Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: jozyuFkhjZKtbxEt6IyVoeEZmEpzhLRpa7o6dmDyK54=
Subject key identifier: F1:7F:AD:93:C0:D3:77:F7:F2:DE:96:CE:04:6B:30:7D:46:8A:C1:FD
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 01A0C6335E3B782631E72472CCDB88C358B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1719
Signing time: Mon 21 Sep 2026 23:00:50 +0000
Manifest this update: Mon 21 Sep 2026 23:00:50 +0000
Manifest next update: Tue 22 Sep 2026 23:00:50 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 4g0mz4oef7dr4qnbgp84iJ8zDPVSeasqZPBw6iR0DCs=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:5e:3b:78:26:31:e7:24:72:cc:db:88:c3:58:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Sep 21 23:00:50 2026 GMT
Not After : Sep 22 23:00:50 2026 GMT
Subject: CN=f17fad93c0d377f7f2de96ce046b307d468ac1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:ed:cc:86:da:35:04:c2:2e:5a:c6:80:5f:
ec:95:72:2a:96:49:4c:5a:62:06:5d:5a:3a:61:41:
4a:16:de:b4:3f:a0:64:cf:dc:8b:a0:50:b8:8e:48:
e9:43:dd:23:07:17:cc:0b:7e:f2:3c:16:14:c0:0f:
3c:ff:d4:c0:50:9e:4f:54:c7:b8:11:e1:88:cd:36:
cf:15:55:23:52:8b:8b:11:ca:2a:e4:24:b6:62:fb:
3b:54:29:c8:ad:b4:2c:0a:b1:da:cd:44:15:23:70:
84:1d:bb:b4:94:74:0e:1a:66:32:5a:69:1a:25:1c:
be:f1:1d:dc:6e:11:48:3f:ea:d2:f0:00:1b:9e:e3:
3c:d4:67:b8:f7:de:a5:16:b9:1e:71:ab:38:4d:e5:
5c:d4:02:81:c0:c5:46:fd:ef:4b:ba:e7:f6:d8:ae:
8a:76:b2:ab:8c:c9:0f:d0:2b:9b:94:cb:b1:51:16:
2d:60:f6:c5:a6:e0:d0:ef:1e:f0:30:70:2e:a3:36:
68:73:40:b1:44:7d:4c:ca:c1:35:34:8c:bf:6e:93:
7c:a8:86:8e:b0:d2:e8:62:41:22:11:92:41:d3:6e:
c6:69:eb:9c:15:0d:f9:09:4a:4d:a1:a0:37:35:55:
24:7b:6b:e1:5c:1d:6f:19:13:d2:b7:8b:39:17:24:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:AD:93:C0:D3:77:F7:F2:DE:96:CE:04:6B:30:7D:46:8A:C1:FD
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f9:ca:1d:a5:d0:41:33:e5:aa:7e:f4:f4:56:3a:72:e6:0a:
7f:79:58:bd:69:ca:ad:92:ed:7e:43:3c:ea:21:60:f8:3f:49:
ed:eb:44:5b:46:83:a7:83:a7:44:28:6d:d2:fb:c7:61:f0:00:
01:6f:ed:cf:55:e1:41:8e:f5:a6:50:a1:a5:c4:50:27:eb:49:
13:5f:45:53:85:a6:98:46:ea:e6:3a:57:23:a4:62:23:45:7b:
27:9a:6e:46:9c:fd:8b:8a:9d:34:17:06:9d:ca:f3:7a:bd:32:
94:5d:21:65:24:df:71:db:85:2a:54:59:a5:7b:94:51:b6:59:
80:c9:53:1a:ef:97:c2:ff:c0:e0:5a:55:13:b4:47:d4:06:2e:
3e:3c:8b:d2:e8:ab:10:51:c4:e9:7d:ae:78:b2:cc:f5:d8:a0:
61:fc:b0:f9:90:92:d0:29:d6:dd:d4:b6:9f:b6:8e:3a:c0:c2:
60:e4:8f:9e:c3:96:af:cf:3b:64:2e:e1:f0:12:8f:7f:23:e3:
fb:3c:c2:2a:34:d4:43:eb:7c:b3:e6:5d:7f:1d:3b:09:d6:9f:
8c:24:a6:86:bf:ce:1e:ad:a1:df:70:68:db:c8:eb:0f:12:14:
14:36:91:d4:e8:9c:95:fc:46:da:f5:ec:ff:21:25:70:07:1b:
7e:0c:44:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGM147eCYx5yRyzNuIw1i3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj
ZTA4MmIwHhcNMjYwOTIxMjMwMDUwWhcNMjYwOTIyMjMwMDUwWjAzMTEwLwYDVQQD
EyhmMTdmYWQ5M2MwZDM3N2Y3ZjJkZTk2Y2UwNDZiMzA3ZDQ2OGFjMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11DtzIbaNQTCLlrGgF/slXIqlklM
WmIGXVo6YUFKFt60P6Bkz9yLoFC4jkjpQ90jBxfMC37yPBYUwA88/9TAUJ5PVMe4
EeGIzTbPFVUjUouLEcoq5CS2Yvs7VCnIrbQsCrHazUQVI3CEHbu0lHQOGmYyWmka
JRy+8R3cbhFIP+rS8AAbnuM81Ge4996lFrkecas4TeVc1AKBwMVG/e9Luuf22K6K
drKrjMkP0CublMuxURYtYPbFpuDQ7x7wMHAuozZoc0CxRH1MysE1NIy/bpN8qIaO
sNLoYkEiEZJB027GaeucFQ35CUpNoaA3NVUke2vhXB1vGRPSt4s5FyS7+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF/rZPA03f38t6WzgRrMH1GisH9MB8GA1UdIwQY
MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt
MWQ3YjIyOWQ0ZTNiLzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi
LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPnKHaXQ
QTPlqn709FY6cuYKf3lYvWnKrZLtfkM86iFg+D9J7etEW0aDp4OnRCht0vvHYfAA
AW/tz1XhQY71plChpcRQJ+tJE19FU4WmmEbq5jpXI6RiI0V7J5puRpz9i4qdNBcG
ncrzer0ylF0hZSTfcduFKlRZpXuUUbZZgMlTGu+Xwv/A4FpVE7RH1AYuPjyL0uir
EFHE6X2ueLLM9digYfyw+ZCS0CnW3dS2n7aOOsDCYOSPnsOWr887ZC7h8BKPfyPj
+zzCKjTUQ+t8s+Zdfx07CdafjCSmhr/OHq2h33Bo28jrDxIUFDaR1OiclfxG2vXs
/yElcAcbfgxEaQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:56:21 2026 by rpki-client