Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: sNo2gHK7njLcgmU2qX0qZhEBBt3sE0+6YtQxK1Wv/8U=
Subject key identifier: 51:28:AB:B4:F7:08:56:A5:91:84:59:32:D7:ED:4F:C9:CE:56:64:C6
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019FAC3EC94B65EF4ABF893F46E3ACF8A3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1592
Signing time: Wed 29 Jul 2026 05:00:23 +0000
Manifest this update: Wed 29 Jul 2026 05:00:23 +0000
Manifest next update: Thu 30 Jul 2026 05:00:23 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: 0U8ADjJ+QbZX50lTLjxXaeJ66vF7ZlH74G+SSoufpNk=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:c9:4b:65:ef:4a:bf:89:3f:46:e3:ac:f8:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jul 29 05:00:23 2026 GMT
Not After : Jul 30 05:00:23 2026 GMT
Subject: CN=5128abb4f70856a591845932d7ed4fc9ce5664c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:de:19:05:f4:0a:76:77:85:bb:64:05:ca:
cc:44:d5:e1:28:e4:79:d2:55:ef:ad:a2:5c:cf:ec:
82:5e:0d:7c:1d:b8:0d:c0:39:ea:24:57:d1:32:46:
5c:a7:d8:47:82:90:2f:29:45:f7:e5:6e:87:b0:8d:
a7:71:e0:6d:14:33:da:26:85:1b:d3:c6:f4:83:e6:
75:d7:56:88:b6:69:9f:97:1f:0b:37:f2:75:ac:71:
aa:52:b0:28:30:56:a5:8b:79:d8:99:5d:34:73:9c:
92:81:9b:23:de:e8:79:0d:93:be:9d:73:85:cc:f6:
b2:6a:3d:a2:29:73:0d:63:a5:e9:45:d6:a1:6a:f4:
d2:c3:71:ba:e7:53:91:78:9e:c2:82:f2:f7:a8:f6:
53:f9:79:f3:ae:3d:18:17:eb:bb:60:23:1e:74:81:
4e:4b:ae:66:99:28:b1:6b:01:fb:e1:cc:be:5b:70:
9f:c5:31:4b:8c:09:52:0e:49:65:65:26:33:36:ea:
9f:02:1c:95:ec:8f:76:87:13:e7:80:19:3b:96:cf:
f3:d2:63:60:2d:06:c3:8c:a8:d2:82:e0:55:28:9f:
10:87:52:89:bd:3c:7c:fc:6a:09:dc:44:27:8d:ea:
6c:29:1d:63:fd:25:54:dd:dc:28:e1:43:23:83:03:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:AB:B4:F7:08:56:A5:91:84:59:32:D7:ED:4F:C9:CE:56:64:C6
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:84:17:45:ef:0c:b6:26:77:a3:f6:ba:75:c7:45:df:9d:
5f:9f:3d:64:c4:2f:b6:88:b4:5d:72:26:e3:16:53:54:44:79:
c7:d6:fc:a8:3a:fb:1b:b8:79:7f:f7:d2:65:0f:b1:3e:4d:b5:
0e:28:55:77:d3:ed:b4:02:9c:66:40:81:7d:dc:32:0d:c1:ef:
65:0b:b0:78:80:bd:72:bb:82:da:4f:02:cc:e4:45:ad:c8:1a:
7a:b2:4e:fa:8b:0b:83:e3:70:34:c4:6f:8e:07:84:6d:b3:1a:
cf:04:b3:8a:e8:a6:65:a1:9e:ed:3d:6c:ef:71:c5:53:b6:03:
a8:ff:d2:90:8e:71:04:36:ea:17:a7:b3:7d:f5:d2:50:e8:e0:
23:43:f9:bd:4e:e3:6b:ec:0c:46:82:ad:4b:a0:71:8f:e0:3b:
ae:10:45:c0:84:2a:d1:43:ce:99:e3:d3:70:85:5b:44:b4:65:
47:8f:e2:3f:c6:67:af:04:a3:53:09:e5:68:41:09:56:ea:63:
ea:8c:97:7b:db:d9:68:30:20:b4:0c:0e:81:cd:e9:11:52:77:
38:8b:61:6d:5b:4c:06:27:e4:db:27:16:af:42:00:fd:13:ec:
20:64:58:ce:da:53:e5:a0:41:56:cf:ae:4e:d9:2f:87:c0:3a:
70:2f:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:17 2026 by rpki-client