Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: 4883EAjyxqSG+oVH0RU74WanzFMY9ArCm8gqj8nba0s=
Subject key identifier: B1:66:5B:A6:EA:A0:02:5C:22:CF:14:65:64:D7:C4:A4:D7:A9:A7:7B
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019CABD9C3DB63C05F38D54EDF7EA3573C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0839
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: ANGF7hHTAGlvRePm6dErhhgdtyokg1nCwDxlZVk1jE0=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c3:db:63:c0:5f:38:d5:4e:df:7e:a3:57:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=b1665ba6eaa0025c22cf146564d7c4a4d7a9a77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:85:f1:c7:07:52:e4:ee:2e:7f:f2:56:d9:
13:39:91:58:5d:6b:af:76:19:b4:c6:e4:76:59:bb:
30:ee:da:b8:c2:77:8c:3c:7f:88:b1:7c:11:77:c2:
d2:25:66:b0:b3:92:1a:74:f1:0e:76:78:af:9e:04:
22:e1:64:a0:be:32:e9:df:71:8e:be:80:2b:f4:4f:
8e:5b:f0:78:04:8b:1a:6a:a7:e2:b0:c0:41:5e:eb:
5c:56:b2:f8:23:d0:76:20:e1:3d:a0:8a:53:b6:f4:
dc:5a:47:b9:13:4a:42:0e:9a:64:e9:90:80:f8:f4:
32:9b:67:62:db:f5:6d:e5:b1:11:84:d6:81:c4:69:
44:00:86:bd:e8:f8:76:8a:e4:89:5b:db:d3:f4:45:
71:a6:61:00:25:18:91:fe:57:b0:6f:88:dd:33:29:
c3:ef:52:67:df:68:6c:9d:f1:c9:07:3d:dc:4e:e4:
f8:ff:33:80:1e:54:82:4e:84:02:ca:6b:b7:be:f5:
22:d5:c3:4e:ef:16:39:da:7d:5f:be:33:21:ec:ed:
0b:cd:f5:35:a6:63:8b:8a:90:d8:18:82:2a:05:08:
79:76:e8:0b:e6:cb:51:30:32:5e:6f:49:b1:5c:72:
48:3e:43:9c:43:ff:5c:5e:12:56:05:09:77:26:db:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:5B:A6:EA:A0:02:5C:22:CF:14:65:64:D7:C4:A4:D7:A9:A7:7B
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:51:45:26:3f:aa:34:e0:ad:fc:32:b1:ec:1c:04:f8:04:3d:
01:18:60:1a:3f:d5:ef:ca:1f:76:fa:bd:86:f0:64:00:31:89:
62:db:de:8c:70:c6:2b:dc:5d:ad:f1:0a:49:bb:72:dd:5f:7b:
22:29:e7:f9:7c:97:46:0e:15:27:ed:6b:64:8d:2b:22:92:71:
15:81:0d:36:2c:d8:6c:95:a3:61:53:fb:e0:c5:0a:13:05:3f:
b3:a0:d4:01:f1:bf:3b:fa:98:78:15:ee:0d:0e:65:02:c9:9b:
50:1c:59:0b:86:c1:02:72:60:97:5a:96:2e:d4:0f:14:be:f8:
2a:4d:d9:ce:9c:d9:b4:51:43:d9:e8:97:36:2b:96:e5:c0:b3:
06:66:8d:ac:e1:68:79:0c:39:42:1d:a2:3d:31:4c:92:e8:b8:
c6:80:d1:96:48:cb:43:f2:56:ce:87:bb:8c:80:30:c1:9b:77:
49:fd:78:44:65:08:69:33:e0:8f:f4:b2:35:cc:18:2e:24:bf:
8b:52:57:84:79:65:31:d4:9c:23:d0:35:e3:de:7e:d6:8c:5f:
2c:b9:74:d1:b3:b6:0b:4f:74:8e:79:49:00:b2:90:d4:cf:31:
8a:98:72:db:25:66:e1:c8:e3:24:78:e6:9c:0e:2f:93:0f:a9:
52:b1:c5:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cPbY8BfONVO336jVzyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy
NWEyNWEwHhcNMjYwMzAyMDAwMTQxWhcNMjYwMzAzMDAwMTQxWjAzMTEwLwYDVQQD
EyhiMTY2NWJhNmVhYTAwMjVjMjJjZjE0NjU2NGQ3YzRhNGQ3YTlhNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA376F8ccHUuTuLn/yVtkTOZFYXWuv
dhm0xuR2Wbsw7tq4wneMPH+IsXwRd8LSJWaws5IadPEOdnivngQi4WSgvjLp33GO
voAr9E+OW/B4BIsaaqfisMBBXutcVrL4I9B2IOE9oIpTtvTcWke5E0pCDppk6ZCA
+PQym2di2/Vt5bERhNaBxGlEAIa96Ph2iuSJW9vT9EVxpmEAJRiR/lewb4jdMynD
71Jn32hsnfHJBz3cTuT4/zOAHlSCToQCymu3vvUi1cNO7xY52n1fvjMh7O0LzfU1
pmOLipDYGIIqBQh5dugL5stRMDJeb0mxXHJIPkOcQ/9cXhJWBQl3JtupkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFmW6bqoAJcIs8UZWTXxKTXqad7MB8GA1UdIwQY
MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt
NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw
LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVFFJj+q
NOCt/DKx7BwE+AQ9ARhgGj/V78ofdvq9hvBkADGJYtvejHDGK9xdrfEKSbty3V97
Iinn+XyXRg4VJ+1rZI0rIpJxFYENNizYbJWjYVP74MUKEwU/s6DUAfG/O/qYeBXu
DQ5lAsmbUBxZC4bBAnJgl1qWLtQPFL74Kk3ZzpzZtFFD2eiXNiuW5cCzBmaNrOFo
eQw5Qh2iPTFMkui4xoDRlkjLQ/JWzoe7jIAwwZt3Sf14RGUIaTPgj/SyNcwYLiS/
i1JXhHllMdScI9A1495+1oxfLLl00bO2C090jnlJALKQ1M8xiphy2yVm4cjjJHjm
nA4vkw+pUrHFTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:20 2026 by rpki-client