Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
File: raIk0OXYWSPj7P_C173W-b7Q3lY.mft (raw, json)
Hash identifier: nrDMA++LW91YWpKnJu/0+sQST7LPeZrJYPwWqKBHwZk=
Subject key identifier: A5:0A:72:61:49:0B:3D:B0:BB:DA:6A:33:06:F7:31:20:B4:FC:8D:F9
Authority key identifier: AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
Certificate issuer: /CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Certificate serial: 01A14BAB6EAEDFFAA44AC17E8B8CF347C342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:28 +0000
Manifest this update: Sat 17 Oct 2026 21:01:28 +0000
Manifest next update: Sun 18 Oct 2026 21:01:28 +0000
Files and hashes: 1: UNpzg1fBXvY1R69SVFovHk6gy1w.roa (hash: meovwRk5rmV2wC72JrwzouzdrYO+qwuFP7XdlxUNR08=)
2: raIk0OXYWSPj7P_C173W-b7Q3lY.crl (hash: AQ3UwFXOiMTDggxholIt0+tziCDcvw6vlfGJgA94dZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:6e:ae:df:fa:a4:4a:c1:7e:8b:8c:f3:47:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada224d0e5d85923e3ecffc2d7bdd6f9bed0de56
Validity
Not Before: Oct 17 21:01:28 2026 GMT
Not After : Oct 18 21:01:28 2026 GMT
Subject: CN=a50a7261490b3db0bbda6a3306f73120b4fc8df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:d5:35:06:01:4e:6a:10:01:b6:cb:da:15:
75:68:0b:f7:6d:3b:84:3f:f2:e6:1d:2e:a8:c1:97:
d2:67:f2:4a:1f:af:de:23:f1:2a:ac:bf:39:2e:fd:
99:ca:68:c8:66:dc:aa:76:8a:0b:bb:a7:95:67:c8:
68:c6:5f:4b:4b:32:e1:53:8d:d8:3f:93:30:c6:55:
61:c8:38:99:91:8f:7a:4c:2c:56:fa:7b:c7:56:92:
0b:3d:c6:bb:99:18:85:d1:81:10:e5:b6:d7:fa:8c:
9a:57:91:4d:9f:4d:17:26:df:56:63:0d:81:b2:1a:
b1:06:69:61:3e:60:2f:5c:8d:82:9a:f8:cd:2c:9d:
61:f5:a2:bf:73:d9:4d:14:fe:5c:41:3f:77:22:90:
01:7d:e7:09:80:c7:64:36:23:52:f5:75:77:89:1d:
3f:24:97:14:da:35:0e:3e:8c:77:e9:c7:dc:a6:06:
a2:78:11:61:19:04:a3:a0:93:86:a9:79:bb:8f:27:
2d:c5:73:0d:8b:da:24:dc:b3:f3:d3:bb:b0:6b:c0:
84:db:f2:f6:4d:80:15:1d:b5:7e:45:fc:38:ea:d3:
e4:75:a8:39:cc:fe:45:ad:7d:2f:21:9c:f7:08:f9:
85:82:fc:ee:ed:b3:a2:65:41:57:1c:44:4b:1f:9a:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:72:61:49:0B:3D:B0:BB:DA:6A:33:06:F7:31:20:B4:FC:8D:F9
X509v3 Authority Key Identifier:
keyid:AD:A2:24:D0:E5:D8:59:23:E3:EC:FF:C2:D7:BD:D6:F9:BE:D0:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raIk0OXYWSPj7P_C173W-b7Q3lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/raIk0OXYWSPj7P_C173W-b7Q3lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:47:77:42:83:7b:13:5f:89:1f:7f:49:78:15:f4:e8:82:fd:
62:b6:41:75:89:d1:3a:9a:21:44:2f:4d:dc:48:76:20:eb:89:
36:ba:5e:70:e2:7c:9e:4d:9e:8a:a2:29:f9:d5:84:16:1b:e2:
db:4b:68:9c:19:6d:b1:16:59:c8:77:eb:0d:7c:96:9a:88:91:
3d:ff:4e:71:0c:34:03:a1:a8:f5:d5:da:65:af:f9:87:3a:7a:
81:52:e3:bd:97:18:7b:e6:68:12:97:c8:28:db:d6:85:d9:b4:
21:6e:d4:35:1e:72:3a:99:7b:b1:16:45:1f:b1:d9:e8:08:99:
55:3c:0d:f6:2c:f0:b6:7f:fe:5e:58:ed:25:4d:b8:f6:de:a0:
b0:ce:9f:6b:6e:c3:92:4b:8f:91:ec:d2:30:86:44:97:fe:70:
7f:f8:9b:e9:bc:32:e6:ce:fe:d3:33:d0:7b:ac:47:d8:78:09:
9a:1e:49:4c:72:90:29:20:2d:f5:6e:47:b9:46:1f:dc:82:f0:
bf:36:d8:79:33:02:0f:76:a1:00:42:40:d1:ce:a3:f2:34:48:
fd:64:61:67:6f:5c:22:14:4b:a3:71:04:88:ef:a2:38:3c:4c:
7b:72:19:05:60:98:8a:6a:69:88:64:c0:29:c7:63:4a:be:33:
44:c1:d4:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLq26u3/qkSsF+i4zzR8NCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTIyNGQwZTVkODU5MjNlM2VjZmZjMmQ3YmRkNmY5YmVk
MGRlNTYwHhcNMjYxMDE3MjEwMTI4WhcNMjYxMDE4MjEwMTI4WjAzMTEwLwYDVQQD
EyhhNTBhNzI2MTQ5MGIzZGIwYmJkYTZhMzMwNmY3MzEyMGI0ZmM4ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCXVNQYBTmoQAbbL2hV1aAv3bTuE
P/LmHS6owZfSZ/JKH6/eI/EqrL85Lv2ZymjIZtyqdooLu6eVZ8hoxl9LSzLhU43Y
P5MwxlVhyDiZkY96TCxW+nvHVpILPca7mRiF0YEQ5bbX+oyaV5FNn00XJt9WYw2B
shqxBmlhPmAvXI2CmvjNLJ1h9aK/c9lNFP5cQT93IpABfecJgMdkNiNS9XV3iR0/
JJcU2jUOPox36cfcpgaieBFhGQSjoJOGqXm7jyctxXMNi9ok3LPz07uwa8CE2/L2
TYAVHbV+Rfw46tPkdag5zP5FrX0vIZz3CPmFgvzu7bOiZUFXHERLH5oiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUKcmFJCz2wu9pqMwb3MSC0/I35MB8GA1UdIwQY
MBaAFK2iJNDl2Fkj4+z/wte91vm+0N5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFJazBPWFlXU1BqN1BfQzE3M1ctYjdRM2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQt
Njk1ZDgyOTk5MjZlLzEvcmFJazBPWFlXU1BqN1BfQzE3M1ctYjdRM2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYzYwY2QtZDBiNC00YzhiLThhNGQtNjk1ZDgyOTk5MjZl
LzEvcmFJazBPWFlXU1BqN1BfQzE3M1ctYjdRM2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEd3QoN7
E1+JH39JeBX06IL9YrZBdYnROpohRC9N3Eh2IOuJNrpecOJ8nk2eiqIp+dWEFhvi
20tonBltsRZZyHfrDXyWmoiRPf9OcQw0A6Go9dXaZa/5hzp6gVLjvZcYe+ZoEpfI
KNvWhdm0IW7UNR5yOpl7sRZFH7HZ6AiZVTwN9izwtn/+XljtJU249t6gsM6fa27D
kkuPkezSMIZEl/5wf/ib6bwy5s7+0zPQe6xH2HgJmh5JTHKQKSAt9W5HuUYf3ILw
vzbYeTMCD3ahAEJA0c6j8jRI/WRhZ29cIhRLo3EEiO+iODxMe3IZBWCYimppiGTA
KcdjSr4zRMHUtQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 04:10:08 2026 by rpki-client