Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: +KrgwvrCjzyl0UkJcHH3/2DzAowA6ubDvHQ6MmbfFAI=
Subject key identifier: E8:42:78:58:68:17:2A:0F:14:62:20:0C:CF:91:7D:BA:D1:45:3F:2E
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019D9A075EAFED50E98CF2D51E911964E612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0B63
Signing time: Fri 17 Apr 2026 06:01:07 +0000
Manifest this update: Fri 17 Apr 2026 06:01:07 +0000
Manifest next update: Sat 18 Apr 2026 06:01:07 +0000
Files and hashes: 1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: nNaYhyTlfIzPwg96yXxQ8VQrb25Sr2Qfqnm4FDbFnjI=)
3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5e:af:ed:50:e9:8c:f2:d5:1e:91:19:64:e6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Apr 17 06:01:07 2026 GMT
Not After : Apr 18 06:01:07 2026 GMT
Subject: CN=e842785868172a0f1462200ccf917dbad1453f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:04:92:cc:5b:36:fd:83:ad:12:60:d7:a7:
aa:e0:f2:f8:ad:79:58:22:5d:92:14:a6:2a:04:f6:
10:a8:07:72:59:b4:3c:75:7f:89:ac:d1:1d:fd:44:
5f:80:76:96:da:97:91:3e:ff:72:0f:c6:a3:5f:98:
c3:64:eb:56:fa:2c:80:af:29:fc:5d:49:c3:08:57:
6c:05:42:b4:ed:85:73:a9:d1:a1:cc:9c:d7:ac:d6:
16:f6:fa:56:bd:b5:76:82:67:4f:a2:9c:48:05:cf:
77:2f:fa:c4:f5:b8:1f:33:60:16:9a:b8:f0:1a:50:
28:d3:d4:df:95:a7:24:fe:c5:78:52:c1:96:1f:0b:
f3:1e:12:54:aa:d6:5e:22:80:5b:bf:1f:f1:57:8f:
d0:05:4b:6a:26:1c:9c:2a:4d:69:bb:bc:21:66:12:
81:bb:76:29:2c:0a:32:9d:36:8f:24:94:6e:fe:7a:
8c:08:ff:42:e0:de:8f:e0:d1:05:45:0b:c6:79:70:
14:52:f0:c2:de:e0:de:fb:8d:68:bc:f5:ea:a6:98:
45:9a:55:21:3e:80:d3:69:e9:2e:8c:22:0a:74:00:
5c:a2:31:2f:ba:f1:ac:20:11:d9:d8:db:f7:6a:70:
a7:0c:68:1f:b4:aa:78:fb:58:07:d6:a3:21:15:d4:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:78:58:68:17:2A:0F:14:62:20:0C:CF:91:7D:BA:D1:45:3F:2E
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fe:b7:67:f0:4e:87:fe:22:51:cb:ca:aa:b0:30:66:63:09:
2f:df:d1:33:7c:35:40:f4:78:85:92:15:a0:44:f0:58:25:c4:
4c:c6:09:5f:e7:7b:b2:1a:20:75:f6:7f:19:d8:79:01:62:df:
a0:a1:73:48:ea:45:87:c8:f0:6e:ce:4c:a2:c3:69:5c:a4:6b:
eb:85:6e:6a:6a:c0:c7:e0:66:6c:57:e6:53:3a:54:bf:bf:f4:
67:c8:84:bf:78:0f:31:f3:fc:9d:e1:48:db:76:34:da:67:99:
d5:85:fd:98:dd:53:65:65:78:54:67:7f:29:ea:ac:fa:05:95:
3b:d2:e3:b8:c6:92:c1:26:1e:8d:0f:82:fe:8f:1c:0c:6f:37:
3b:e1:db:7b:29:ad:23:f0:d5:7e:ab:5a:33:2f:5f:6c:17:78:
4c:9a:2a:59:33:0e:b6:3c:dc:72:c0:7f:0f:64:38:e6:90:c6:
f8:92:9a:a3:9a:1c:14:37:77:04:8e:e6:aa:6b:b9:32:69:9e:
da:18:6c:2a:56:37:de:4b:e7:f8:04:5b:2b:c4:43:b2:12:f6:
03:a2:ed:e5:94:5b:c2:cd:9a:54:d5:9c:33:bc:e5:de:97:69:
ce:3b:25:65:20:3c:2a:f4:5c:d0:a0:7e:6b:91:da:d7:a0:a9:
a2:a1:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:32 2026 by rpki-client