Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: nCwXtKug851AUCwa9u5geg62ovVlrQzWZKvuN12WZ7E=
Subject key identifier: F8:FF:80:D1:BB:FD:27:19:88:DC:A4:B9:1F:B7:D9:AC:09:5A:37:3D
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019CABA2064FDD575FC3FEFBBEA97BBAADDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1404
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: JzqsdkAsmJq8YXxnTLgT82GocMsvLVLKUYUSL8qEE8Q=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:06:4f:dd:57:5f:c3:fe:fb:be:a9:7b:ba:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=f8ff80d1bbfd271988dca4b91fb7d9ac095a373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:56:62:72:12:c0:7a:c3:ed:f2:4a:24:3d:31:
0e:71:94:5b:23:23:8b:44:f1:d9:f2:27:d3:fa:85:
fb:c7:c4:29:4e:b6:8e:32:6d:42:1b:9d:3d:c4:af:
3c:eb:b4:a4:c3:6e:f8:69:87:f9:e3:61:03:18:20:
5b:5a:9c:23:89:9d:44:a5:c3:ad:47:69:28:2e:52:
82:f9:c2:9e:43:c1:64:f0:88:29:d6:4d:57:64:6d:
da:b7:4e:8f:e1:f4:b2:11:18:06:8c:4f:6d:76:89:
d0:ed:fc:de:3c:55:c3:e1:b8:a5:72:b6:aa:e3:cc:
13:d3:78:94:1e:5d:f0:69:de:eb:a8:72:54:12:bf:
a8:2e:b9:d1:5b:9c:8a:58:c1:41:39:39:57:eb:e9:
f7:5f:b7:3f:3d:36:86:cd:0d:a3:8c:e6:e9:7e:4d:
43:5b:5d:3a:ab:92:30:66:4e:fa:f8:d3:78:87:e5:
b8:a2:7e:96:d3:ad:9a:45:a8:3b:ee:28:d4:45:f0:
39:90:76:7e:85:03:05:31:08:f3:0e:22:66:22:2b:
94:d1:02:dc:be:fb:ef:71:7e:ee:88:0f:cb:10:ca:
d5:74:7a:95:df:8d:66:cb:4e:a2:ac:67:9e:bf:79:
e3:60:d9:15:d6:34:85:4a:8c:d6:05:14:77:fb:70:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:80:D1:BB:FD:27:19:88:DC:A4:B9:1F:B7:D9:AC:09:5A:37:3D
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a8:56:66:bf:9a:f6:1f:c0:37:7e:14:8b:e4:be:03:ec:8b:
bf:1e:13:ae:4e:a7:89:2f:b0:6a:76:cc:c2:c3:bf:2d:3b:61:
f9:49:cd:60:dc:a3:e4:b4:64:44:d6:2d:7e:7e:ca:ea:54:bb:
87:24:0f:c7:b4:19:c3:fa:1a:26:72:99:17:0d:63:8c:a4:66:
e1:9c:0e:fd:a8:01:99:54:d1:13:c5:d2:4a:5d:35:d3:dd:87:
43:2b:4c:2a:3c:02:14:a7:e1:a6:d5:13:15:c1:8e:da:d4:d4:
c8:10:d2:e7:14:57:14:91:ff:5e:47:a4:20:45:3b:34:fd:90:
94:1c:5a:e0:0f:64:b1:b5:8e:98:67:a4:5a:a0:0f:91:63:3b:
13:78:15:58:22:65:8e:ad:25:d8:23:f5:aa:3e:c7:93:33:ac:
af:be:00:18:ba:92:59:65:2e:2c:90:83:51:6e:8c:be:b4:5e:
3a:57:c4:cb:08:cc:c7:fb:10:f4:20:55:24:ee:5c:80:76:74:
35:bf:bd:f8:f2:f4:88:86:03:74:23:72:d9:16:d5:b5:ea:2f:
86:a3:d4:b7:8b:52:e2:64:38:1d:be:69:e7:5a:b2:6b:8a:d5:
1d:d3:42:02:38:3a:1f:08:20:3e:16:4d:8f:fb:78:88:8b:66:
23:d9:0c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:52 2026 by rpki-client