Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: +v8iruKk3usbh+FSo5NNTprUP8cIkul2hZsGTVToYHU=
Subject key identifier: 95:3B:92:3E:1A:97:B1:39:40:E4:B2:49:78:A8:E2:EC:A3:DC:B2:A7
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019DA4F86007FE579234DDA1D5A168D47496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 08BA
Signing time: Sun 19 Apr 2026 09:00:34 +0000
Manifest this update: Sun 19 Apr 2026 09:00:34 +0000
Manifest next update: Mon 20 Apr 2026 09:00:34 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: +Jbh5J8eD8Dp27wWJDyhJ7KdqAfKwvTpTBTXbIiOVLY=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:60:07:fe:57:92:34:dd:a1:d5:a1:68:d4:74:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Apr 19 09:00:34 2026 GMT
Not After : Apr 20 09:00:34 2026 GMT
Subject: CN=953b923e1a97b13940e4b24978a8e2eca3dcb2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:6c:7e:80:81:b9:2b:06:05:50:05:f0:50:
83:ce:98:fa:71:74:81:b9:82:1b:d1:c1:cc:35:7e:
1d:ee:f7:0f:75:29:56:90:f7:52:83:56:a9:2e:79:
12:da:57:fc:64:af:63:c6:e5:67:e8:ef:2a:0a:fb:
c8:e7:8b:95:96:ad:75:77:dd:15:be:20:8a:fb:95:
1d:04:83:d7:7e:fa:d8:d6:42:ec:07:72:03:66:60:
83:c2:ef:fb:d0:7a:b5:24:f6:eb:d5:cd:c0:39:bd:
9d:41:97:47:ad:4a:53:ae:47:71:b9:6f:5a:ee:a9:
9e:2a:c0:b6:57:7c:1b:99:e3:b8:76:48:f3:3f:3b:
ad:a0:36:33:ab:e9:53:f4:5b:f4:ab:c6:a2:f7:25:
6c:eb:e1:69:8e:27:f4:e5:64:67:e1:e9:10:db:c0:
0d:9b:9e:13:8c:5b:99:6d:37:d2:f0:70:09:30:c6:
b1:88:a5:94:df:6a:f0:5c:a1:3d:e9:7e:45:e0:08:
72:63:7d:a8:e2:cb:7c:00:72:28:7c:3d:ba:a6:93:
f3:cd:cc:42:91:d3:81:ec:e4:6e:82:c3:97:94:cd:
e2:3e:62:43:e8:ad:b4:bb:4d:6b:19:eb:fb:dd:ba:
91:b4:f2:c9:67:9a:bf:52:ab:89:1b:8a:0e:5d:2d:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:92:3E:1A:97:B1:39:40:E4:B2:49:78:A8:E2:EC:A3:DC:B2:A7
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:ef:3a:97:16:27:9f:5c:25:5a:47:5e:e3:76:7d:e2:97:
6e:a3:9d:60:71:d7:8b:6e:05:e5:c7:0f:30:e7:30:15:ff:b0:
46:43:6a:66:ca:08:46:49:71:68:e3:ea:bf:a8:3b:05:02:5e:
bf:0f:8e:a5:29:23:a3:9a:32:d4:6c:af:80:42:4e:48:0c:c4:
60:b9:9b:78:65:ea:89:7d:54:b9:cb:23:be:0f:e2:fb:77:de:
fd:c5:8e:20:c1:a9:cf:68:8f:48:d7:b1:89:03:9e:1e:da:5f:
36:7f:aa:c8:e2:46:4c:82:96:87:a1:64:b8:34:72:5f:3d:5a:
47:40:65:74:85:b3:d0:3c:2e:66:ec:88:88:0c:c9:08:24:9c:
e5:f7:bb:e4:7e:81:47:64:4c:ba:df:5c:76:9b:cd:3b:db:3d:
d3:5c:d5:b4:37:44:c9:77:01:30:ec:86:86:4a:13:ae:42:74:
e0:0e:38:b7:f9:e1:1e:ca:81:b1:08:6c:bc:50:1c:d6:e8:ed:
e4:4c:b6:4a:91:c9:f8:fd:13:77:d0:46:96:9d:32:05:e4:b4:
e0:7f:39:b2:39:67:64:42:e8:e5:0e:2b:8c:5d:5e:b7:b0:1b:
e5:8c:c7:e1:c4:f0:8d:39:88:98:37:36:5c:78:4c:3c:dd:82:
c0:30:c4:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+GAH/leSNN2h1aFo1HSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy
NWEyNWEwHhcNMjYwNDE5MDkwMDM0WhcNMjYwNDIwMDkwMDM0WjAzMTEwLwYDVQQD
Eyg5NTNiOTIzZTFhOTdiMTM5NDBlNGIyNDk3OGE4ZTJlY2EzZGNiMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1NsfoCBuSsGBVAF8FCDzpj6cXSB
uYIb0cHMNX4d7vcPdSlWkPdSg1apLnkS2lf8ZK9jxuVn6O8qCvvI54uVlq11d90V
viCK+5UdBIPXfvrY1kLsB3IDZmCDwu/70Hq1JPbr1c3AOb2dQZdHrUpTrkdxuW9a
7qmeKsC2V3wbmeO4dkjzPzutoDYzq+lT9Fv0q8ai9yVs6+Fpjif05WRn4ekQ28AN
m54TjFuZbTfS8HAJMMaxiKWU32rwXKE96X5F4AhyY32o4st8AHIofD26ppPzzcxC
kdOB7ORugsOXlM3iPmJD6K20u01rGev73bqRtPLJZ5q/UquJG4oOXS3VYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU7kj4al7E5QOSySXio4uyj3LKnMB8GA1UdIwQY
MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt
NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw
LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoTvOpcW
J59cJVpHXuN2feKXbqOdYHHXi24F5ccPMOcwFf+wRkNqZsoIRklxaOPqv6g7BQJe
vw+OpSkjo5oy1GyvgEJOSAzEYLmbeGXqiX1Uucsjvg/i+3fe/cWOIMGpz2iPSNex
iQOeHtpfNn+qyOJGTIKWh6FkuDRyXz1aR0BldIWz0DwuZuyIiAzJCCSc5fe75H6B
R2RMut9cdpvNO9s901zVtDdEyXcBMOyGhkoTrkJ04A44t/nhHsqBsQhsvFAc1ujt
5Ey2SpHJ+P0Td9BGlp0yBeS04H85sjlnZELo5Q4rjF1et7Ab5YzH4cTwjTmImDc2
XHhMPN2CwDDEqA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:38 2026 by rpki-client