
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: lKPczrKQcaHHTFbhFb+zXK/nzTkpJ3KqowkHoveLZW4=
Subject key identifier: 3D:09:6E:A8:58:71:52:28:72:D6:D9:86:5B:36:68:C3:FA:B2:02:5D
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 01A002EF509618C08AAA11A78717444923D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1A44
Signing time: Sat 15 Aug 2026 01:00:33 +0000
Manifest this update: Sat 15 Aug 2026 01:00:33 +0000
Manifest next update: Sun 16 Aug 2026 01:00:33 +0000
Files and hashes: 1: Br8jDqLYrkaBjiJL6wr8w6b0avs.roa (hash: W7Sv+CJ6euSWOJRS/NssioWUOsmXYLBpEHMl3h7F400=)
2: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (hash: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=)
3: hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa (hash: QzJoFvzXpwwE2bEYMhJWP3eLZe6Rf1UyZdose9+ReX4=)
4: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (hash: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=)
5: mzjq_E9j-9cKk2TKoQGkLBC5u4Q.roa (hash: 2CE2j2LCoSSQcA7NTRzO1EXIEEufcX6KVxq3KWqXbTI=)
6: qoAheOHH9UlqCoE7XA-QfCZLxZw.roa (hash: VVjSLN2hXu/mswe8VPF+IlHQVMhQLF+wIH35GZEPXZ0=)
7: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: DRC40KoSWNblkBB/Y7VstkitCY5BiNqZ0L5d4UR2wMI=)
8: xJ55egTi-SOwIls63DtlY0C_yhc.roa (hash: kC3zkfZ5rMjuoKk4EnSBPzpT5cCfNNDGdDzD8ejaa+g=)
9: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (hash: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:50:96:18:c0:8a:aa:11:a7:87:17:44:49:23:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Aug 15 01:00:33 2026 GMT
Not After : Aug 16 01:00:33 2026 GMT
Subject: CN=3d096ea85871522872d6d9865b3668c3fab2025d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:e8:65:16:fa:e7:1f:1e:7f:48:07:97:4f:
6a:c4:af:3a:b2:e2:ad:87:93:4e:a4:56:a8:16:83:
30:2d:fb:e3:4b:0b:5c:30:e7:93:32:ed:6b:5a:30:
3e:c6:0b:68:eb:c3:d2:8f:9d:af:4b:a6:1b:d2:cf:
2d:bd:08:c7:42:c6:d3:0c:ac:7a:7c:da:a0:f3:7a:
db:a2:a2:2a:6a:8a:56:09:61:95:3b:38:36:b5:c4:
20:03:b6:a2:95:45:0f:b5:4d:29:67:a8:e5:08:2a:
0d:bb:f6:e6:e6:50:17:d7:a0:2e:90:74:a0:93:2b:
6f:4e:d4:57:2e:d4:4d:dc:09:78:5d:96:ed:15:0a:
ea:4a:4b:a3:e6:ca:d4:06:1b:01:58:cb:2f:2e:77:
6d:3b:17:23:43:ac:55:67:cf:8f:c7:23:e2:d2:7a:
61:77:09:62:df:c7:38:e9:e5:69:cf:6b:e8:46:2a:
50:dd:55:81:0f:57:8f:72:90:fe:de:b0:a1:28:fd:
23:ac:0c:0d:87:d7:63:b7:76:90:5a:91:ff:44:04:
e5:69:b9:af:74:4d:a7:cf:a8:e7:34:e1:65:84:07:
a5:b4:1b:de:76:95:ac:bf:2e:6b:43:3e:53:d1:db:
e0:fc:75:94:0d:df:ca:d8:09:54:17:61:f1:89:de:
b0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:09:6E:A8:58:71:52:28:72:D6:D9:86:5B:36:68:C3:FA:B2:02:5D
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1c:f0:29:5f:be:06:15:94:ae:c5:39:33:89:d4:d7:01:c7:
db:4d:29:4a:8c:a5:fd:80:f2:2b:b5:eb:a8:2b:f0:7a:39:9b:
91:99:8c:9f:14:e7:4a:44:a7:b6:75:d4:aa:c3:83:21:62:b1:
db:ae:56:18:9b:1d:6b:ba:ba:98:07:04:68:d2:ff:49:a0:12:
56:a1:fd:e3:bb:02:1e:d2:e4:fd:46:e0:6c:9c:96:86:7a:14:
a3:2d:85:71:11:f5:cf:70:34:ab:e6:ab:be:d0:67:8f:02:4c:
9a:dd:84:73:ff:13:88:3d:1b:9e:dd:79:4f:26:e5:3c:7c:6e:
b3:c8:5e:e8:48:53:50:4c:45:df:4b:60:83:d4:10:9e:c6:c7:
45:eb:e7:5c:45:85:fa:c0:ab:eb:4e:8f:2c:bf:12:c8:a2:3a:
9e:fc:88:65:31:a8:14:3b:ca:b0:98:9d:bd:b6:1a:d6:c1:c2:
75:0b:b5:33:98:d4:99:87:04:18:1c:d7:2e:75:94:9e:a5:c9:
c6:08:40:9f:46:7b:ed:e9:25:0a:f1:81:61:d5:1f:02:b7:d2:
3a:6c:a4:8a:6d:ae:b0:aa:51:07:d6:a3:83:8b:d5:ad:72:ef:
6f:aa:8f:01:6e:64:c2:b1:64:86:33:ea:6f:99:36:ff:9b:11:
7d:72:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:56 2026 by rpki-client