Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: OieeknHxcsE1tktgIRrLPvT2rabBy+SEgNiUS+0drxI=
Subject key identifier: 23:AA:E5:43:81:F0:FE:89:B6:FE:CD:F1:F0:95:8F:33:F8:4A:6B:1E
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 01A0DB721EC7B96115B5E1995B309D6FE863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 162F
Signing time: Sat 26 Sep 2026 02:01:24 +0000
Manifest this update: Sat 26 Sep 2026 02:01:24 +0000
Manifest next update: Sun 27 Sep 2026 02:01:24 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: Oy/d8AGmoROH3zuHaCTVu4kEybD7aUFGg3Ddb01jPuc=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:1e:c7:b9:61:15:b5:e1:99:5b:30:9d:6f:e8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Sep 26 02:01:24 2026 GMT
Not After : Sep 27 02:01:24 2026 GMT
Subject: CN=23aae54381f0fe89b6fecdf1f0958f33f84a6b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:be:be:86:02:94:e6:90:c2:d5:43:34:a8:
15:e9:af:13:53:77:dc:15:14:61:31:e8:c8:d3:3d:
3c:00:02:31:a4:cf:63:57:54:71:97:68:60:23:3d:
07:51:5c:6b:e3:0f:fe:a7:13:a5:ae:30:64:19:aa:
d3:fe:8c:92:82:42:21:23:31:90:f5:c2:37:43:6a:
1c:53:21:33:ab:d7:e1:ce:94:8f:bd:1f:17:b7:9a:
f0:ce:25:46:6a:41:9b:f0:48:bd:2d:a5:fd:02:27:
2c:c7:f1:20:ca:9f:fb:38:50:07:e3:a8:b5:9b:1c:
aa:7e:b1:cd:15:4e:3b:ea:57:e3:b9:e0:df:a7:59:
cd:f8:9e:03:73:32:ca:6c:09:11:3e:c7:33:09:52:
18:fc:9a:fd:a4:1d:b1:ed:a2:e3:36:86:58:2b:94:
74:4d:d0:ac:81:fe:8a:30:8d:3d:4a:0d:21:26:66:
47:fc:75:50:c2:14:ac:f5:0d:1d:d4:02:c6:33:04:
0f:f4:7d:e9:00:e4:f0:59:fb:d4:e9:48:77:6e:9a:
95:b6:d1:d2:77:3a:c6:e0:57:79:fb:69:f4:09:d7:
5c:81:96:59:5f:4e:65:f4:60:a2:da:a9:49:ab:4d:
72:82:c3:ff:c0:57:26:d1:95:bf:1f:09:eb:ef:08:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:E5:43:81:F0:FE:89:B6:FE:CD:F1:F0:95:8F:33:F8:4A:6B:1E
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:4c:de:2d:bc:a7:a7:99:df:b2:f1:6c:93:f5:13:5b:8d:
da:9b:52:6d:11:68:a1:43:da:b5:0e:bc:07:25:23:ed:6e:7c:
2a:6c:57:9a:32:de:e0:ac:0b:7d:aa:60:50:f1:ec:da:ab:56:
a9:dd:10:44:1e:d7:7b:75:d1:d2:8a:ed:94:3d:fb:f5:32:cd:
0c:91:70:4c:8f:a0:87:dc:0d:1f:90:5c:b5:d9:f2:f5:3a:77:
09:25:3c:0b:c2:56:29:16:83:7b:20:fc:2e:a3:ed:b0:4d:32:
18:e1:3d:1b:1d:ad:e8:b6:55:2f:85:43:8e:7c:12:ee:5f:93:
7d:bc:8e:54:13:7e:66:89:54:08:91:8d:13:14:59:00:0e:05:
83:65:07:88:99:d3:17:f8:06:98:28:d6:81:b6:cd:c7:45:33:
99:00:b9:3e:f3:25:82:7d:7d:63:c0:d8:68:06:c5:ca:a2:10:
80:d4:3e:4a:e5:2b:65:fc:c6:36:e9:4f:6d:29:6d:fe:07:96:
35:1f:81:30:0b:81:34:33:cc:19:e0:34:13:b5:59:ac:da:c8:
9f:d9:16:a3:33:fd:24:66:26:40:36:a7:ab:0e:72:78:71:00:
2a:54:e9:df:bf:10:21:21:20:70:67:af:61:39:7a:7c:94:9b:
07:19:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:27:24 2026 by rpki-client