Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: rrkJ6t6veyCxjylnzm8VuBsH7v8gAzgxywYT16B2K5I=
Subject key identifier: 8D:C6:5D:C0:2E:35:F3:D9:C5:38:30:44:D1:3B:7D:6C:8C:6F:88:EE
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 01A0C47CB6D19A78431EC036A9FEF04DA10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0A58
Signing time: Mon 21 Sep 2026 15:01:42 +0000
Manifest this update: Mon 21 Sep 2026 15:01:42 +0000
Manifest next update: Tue 22 Sep 2026 15:01:42 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: gndxbMhPswH8/FKaAqs8IhlEYTbC4USxO+PXG1uTLfE=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:b6:d1:9a:78:43:1e:c0:36:a9:fe:f0:4d:a1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Sep 21 15:01:42 2026 GMT
Not After : Sep 22 15:01:42 2026 GMT
Subject: CN=8dc65dc02e35f3d9c5383044d13b7d6c8c6f88ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:19:c6:a4:05:f9:cf:bf:1e:d7:bd:37:14:
e8:47:b8:3f:11:0e:24:c4:7f:ab:c3:23:31:91:5d:
70:2c:df:6a:08:a7:8e:e7:7d:d6:f9:3c:8d:4f:ca:
18:1a:a1:92:5a:ed:45:de:c5:76:09:80:f4:cb:54:
78:66:38:67:13:19:43:8e:6c:c8:b0:f2:4c:69:8e:
f3:0e:99:0d:60:3b:d6:6e:33:2e:3a:73:85:77:3b:
ce:d3:4d:9d:bf:49:47:b3:10:21:d3:b1:b8:d4:4f:
0c:42:a1:9a:78:46:fb:0f:9c:8e:7f:24:21:6a:4b:
a3:ea:7f:38:28:b2:d5:75:35:37:05:75:a4:bf:5e:
e9:da:87:d1:7c:bd:20:f2:c3:7d:cc:8d:d2:ca:38:
8e:53:51:82:fb:36:36:90:e4:52:6c:f3:bb:2e:59:
a4:cb:48:a4:b3:5c:9e:0f:10:46:9d:57:37:85:06:
e1:81:0c:03:17:a6:5e:12:d3:0c:b0:7a:fc:46:d4:
2f:c6:be:a4:4a:ff:99:d5:2f:7a:01:bb:6e:bd:28:
f7:57:be:0a:92:ba:57:b1:b2:82:d5:d6:8a:b8:c0:
31:ac:ba:83:71:99:fd:b8:d6:fc:22:6d:7e:70:38:
4e:e7:40:47:5e:46:58:e7:ab:5f:17:d1:bc:f7:67:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:5D:C0:2E:35:F3:D9:C5:38:30:44:D1:3B:7D:6C:8C:6F:88:EE
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:71:f2:28:1f:52:d4:d1:77:53:b0:d5:89:68:04:1d:27:
57:e6:65:b0:a0:09:a7:83:ce:04:2c:18:04:4d:60:73:b7:c1:
b1:12:39:33:36:41:51:cc:fb:a2:3b:b2:54:bc:e4:8f:a7:d5:
75:b4:b7:e5:ee:39:54:33:fa:d4:ff:d0:82:24:ce:b3:7c:ea:
8e:35:5a:fb:af:37:af:41:e2:7e:73:68:14:df:25:60:81:94:
9d:ac:f8:66:0a:fd:e3:67:20:fe:9f:6f:68:63:a1:2d:25:61:
a2:16:c8:8c:17:4e:2b:3d:57:4d:72:9d:83:ce:e9:3e:d5:6a:
06:44:92:d6:6d:c1:89:29:91:6c:b0:c3:25:21:39:0c:55:2b:
97:f4:42:fa:e7:36:21:e1:21:a3:5b:9d:60:a7:5f:6b:ff:42:
21:2c:4b:7b:98:d6:7f:e5:00:38:a4:0c:b0:23:52:e6:97:86:
5d:50:01:8c:09:96:84:ed:0a:c8:bc:74:2d:53:15:97:98:0e:
1f:69:f0:5c:83:dc:2b:0d:e1:b9:ee:f3:a7:f1:91:63:9c:79:
99:59:a8:47:37:ea:33:d3:b6:57:12:76:29:ec:7e:27:47:fb:
fa:b6:78:7a:1c:af:14:66:0a:67:5f:c3:a9:dc:1e:25:18:5b:
19:13:ba:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfLbRmnhDHsA2qf7wTaELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy
NWEyNWEwHhcNMjYwOTIxMTUwMTQyWhcNMjYwOTIyMTUwMTQyWjAzMTEwLwYDVQQD
Eyg4ZGM2NWRjMDJlMzVmM2Q5YzUzODMwNDRkMTNiN2Q2YzhjNmY4OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO8ZxqQF+c+/Hte9NxToR7g/EQ4k
xH+rwyMxkV1wLN9qCKeO533W+TyNT8oYGqGSWu1F3sV2CYD0y1R4ZjhnExlDjmzI
sPJMaY7zDpkNYDvWbjMuOnOFdzvO002dv0lHsxAh07G41E8MQqGaeEb7D5yOfyQh
akuj6n84KLLVdTU3BXWkv17p2ofRfL0g8sN9zI3SyjiOU1GC+zY2kORSbPO7Llmk
y0iks1yeDxBGnVc3hQbhgQwDF6ZeEtMMsHr8RtQvxr6kSv+Z1S96AbtuvSj3V74K
krpXsbKC1daKuMAxrLqDcZn9uNb8Im1+cDhO50BHXkZY56tfF9G892co/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3GXcAuNfPZxTgwRNE7fWyMb4juMB8GA1UdIwQY
MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt
NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw
LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFVx8igf
UtTRd1Ow1YloBB0nV+ZlsKAJp4POBCwYBE1gc7fBsRI5MzZBUcz7ojuyVLzkj6fV
dbS35e45VDP61P/QgiTOs3zqjjVa+683r0HifnNoFN8lYIGUnaz4Zgr942cg/p9v
aGOhLSVhohbIjBdOKz1XTXKdg87pPtVqBkSS1m3BiSmRbLDDJSE5DFUrl/RC+uc2
IeEho1udYKdfa/9CISxLe5jWf+UAOKQMsCNS5peGXVABjAmWhO0KyLx0LVMVl5gO
H2nwXIPcKw3hue7zp/GRY5x5mVmoRzfqM9O2VxJ2Kex+J0f7+rZ4ehyvFGYKZ1/D
qdweJRhbGRO6tQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:00:06 2026 by rpki-client