Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: vKgJn1sRZnAnHMn5GFeq95m8A+P41ExXJZ14BEnezdw=
Subject key identifier: A5:99:B5:FF:2E:02:63:65:CB:A4:3E:66:6A:05:7B:27:E9:20:89:77
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019CAD9092A3A2890313159BD2D87C57DE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 14FA
Signing time: Mon 02 Mar 2026 08:00:58 +0000
Manifest this update: Mon 02 Mar 2026 08:00:58 +0000
Manifest next update: Tue 03 Mar 2026 08:00:58 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: D32NE11c57cjOa9KgHGmhMzsULmgEpTBtE6kY08+YVI=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:92:a3:a2:89:03:13:15:9b:d2:d8:7c:57:de:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Mar 2 08:00:58 2026 GMT
Not After : Mar 3 08:00:58 2026 GMT
Subject: CN=a599b5ff2e026365cba43e666a057b27e9208977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:a4:f8:b6:3a:94:d2:32:a7:eb:d9:70:a4:
37:69:c2:2d:b8:4c:ba:65:8d:b4:54:9b:82:f2:c2:
a9:b2:8c:85:7e:92:1d:d2:41:d1:0a:37:8e:b2:54:
0d:2c:5a:2c:d1:ac:53:4c:ab:16:b3:66:3c:90:21:
0e:75:58:92:c2:22:f5:f2:c7:61:83:dd:2d:a0:ec:
9a:af:7b:7b:47:ad:b8:28:52:2f:5e:8b:a6:0b:4f:
8e:0b:52:1b:d6:da:15:69:f0:d0:00:f2:10:ee:cc:
33:f5:ff:d9:05:cc:31:2d:a1:40:dd:59:a3:d0:b7:
d8:9a:8e:19:5e:53:70:a5:74:e7:6e:2a:84:f7:47:
eb:01:d3:a4:8b:3b:1d:a5:a5:af:8b:c6:5d:c4:ff:
b0:81:47:c0:39:3b:8c:fe:68:ec:02:10:88:b3:07:
dc:d8:d5:9a:3d:e1:38:01:a0:dd:70:03:fc:a5:3c:
02:eb:e5:f7:b3:08:fb:15:7f:65:84:d0:95:01:6f:
db:95:00:11:f8:64:f5:cf:44:e3:0f:45:c2:f0:e2:
3f:52:c6:78:21:57:71:0a:55:c4:3b:b1:d0:69:f4:
07:d3:ee:04:21:d8:5a:d1:ee:1d:47:29:7c:57:7f:
eb:86:f7:3d:66:e6:ea:0c:df:b8:32:b0:e1:9f:dc:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:B5:FF:2E:02:63:65:CB:A4:3E:66:6A:05:7B:27:E9:20:89:77
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f2:87:c1:23:8e:ba:af:38:a3:b1:53:8b:43:a7:29:04:65:
6e:f3:58:ee:8c:86:f0:9c:e0:29:15:40:9e:ec:e5:85:c1:23:
7e:31:a8:68:5d:26:e0:b2:10:b9:94:ec:56:d4:42:63:c5:19:
7b:8a:bc:e6:75:96:6a:da:09:cd:fa:7c:06:2d:06:05:57:a5:
5d:fc:de:f1:d6:cd:37:57:e3:08:ff:4a:b6:82:54:2a:f4:fc:
30:e6:f9:2f:6c:86:a1:e1:7f:53:31:2f:a2:34:b7:26:5c:65:
19:74:38:e6:3f:58:99:48:8b:32:69:99:fd:00:21:28:50:18:
c6:36:0f:e2:b2:2a:13:13:da:57:b6:0b:f7:f8:19:9f:54:f8:
2a:dc:51:fa:fd:04:24:4f:4f:e5:24:38:90:db:d6:35:9c:e3:
be:50:47:53:77:ea:d6:4a:2f:2f:a5:5a:26:01:3d:0d:61:b5:
e3:4f:27:4c:2c:ec:a9:49:e1:55:5a:6d:67:b3:5b:d3:bb:4b:
9a:62:fa:d4:14:51:cc:6b:9a:06:bc:63:24:44:8c:f8:b1:80:
9b:89:93:b4:09:0f:e8:31:c6:44:ba:88:34:07:31:07:1e:1a:
78:6e:26:9b:5a:2f:c9:bf:20:ea:d6:0f:63:c2:0b:26:a7:9a:
af:8f:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:42 2026 by rpki-client