Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: E8n15Y1trcykD6lTQiCe+G9OiNweUGsThAqfhryav+8=
Subject key identifier: AB:51:BA:41:7A:DE:AD:99:B0:5E:6C:A0:26:3A:DC:DF:18:01:AE:9D
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 01A1133C68DC9BB057204C36E194C1715F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 1AD1
Signing time: Tue 06 Oct 2026 22:01:28 +0000
Manifest this update: Tue 06 Oct 2026 22:01:28 +0000
Manifest next update: Wed 07 Oct 2026 22:01:28 +0000
Files and hashes: 1: Br8jDqLYrkaBjiJL6wr8w6b0avs.roa (hash: W7Sv+CJ6euSWOJRS/NssioWUOsmXYLBpEHMl3h7F400=)
2: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (hash: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=)
3: hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa (hash: QzJoFvzXpwwE2bEYMhJWP3eLZe6Rf1UyZdose9+ReX4=)
4: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (hash: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=)
5: mzjq_E9j-9cKk2TKoQGkLBC5u4Q.roa (hash: 2CE2j2LCoSSQcA7NTRzO1EXIEEufcX6KVxq3KWqXbTI=)
6: qoAheOHH9UlqCoE7XA-QfCZLxZw.roa (hash: VVjSLN2hXu/mswe8VPF+IlHQVMhQLF+wIH35GZEPXZ0=)
7: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: zLWoqn62T6A+4RisLrO0ZUEuuVzF1Rj1gQ2PTuNYs0E=)
8: xJ55egTi-SOwIls63DtlY0C_yhc.roa (hash: kC3zkfZ5rMjuoKk4EnSBPzpT5cCfNNDGdDzD8ejaa+g=)
9: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (hash: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:68:dc:9b:b0:57:20:4c:36:e1:94:c1:71:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Oct 6 22:01:28 2026 GMT
Not After : Oct 7 22:01:28 2026 GMT
Subject: CN=ab51ba417adead99b05e6ca0263adcdf1801ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:bf:8f:83:c9:ba:a0:86:3c:0f:d4:87:2d:
47:e2:2e:ba:ef:c0:9f:3b:1f:7c:fb:18:39:bc:05:
c6:93:95:c8:35:d6:51:4a:b2:14:37:38:35:8b:94:
0b:fc:aa:72:83:f4:1a:78:7c:6e:3f:4f:ec:9b:94:
37:55:6b:0f:5e:2a:55:af:38:b8:4e:1a:e7:ce:ff:
30:82:9c:ac:d1:98:9e:0a:a9:0e:6c:f5:c1:d7:67:
14:cc:b1:9f:cd:3f:e7:e1:71:7a:51:62:d9:df:d9:
b1:20:c3:09:0f:f1:a5:40:c3:74:2a:5c:f7:38:81:
43:66:6e:7c:62:08:61:8b:14:2f:ec:db:e3:d9:8a:
7c:e9:05:a6:50:92:92:ee:bd:c7:36:32:c6:34:6d:
ce:eb:fe:1d:92:90:82:a8:36:e9:52:90:7c:9d:30:
22:d6:b6:66:e6:d5:a5:f8:25:1e:2c:74:1a:b7:a9:
e1:2d:8e:5e:64:1f:06:e9:02:a1:9b:e3:43:83:c7:
4f:a7:7c:7d:9d:98:36:2b:47:13:a0:e4:d6:8e:76:
d8:0e:1f:23:55:2f:22:1c:b5:7c:30:7a:85:d3:95:
62:af:51:8e:5e:c7:8f:03:50:4f:6a:66:03:5f:15:
7a:9b:30:a3:60:d8:78:ba:29:70:8e:dd:35:c4:95:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:BA:41:7A:DE:AD:99:B0:5E:6C:A0:26:3A:DC:DF:18:01:AE:9D
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:99:0f:18:c4:b9:a7:07:9b:87:d5:a6:1d:ac:67:60:5e:
e1:f5:c1:95:47:13:8b:c7:eb:c8:63:a1:3c:73:72:63:7d:0c:
b6:d6:71:7f:49:8d:a6:a9:d8:44:05:ca:85:ae:96:16:62:e4:
90:ef:d9:9d:61:12:af:63:f5:ad:14:8c:97:da:e9:c9:50:16:
86:b2:11:79:ea:d1:e8:c6:a6:a9:19:72:67:90:20:75:f1:66:
09:de:e1:9d:e5:24:3e:88:e7:18:b1:6d:54:ba:de:c8:c4:8b:
26:ad:7e:a2:8a:15:94:ba:3f:62:fb:c7:50:02:90:c7:f6:a7:
96:d3:8d:6b:31:f0:89:bb:a9:6e:3d:e7:f9:13:e1:69:54:f5:
ba:20:15:0f:a2:06:70:00:b4:3a:b4:a3:ef:64:76:c8:fe:d3:
8f:30:bb:33:ed:22:bc:e8:e9:3e:17:77:81:59:c1:5e:7b:03:
53:db:a2:dd:86:57:22:87:e3:b9:e6:fb:02:51:9c:f3:14:2e:
aa:2b:25:3e:45:04:4b:67:b1:5b:c7:f6:6b:e1:f4:b0:45:9d:
00:69:9c:c9:ea:b3:23:24:cb:61:ff:40:47:4b:3d:13:55:73:
20:6c:e7:5c:33:28:21:39:2e:1d:d9:d6:d6:e8:d7:44:f0:4b:
98:5c:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:03 2026 by rpki-client