Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: 9I8sGAqqZHrz1tvXefDvLK5AU5VPZh140cC+Ds85L3c=
Subject key identifier: 23:C0:E3:90:88:EE:98:56:35:16:55:1D:38:2C:06:78:77:E3:37:CF
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 01A0E9647BE82AE90E3B0CEFED3729B50AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 19:01:11 +0000
Manifest this update: Mon 28 Sep 2026 19:01:11 +0000
Manifest next update: Tue 29 Sep 2026 19:01:11 +0000
Files and hashes: 1: 1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa (hash: Xb0xuBfRe7FwO8H+eAMIQNLLlYRIEueyRhLbYCR1L9E=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: eWmGWUbVXVWA0aKG0xmjFii+fazbyN23itewwZxY6Ow=)
3: WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa (hash: W4V4VKeFsQZDXA2GLDkXPjJ+JE3asR1EB7QgnFmVGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:7b:e8:2a:e9:0e:3b:0c:ef:ed:37:29:b5:0a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Sep 28 19:01:11 2026 GMT
Not After : Sep 29 19:01:11 2026 GMT
Subject: CN=23c0e39088ee98563516551d382c067877e337cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:a3:58:08:80:d9:d2:ba:48:a7:90:f9:85:
41:6b:8f:53:19:9e:4a:96:be:2c:6f:c7:5d:22:72:
d1:2e:7a:a3:ea:3b:01:70:88:a3:f2:f3:c8:84:4d:
7f:7e:2b:df:be:c5:f2:77:96:14:fb:79:22:82:7c:
83:65:1c:35:65:3d:5f:26:d5:be:5a:71:fb:48:f6:
55:20:13:b4:60:08:49:e2:7e:ac:e4:d5:31:2d:a7:
6c:7b:b8:de:f2:a6:ce:5f:01:05:18:a2:f7:06:75:
e7:e6:72:a5:e1:f7:6b:69:27:22:75:df:ea:fa:76:
e2:df:a4:9e:ec:02:24:0e:49:a9:6e:46:b6:31:f2:
d8:90:7d:03:e2:31:b8:42:b2:51:54:f0:72:ac:aa:
52:56:26:73:5d:d2:d0:72:f1:70:ee:21:2b:77:99:
55:67:7d:63:9a:47:62:41:42:3b:e2:09:a2:4d:65:
9c:2b:62:d9:fb:f6:44:e7:a3:5e:8d:f2:c8:b0:a0:
74:d7:30:09:7e:83:ad:c5:0b:2f:26:1a:4c:07:30:
de:9a:c1:78:19:94:3c:96:45:6e:f4:0a:cd:85:88:
3a:79:9d:51:01:fe:03:0e:ec:2d:dd:1e:e0:c5:11:
a0:62:ed:65:76:e3:9c:e3:e4:2b:34:25:3a:b8:42:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C0:E3:90:88:EE:98:56:35:16:55:1D:38:2C:06:78:77:E3:37:CF
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4c:11:82:90:d5:98:79:4d:b7:56:9c:89:2e:52:53:a3:b0:
3b:32:a4:ec:97:be:5f:04:f1:4c:fd:2c:7f:a0:d7:1b:23:93:
93:11:1d:4f:4c:47:73:da:7a:c3:9c:94:1d:4c:4d:bd:1c:02:
cc:0c:ba:83:eb:6b:87:28:09:d7:0b:fd:ad:ee:ee:d0:e7:c7:
d0:38:27:31:19:f6:2e:23:e6:8e:02:40:82:c4:3c:80:7c:85:
86:9d:2f:83:19:a4:e1:24:51:9b:33:60:19:4f:99:d3:5a:0d:
e3:45:d7:7d:37:00:a9:1c:d8:a1:ab:ff:8a:c6:a8:fd:7c:30:
87:86:2e:a1:b5:a4:36:7f:11:88:b1:46:dc:f4:82:ee:6f:f1:
1b:87:53:7b:3a:94:5f:04:de:9b:fb:23:36:82:5f:8e:a5:32:
e7:18:04:67:da:fe:06:47:7d:2a:4b:1e:e4:d6:1a:66:d9:d5:
a8:24:e3:08:c1:54:0b:b6:e6:5e:d1:8a:c5:9a:72:64:db:d3:
8a:1a:1f:9e:c9:c4:ee:64:a4:d3:a3:8b:91:cf:d8:d4:7a:a2:
c0:6e:bf:f4:7e:b9:db:06:8a:43:8d:23:e3:de:73:71:df:03:
53:30:3a:63:37:2b:b4:68:24:6d:c2:f8:a7:cb:60:db:90:f1:
f4:23:55:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpZHvoKukOOwzv7TcptQqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx
NzRkMmQwHhcNMjYwOTI4MTkwMTExWhcNMjYwOTI5MTkwMTExWjAzMTEwLwYDVQQD
EygyM2MwZTM5MDg4ZWU5ODU2MzUxNjU1MWQzODJjMDY3ODc3ZTMzN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqSjWAiA2dK6SKeQ+YVBa49TGZ5K
lr4sb8ddInLRLnqj6jsBcIij8vPIhE1/fivfvsXyd5YU+3kignyDZRw1ZT1fJtW+
WnH7SPZVIBO0YAhJ4n6s5NUxLadse7je8qbOXwEFGKL3BnXn5nKl4fdraScidd/q
+nbi36Se7AIkDkmpbka2MfLYkH0D4jG4QrJRVPByrKpSViZzXdLQcvFw7iErd5lV
Z31jmkdiQUI74gmiTWWcK2LZ+/ZE56NejfLIsKB01zAJfoOtxQsvJhpMBzDemsF4
GZQ8lkVu9ArNhYg6eZ1RAf4DDuwt3R7gxRGgYu1lduOc4+QrNCU6uEKNJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPA45CI7phWNRZVHTgsBnh34zfPMB8GA1UdIwQY
MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt
ZWJkMzE0NTQyMmVhLzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh
LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUwRgpDV
mHlNt1aciS5SU6OwOzKk7Je+XwTxTP0sf6DXGyOTkxEdT0xHc9p6w5yUHUxNvRwC
zAy6g+trhygJ1wv9re7u0OfH0DgnMRn2LiPmjgJAgsQ8gHyFhp0vgxmk4SRRmzNg
GU+Z01oN40XXfTcAqRzYoav/isao/Xwwh4YuobWkNn8RiLFG3PSC7m/xG4dTezqU
XwTem/sjNoJfjqUy5xgEZ9r+Bkd9Kkse5NYaZtnVqCTjCMFUC7bmXtGKxZpyZNvT
ihofnsnE7mSk06OLkc/Y1HqiwG6/9H652waKQ40j495zcd8DUzA6YzcrtGgkbcL4
p8tg25Dx9CNVPQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 03:50:09 2026 by rpki-client