Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: a5zACQDCLQGq/NSBewcaCc9k078XPe/RThBEr858+jo=
Subject key identifier: 5A:B4:44:C9:C8:10:DA:FE:52:99:DA:74:4C:18:6E:3E:0F:7C:E3:73
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 01A1114E057B631475E0D768FF7233CFBDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1AD0
Signing time: Tue 06 Oct 2026 13:01:28 +0000
Manifest this update: Tue 06 Oct 2026 13:01:28 +0000
Manifest next update: Wed 07 Oct 2026 13:01:28 +0000
Files and hashes: 1: Br8jDqLYrkaBjiJL6wr8w6b0avs.roa (hash: W7Sv+CJ6euSWOJRS/NssioWUOsmXYLBpEHMl3h7F400=)
2: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (hash: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=)
3: hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa (hash: QzJoFvzXpwwE2bEYMhJWP3eLZe6Rf1UyZdose9+ReX4=)
4: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (hash: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=)
5: mzjq_E9j-9cKk2TKoQGkLBC5u4Q.roa (hash: 2CE2j2LCoSSQcA7NTRzO1EXIEEufcX6KVxq3KWqXbTI=)
6: qoAheOHH9UlqCoE7XA-QfCZLxZw.roa (hash: VVjSLN2hXu/mswe8VPF+IlHQVMhQLF+wIH35GZEPXZ0=)
7: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: LCSUwjb0qIrWLoTVuSMrFF/XOlOV0edVgH9TYS63Urg=)
8: xJ55egTi-SOwIls63DtlY0C_yhc.roa (hash: kC3zkfZ5rMjuoKk4EnSBPzpT5cCfNNDGdDzD8ejaa+g=)
9: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (hash: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4e:05:7b:63:14:75:e0:d7:68:ff:72:33:cf:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Oct 6 13:01:28 2026 GMT
Not After : Oct 7 13:01:28 2026 GMT
Subject: CN=5ab444c9c810dafe5299da744c186e3e0f7ce373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:0c:52:27:37:b7:5b:47:a4:bd:54:0c:6d:
66:4d:5b:ea:c0:fa:24:69:fb:0e:50:a5:e8:21:a0:
d3:66:00:2c:68:15:26:26:22:96:8f:25:19:56:5a:
07:af:94:d2:19:82:c5:dc:b5:3a:32:ea:aa:33:d8:
76:ae:8f:23:3d:86:8b:9c:85:e1:78:f9:bf:72:e9:
45:1e:43:2b:2f:ad:62:f6:db:4b:47:17:90:ea:2e:
d3:f5:5a:9f:aa:b8:85:b8:cd:25:33:ec:93:d3:fe:
35:f3:a0:d7:8f:3d:cb:0d:ac:b0:c3:c5:99:b0:a8:
05:bd:4d:29:05:e3:f3:4d:2d:eb:47:6b:39:29:aa:
c2:43:ef:53:cb:bd:81:15:66:57:de:45:e8:cc:65:
c9:45:57:2b:88:4b:df:0a:ea:42:ae:65:50:81:76:
96:9b:20:91:fb:44:df:fc:ce:e1:57:ed:60:50:1b:
10:01:d5:c9:22:83:3c:2c:17:64:70:de:6f:7e:c2:
c0:84:e9:0f:46:69:08:6b:38:b5:b8:50:4a:28:6d:
bb:37:c2:70:11:c7:8d:d2:08:a0:be:57:47:65:51:
23:11:7b:78:49:33:90:c0:4f:5b:fd:a9:92:f9:b6:
47:cf:e6:56:73:12:2f:d8:a7:ca:02:d1:b1:17:61:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B4:44:C9:C8:10:DA:FE:52:99:DA:74:4C:18:6E:3E:0F:7C:E3:73
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:e9:40:52:9f:4f:3e:bc:5d:61:a2:94:06:b5:fc:cc:b9:
e6:4d:a0:0d:59:1c:12:2a:5c:e4:27:57:0d:45:80:d6:27:63:
18:97:53:92:d4:5a:15:e2:7a:fe:27:06:83:54:c5:4e:84:ce:
3f:95:07:38:3f:d1:25:a3:f0:19:87:6f:62:77:e0:38:53:88:
72:8a:99:ab:a6:30:e2:f0:93:35:5b:f8:4e:fb:c7:7d:bc:14:
b7:ef:bf:71:5a:24:68:2c:f1:a9:d1:fa:f7:27:1b:96:1f:50:
f1:e5:4c:a3:ef:92:2d:b7:bb:60:6c:ae:51:57:ee:df:cd:2b:
7f:ae:55:20:29:18:69:e4:c9:9c:05:06:e6:9e:b1:a8:9e:ac:
9f:6b:75:4c:fc:7c:fb:61:d5:2b:88:ab:18:ba:e7:36:47:9f:
6d:16:99:3a:e3:43:ef:72:af:f8:7f:60:ba:d0:38:47:72:0f:
38:dd:8c:f5:27:85:b8:c7:f9:52:51:2a:07:ee:5f:c3:59:f0:
d8:48:96:af:db:93:0b:d6:0e:cd:90:7e:22:56:02:e5:e5:ea:
a4:21:54:7d:cf:52:cb:07:43:dd:46:94:aa:1d:32:b9:56:99:
d7:6e:46:34:d2:2d:56:a5:61:c7:b4:2f:f3:17:cf:70:6c:87:
86:36:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:50:40 2026 by rpki-client