Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: 7AmY2lSIva5Mutoh6ycu+jmpTWv1KLxEafHM8pd487A=
Subject key identifier: BC:90:F6:33:7B:3E:85:C5:0C:20:2B:BB:32:C1:B9:D2:22:17:51:71
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019FAA50641205CE13363B24429BBE301A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1686
Signing time: Tue 28 Jul 2026 20:00:22 +0000
Manifest this update: Tue 28 Jul 2026 20:00:22 +0000
Manifest next update: Wed 29 Jul 2026 20:00:22 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: IYW5PRUzofantJ25V0z4KqK7DRI96N8xKh6zPuuqmQQ=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:64:12:05:ce:13:36:3b:24:42:9b:be:30:1a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jul 28 20:00:22 2026 GMT
Not After : Jul 29 20:00:22 2026 GMT
Subject: CN=bc90f6337b3e85c50c202bbb32c1b9d222175171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:f7:e3:6d:32:59:4e:b2:b7:71:a7:69:7f:
ce:30:12:59:62:c0:e9:50:bd:cd:86:c4:e1:4f:bd:
a2:43:cf:8f:1f:8e:fc:0e:72:dc:38:22:0f:09:79:
9a:ca:dd:3b:88:12:28:72:89:ee:38:67:4c:be:f2:
9b:25:99:31:da:2f:c9:27:2f:9d:92:83:45:b0:d4:
10:3b:93:58:35:d7:7d:f6:b3:f2:8a:86:88:ee:a3:
2b:1b:79:6c:9c:c5:42:9a:d6:1e:21:04:09:09:84:
0f:81:39:2b:47:4a:4c:cc:9b:4e:d7:e3:c7:ec:30:
e6:c8:a9:e2:41:b8:ea:16:23:88:00:42:48:e2:48:
54:9b:8b:e8:c3:99:a7:36:78:75:d3:cb:fa:b1:e9:
5a:42:33:e6:b2:5b:e4:05:97:4d:8f:8f:56:2f:51:
05:e0:53:2e:8f:aa:ee:94:9f:42:13:2e:4b:c9:13:
3f:39:c1:85:d8:ed:70:02:c3:71:75:79:f6:46:78:
c2:ec:0d:9d:b2:75:81:12:e0:1e:c8:27:7d:d4:d3:
f3:68:12:56:f7:07:59:7f:de:a0:06:27:94:13:8d:
d3:29:40:70:15:fc:f0:83:a3:b1:a7:60:a1:bf:9a:
57:63:9a:77:39:2b:ea:e3:c3:3f:17:47:6b:49:e7:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:90:F6:33:7B:3E:85:C5:0C:20:2B:BB:32:C1:B9:D2:22:17:51:71
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:78:e5:f6:34:33:cf:20:ce:76:34:41:29:d1:27:71:f2:60:
7f:55:a4:35:f0:8f:c2:96:70:04:3e:e6:8c:19:61:15:d7:65:
be:aa:bd:5d:88:f5:91:2e:7b:a5:92:3b:31:da:ad:53:68:e0:
ca:76:bd:cc:77:fa:35:00:4e:6f:31:7c:e9:8c:f9:4e:96:b6:
91:5f:2c:87:82:9e:d7:d7:4c:47:b3:47:05:f0:1d:24:9f:95:
d3:f1:ed:05:86:52:4c:2f:6a:c4:6c:d2:73:84:55:7d:90:77:
b5:26:7e:e5:ef:4a:e7:52:d6:95:08:95:01:e0:ff:e5:2d:0b:
d2:c7:ad:2a:21:67:c1:a3:f2:10:6b:bc:1d:63:a4:43:e1:de:
74:bf:02:e2:e0:d4:e9:f1:e7:bb:ed:f4:da:16:93:e0:9e:1c:
d3:6a:ab:63:43:e1:2f:c0:92:50:6e:68:5e:df:a2:52:5f:6d:
28:44:f9:14:0d:16:82:2a:ad:00:16:50:0e:fd:a5:a8:bb:b7:
aa:3a:a1:08:20:18:dd:a6:c5:90:7f:22:9e:b8:3c:c9:85:e9:
1a:9d:0d:99:1f:d3:89:ed:85:f8:b3:74:13:9c:4f:eb:b0:40:
42:e3:33:c2:17:9b:25:6b:bb:c4:eb:5e:1f:5c:04:a0:41:7f:
23:1a:22:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUGQSBc4TNjskQpu+MBoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj
ZTA4MmIwHhcNMjYwNzI4MjAwMDIyWhcNMjYwNzI5MjAwMDIyWjAzMTEwLwYDVQQD
EyhiYzkwZjYzMzdiM2U4NWM1MGMyMDJiYmIzMmMxYjlkMjIyMTc1MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaP3420yWU6yt3GnaX/OMBJZYsDp
UL3NhsThT72iQ8+PH478DnLcOCIPCXmayt07iBIoconuOGdMvvKbJZkx2i/JJy+d
koNFsNQQO5NYNdd99rPyioaI7qMrG3lsnMVCmtYeIQQJCYQPgTkrR0pMzJtO1+PH
7DDmyKniQbjqFiOIAEJI4khUm4vow5mnNnh108v6selaQjPmslvkBZdNj49WL1EF
4FMuj6rulJ9CEy5LyRM/OcGF2O1wAsNxdXn2RnjC7A2dsnWBEuAeyCd91NPzaBJW
9wdZf96gBieUE43TKUBwFfzwg6Oxp2Chv5pXY5p3OSvq48M/F0drSedwfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyQ9jN7PoXFDCAruzLBudIiF1FxMB8GA1UdIwQY
MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt
MWQ3YjIyOWQ0ZTNiLzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi
LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnjl9jQz
zyDOdjRBKdEncfJgf1WkNfCPwpZwBD7mjBlhFddlvqq9XYj1kS57pZI7MdqtU2jg
yna9zHf6NQBObzF86Yz5Tpa2kV8sh4Ke19dMR7NHBfAdJJ+V0/HtBYZSTC9qxGzS
c4RVfZB3tSZ+5e9K51LWlQiVAeD/5S0L0setKiFnwaPyEGu8HWOkQ+HedL8C4uDU
6fHnu+302haT4J4c02qrY0PhL8CSUG5oXt+iUl9tKET5FA0WgiqtABZQDv2lqLu3
qjqhCCAY3abFkH8inrg8yYXpGp0NmR/Tie2F+LN0E5xP67BAQuMzwhebJWu7xOte
H1wEoEF/IxoiCQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:16 2026 by rpki-client