Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: HOjHY1OAIN9ahhPyZhQ0vssokhm4bMt8fK2CAot8Orw=
Subject key identifier: E0:8A:3D:CF:6E:6E:48:37:F8:29:EF:A8:F5:18:60:C1:0C:A7:B5:54
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019FAC76B63A9611366ADE172DBC0B20E4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 09C7
Signing time: Wed 29 Jul 2026 06:01:28 +0000
Manifest this update: Wed 29 Jul 2026 06:01:28 +0000
Manifest next update: Thu 30 Jul 2026 06:01:28 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: C6VVma41asS4MkBto44ZSLKzBUobi7SfuHRju9yrBLg=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:b6:3a:96:11:36:6a:de:17:2d:bc:0b:20:e4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Jul 29 06:01:28 2026 GMT
Not After : Jul 30 06:01:28 2026 GMT
Subject: CN=e08a3dcf6e6e4837f829efa8f51860c10ca7b554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:75:16:39:2a:1e:ef:bc:2e:4b:4b:70:2f:
70:34:ea:a5:92:41:bd:9a:d3:44:43:11:48:2a:28:
21:70:d2:1d:01:cc:44:49:98:57:d6:e2:a8:4e:e8:
51:4a:6e:1b:2d:b4:b2:c5:b1:1b:37:16:5a:1d:0b:
26:8f:24:81:f4:e8:95:2f:f7:70:49:57:e7:df:05:
66:71:b7:4d:e3:89:70:7b:56:10:a1:cd:0d:5d:cd:
20:dd:09:32:5a:39:0e:51:eb:70:d6:49:2e:4f:f2:
d2:b7:68:46:8b:b0:50:14:06:3e:1a:e6:e0:0a:c2:
b1:8d:d1:03:54:76:fc:75:66:43:f9:33:79:46:9f:
9c:0d:76:82:d6:6d:fa:1e:0f:a4:a1:b6:b9:1b:c3:
8c:f4:5a:16:db:7b:69:3f:55:4f:7b:57:5a:a9:dd:
c5:f5:7d:7d:d9:ff:b5:e6:bd:9e:dd:98:b9:08:f3:
9f:f3:bd:69:c4:e7:32:6c:a2:46:0f:db:c0:fd:dd:
28:36:ee:87:8b:34:93:aa:6c:d3:66:60:11:56:35:
d6:a0:a7:36:31:c1:a8:51:64:4d:f7:93:31:94:ce:
68:00:60:7e:34:49:85:43:3e:31:f4:e2:37:4e:9c:
cd:de:03:32:1b:6c:85:b0:35:81:5f:2c:e3:bf:f5:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:3D:CF:6E:6E:48:37:F8:29:EF:A8:F5:18:60:C1:0C:A7:B5:54
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d5:e3:9d:a7:e6:f9:2b:a4:f2:11:24:e7:76:0a:33:07:9e:
4b:1d:1f:34:bf:c1:7d:59:bf:20:41:f1:c4:a6:19:ef:8c:e5:
bd:bb:4e:e6:41:80:d4:dc:e5:e7:19:d6:96:a2:ed:12:7e:c7:
bb:07:d2:70:ea:0f:94:3d:6f:2c:b2:d2:d8:ca:52:33:f7:f8:
4f:56:9c:3a:04:41:85:cd:44:89:b4:c9:86:5a:bf:27:bd:80:
a0:ea:3e:68:75:8d:c1:f8:38:f6:0d:31:ac:5c:b9:dc:f1:67:
92:7d:97:96:dc:bb:a2:32:27:76:3f:fe:71:05:6e:dd:51:f2:
af:59:29:42:7d:10:28:2a:48:04:00:3a:6d:85:03:a6:62:65:
02:a1:5c:9f:2e:6b:b6:75:60:ae:e0:19:ef:fe:95:f7:67:4a:
69:0e:13:e9:45:d3:1c:ec:b1:99:26:07:ee:7f:69:5b:9c:94:
64:09:46:ca:fe:60:b2:30:3a:09:f5:bf:c6:0d:f1:37:c0:11:
87:94:8e:f9:5f:ee:f8:7c:a2:0f:91:80:16:e4:31:a5:59:f6:
bd:66:27:4f:c0:99:e9:1b:89:07:33:e3:06:c6:a7:18:9c:31:
0d:bb:cc:d9:39:11:6c:22:f9:07:5a:0c:05:f5:cd:fc:e5:09:
39:6d:48:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:49 2026 by rpki-client