Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: Ms8/7UywytGlrdz88ssVFz4tfP2Mn5/sLJQbU8vmdD0=
Subject key identifier: C0:52:BD:ED:7B:91:E6:BE:B3:5B:D9:2D:7C:34:DB:4F:BB:60:43:49
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019D992BA7F768A02A5BD5A12196E08F405C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 147F
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: p0NB/FnFZJuzbw7AXkgEJUn7a/5qB/tyNv54Mm10PUY=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a7:f7:68:a0:2a:5b:d5:a1:21:96:e0:8f:40:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=c052bded7b91e6beb35bd92d7c34db4fbb604349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:56:25:8c:cd:50:08:2b:ee:58:57:21:4f:
51:df:0d:e3:1c:94:5c:d9:78:b3:f9:5e:f6:5e:18:
cb:62:ed:c1:ce:3f:16:67:f7:9f:e3:03:06:98:37:
d8:c1:11:87:af:71:9f:16:e5:5e:be:e8:f5:25:43:
33:54:84:b6:ae:50:a1:48:36:15:bf:64:ad:6d:c7:
50:6f:f5:fd:64:b7:06:ea:79:75:16:9c:a2:01:e3:
6e:e6:8d:01:ee:f8:f8:1f:c6:f0:dc:61:e9:2a:82:
4f:02:64:ec:ec:3a:db:88:54:cd:24:82:79:80:b4:
d1:df:6f:d8:84:a2:15:0c:e7:b0:be:ec:3c:31:e6:
25:ba:c6:bb:e3:b6:04:ac:78:f7:e6:c4:ad:aa:9a:
e4:f5:da:c9:75:39:0e:09:7a:c4:5d:2d:6f:39:5e:
66:3e:58:80:aa:e9:a6:74:c1:7c:0d:2c:ea:46:da:
72:a9:09:8a:61:f9:8d:b4:c5:c5:30:8a:03:d7:1d:
4a:11:ef:45:bd:3b:95:b9:1a:7a:e2:5d:10:46:43:
43:71:39:b4:a4:3c:5d:e1:2f:e9:f5:89:52:eb:b9:
60:10:ba:69:3d:2d:84:0a:44:21:e7:6d:d6:31:d0:
5c:65:16:6f:20:67:e7:47:c9:8f:94:85:fa:6a:55:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:BD:ED:7B:91:E6:BE:B3:5B:D9:2D:7C:34:DB:4F:BB:60:43:49
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:46:2f:d2:08:72:72:29:82:d2:a1:fc:fc:61:fc:b8:69:72:
7f:8e:84:26:72:8e:32:ae:f3:96:d0:f3:4e:3e:f6:53:df:9a:
f0:f6:dc:32:8f:f0:89:59:7b:d1:74:36:21:64:f1:d4:f6:fd:
76:57:d4:5a:62:db:06:1b:56:58:d4:b3:77:8a:50:09:9e:6e:
74:2c:29:1f:03:9a:09:14:40:e8:e2:2a:65:06:b1:39:a1:25:
c9:33:bf:be:20:af:6e:3e:b1:9a:50:98:a1:25:cc:f5:cc:38:
ef:4a:6c:88:f3:e7:88:fe:78:b7:1d:4f:42:f4:d5:59:6a:58:
37:3b:d0:dc:ac:b5:15:d4:2c:88:2e:ae:3a:53:84:95:7e:0e:
c2:6b:44:88:a2:2f:2c:f3:ec:0f:30:8c:ad:7a:13:fd:a9:42:
db:7f:f8:49:89:89:2c:7e:75:3d:93:e4:6f:01:63:e9:f4:92:
85:c5:6d:30:b3:0a:6f:2a:a5:56:e5:07:a0:6a:75:13:7a:16:
e3:18:f9:4d:9a:7f:13:41:eb:4c:c9:39:7e:3d:38:75:b0:4b:
fe:27:09:80:80:43:f6:dd:56:b7:27:82:af:73:b4:2c:2a:5c:
32:4e:57:d5:c7:bf:f4:50:b4:91:cc:6d:9b:74:a6:06:67:1c:
58:8f:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:34 2026 by rpki-client