509v3 Authority Key Identifier:
keyid:AE:25:EA:AF:91:A1:66:2C:96:FB:EF:9D:E4:C5:FA:1E:1D:08:74:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riXqr5GhZiyW---d5MX6Hh0IdJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/853b38-ee47-404c-a399-cc1a7ccab702/1/riXqr5GhZiyW---d5MX6Hh0IdJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a0:9b:f9:5b:0e:e1:3f:8f:78:fa:53:98:2b:df:f1:23:c7:
79:93:e2:d1:e1:f7:23:7c:fa:d1:8c:f5:e4:4c:e1:f3:82:6e:
91:85:98:68:45:28:55:3b:55:aa:06:ed:84:6c:58:9f:1b:9d:
96:43:7b:06:35:d4:2f:86:ce:d3:8e:9f:7a:aa:e6:c6:3e:5c:
48:65:18:70:25:11:c2:2b:9c:90:53:b8:50:24:34:96:0f:08:
6b:11:9c:fa:83:28:ac:a8:ee:9b:3b:ac:89:8e:12:b1:5b:b1:
ae:4e:a5:2d:54:55:56:0b:7a:d3:b5:e1:79:93:5a:ca:ac:17:
29:20:80:57:2c:b8:29:84:80:c3:70:9b:b6:75:bf:3a:c8:89:
ce:6c:d5:d5:fb:4a:e2:91:e6:d5:3a:83:7b:73:cf:7c:85:28:
05:9e:cf:ca:78:66:e1:8c:f4:f4:16:a1:da:73:0a:43:9f:01:
90:62:cb:0a:45:ba:33:cc:7b:3b:61:ea:f2:1e:ec:a4:2b:41:
eb:9f:3f:42:18:66:cf:41:53:5e:b7:fa:e9:df:c0:fa:87:1c:
c4:68:f0:fa:65:51:ff:41:40:d2:f0:45:12:e2:26:87:22:ff:
2b:49:ac:9f:aa:12:65:ce:e2:63:a0:fc:0a:0f:2e:ef:d0:8d:
57:ed:64:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/Pp4tYxdUeYxWz6Y5fdmIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMjVlYWFmOTFhMTY2MmM5NmZiZWY5ZGU0YzVmYTFlMWQw
ODc0OTcwHhcNMjYwODA1MDIwMTMxWhcNMjYwODA2MDIwMTMxWjAzMTEwLwYDVQQD
Eyg3NzhkMDUzYjBmMzFkMGNiMzAzYTA3MmM2ZjJhOWRmMjE3MDQwMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0RK7XXF+7KnRqUBqtaS8nbqtY5L
fYRBufoiPZejMrmR6LO1ck7sa0qFeaaakj6MKgC8V6Fdk4zbYpGGRITSsQHau7wW
GfIuXjYRDs5TWRtqO/8zbfGgSo3ox6TXBImoi/KUdf4IMcYa1NTLW9VYYbSfd7NZ
DVSzrN9/jeAuPJT0PcAzTAW1KSdRY48R6CAKG84UDo9cpTNGWSgWIFOX4wbIkqwL
+Wv2oAA+1UMHLJEmPaOCcnZd64pwKNii2QLo5x8A0CqXZVmzKd2itMrdBylbMI0Z
PaRXIPiEmBoLd+8RUdgv618Ik/w+6zu/C51EAowFJFShOkopnSuRIFV1BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeNBTsPMdDLMDoHLG8qnfIXBAFHMB8GA1UdIwQY
MBaAFK4l6q+RoWYslvvvneTF+h4dCHSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84NTNiMzgtZWU0Ny00MDRjLWEzOTkt
Y2MxYTdjY2FiNzAyLzEvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84NTNiMzgtZWU0Ny00MDRjLWEzOTktY2MxYTdjY2FiNzAy
LzEvcmlYcXI1R2haaXlXLS0tZDVNWDZIaDBJZEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwaCb+VsO
4T+PePpTmCvf8SPHeZPi0eH3I3z60Yz15Ezh84JukYWYaEUoVTtVqgbthGxYnxud
lkN7BjXUL4bO046feqrmxj5cSGUYcCURwiuckFO4UCQ0lg8IaxGc+oMorKjumzus
iY4SsVuxrk6lLVRVVgt607XheZNayqwXKSCAVyy4KYSAw3CbtnW/OsiJzmzV1ftK
4pHm1TqDe3PPfIUoBZ7Pynhm4Yz09Bah2nMKQ58BkGLLCkW6M8x7O2Hq8h7spCtB
658/Qhhmz0FTXrf66d/A+occxGjw+mVR/0FA0vBFEuImhyL/K0msn6oSZc7iY6D8
Cg8u79CNV+1kmA==
-----END CERTIFICATE-----
Generated at Wed Aug 5 04:56:02 2026 by rpki-client