Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: v1YZxRZTrIBj5WaxHuzIB53fIrSI5TJqS6Rt4XLmdL4=
Subject key identifier: 80:8F:CB:E1:75:73:FB:04:A1:C3:06:FC:C3:5D:D0:4D:53:B9:B5:92
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019CAF7F05FA106A88A922B866B1629ECB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 14FB
Signing time: Mon 02 Mar 2026 17:01:03 +0000
Manifest this update: Mon 02 Mar 2026 17:01:03 +0000
Manifest next update: Tue 03 Mar 2026 17:01:03 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: LXly6P0IxpxTlAjAKAnkESP3PmTHT/3VveU0T6Qqd5g=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:05:fa:10:6a:88:a9:22:b8:66:b1:62:9e:cb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Mar 2 17:01:03 2026 GMT
Not After : Mar 3 17:01:03 2026 GMT
Subject: CN=808fcbe17573fb04a1c306fcc35dd04d53b9b592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:7d:96:db:3a:ce:f1:c1:6f:d6:65:73:9c:
8c:f4:1d:9d:a9:39:fe:52:b4:81:1e:12:7a:77:1e:
e0:63:d8:20:32:01:6f:26:fb:a1:e7:74:02:ee:88:
45:ae:00:60:b8:8a:de:1f:c8:24:bb:5b:5d:55:35:
36:7e:89:8a:bd:e0:0f:38:36:a0:48:4d:e5:f4:8f:
0d:47:a8:0b:c2:fd:da:5d:68:85:8e:1b:3e:81:b0:
4e:c7:fe:3a:f1:26:06:5a:fb:aa:53:18:9e:f0:b7:
4b:5c:24:53:cc:e4:a0:89:ef:26:d2:94:f8:c6:ca:
ec:5e:8e:a6:49:46:3e:20:f0:bc:6c:c2:93:e2:dc:
6c:20:89:bd:c9:30:07:17:7f:ea:9a:c2:f0:e3:e9:
0b:3d:cf:af:87:2d:88:5f:03:ab:e2:2f:fe:28:0c:
6a:2c:31:e4:32:d9:f1:dd:bd:98:f6:44:15:91:33:
a4:a0:87:28:e5:3d:65:38:ab:53:5f:68:d1:10:99:
42:4b:59:4d:b8:86:42:21:e5:f6:ae:ef:f2:1e:93:
e9:fc:ee:11:71:25:8f:ce:e1:01:c7:73:3d:8a:39:
b6:72:34:83:88:c8:68:52:9b:47:87:70:70:e0:59:
31:a7:ac:5f:b3:a3:c9:de:31:a3:93:09:a8:50:08:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:CB:E1:75:73:FB:04:A1:C3:06:FC:C3:5D:D0:4D:53:B9:B5:92
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:95:a0:05:45:9c:44:4e:cc:9f:e9:cc:ee:d0:5d:30:d5:89:
f2:c9:2a:85:eb:ca:76:98:45:96:81:ed:9d:57:16:18:0c:64:
1a:78:09:0f:22:3d:35:aa:44:a3:72:af:b4:86:60:f0:45:cd:
46:11:3e:aa:eb:64:bf:93:79:cd:9f:af:26:14:22:38:bc:f8:
00:7b:bb:33:32:aa:bb:7b:99:58:65:13:3d:7f:6c:76:eb:8a:
b3:d9:3f:ab:6a:49:46:a1:8f:bb:72:69:38:d4:bd:fa:9f:a4:
8e:7c:cb:a3:34:b1:86:3d:4f:d4:b7:9a:55:28:29:80:03:29:
b5:ea:ed:bb:81:fa:f0:c3:e6:53:7a:87:9b:19:2f:40:7c:d6:
dc:f3:42:c9:59:a4:ba:ba:bf:d4:c0:de:3a:f3:33:c0:cf:f7:
06:77:36:5f:b0:dd:4e:f3:66:ca:55:78:6c:7a:9a:9d:1b:69:
44:7b:b3:ba:c2:51:e4:04:00:40:c8:ad:0c:c7:1d:cd:f8:06:
d1:4c:91:0d:58:f8:8f:c5:45:c3:e2:92:23:28:a8:56:f3:f0:
d2:4d:b4:fb:70:aa:f2:a6:a1:4f:09:4f:99:c5:fa:ee:e3:2b:
28:c1:62:d3:74:0a:c1:89:30:a8:0d:cb:72:65:40:b0:f4:49:
e9:7c:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:07 2026 by rpki-client