Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: KdTZVnRA0whcSFX/RMQP8lvVcM6xbgwgw0vV7pYn/xA=
Subject key identifier: 16:73:9F:1A:5E:1D:03:FB:92:EE:27:9E:F1:E9:70:3C:3D:A3:A7:76
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019CAB6B85AEC8F7714DD8792B98BBB48B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 1185
Signing time: Sun 01 Mar 2026 22:01:16 +0000
Manifest this update: Sun 01 Mar 2026 22:01:16 +0000
Manifest next update: Mon 02 Mar 2026 22:01:16 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: 3KgHgeouSeO/u4Aj7g+blK3rXIkyOZJLHvN6wKIuwwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:85:ae:c8:f7:71:4d:d8:79:2b:98:bb:b4:8b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Mar 1 22:01:16 2026 GMT
Not After : Mar 2 22:01:16 2026 GMT
Subject: CN=16739f1a5e1d03fb92ee279ef1e9703c3da3a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:79:39:ec:8b:94:de:02:c0:1a:e6:8e:cb:
7b:00:9e:66:b2:9c:16:e3:a7:a0:4e:7f:bf:89:7a:
21:76:85:7d:b1:43:2d:59:fe:92:5d:9c:98:e4:78:
ca:fd:cc:2c:b4:1c:8b:7e:81:68:e9:3b:04:83:3e:
b6:81:f6:99:92:7f:0c:a2:34:a7:e3:ab:e9:7d:48:
6c:a8:c7:ce:10:88:fa:fc:21:71:70:51:a5:a1:24:
41:55:08:32:08:c1:42:e8:9b:14:6d:0f:13:d0:6f:
44:85:d8:94:14:56:91:d7:44:02:18:9d:aa:24:5d:
bd:b8:5c:27:9c:2c:c2:ff:ed:fd:14:ad:a1:b7:28:
11:c6:d3:80:65:de:41:49:9a:81:4b:62:ef:0c:08:
2a:81:78:a4:29:ce:90:37:d9:f8:0a:7c:aa:46:fd:
13:a5:4a:d4:ec:00:d6:01:36:5e:6a:b3:ee:9d:c3:
07:21:72:6f:10:f5:79:08:7a:03:2c:0a:94:d5:81:
ef:c8:23:5b:50:df:52:8d:1a:1e:06:77:83:c7:8e:
94:97:b2:16:56:e0:d3:5d:6a:3a:4a:bd:ae:dc:e9:
ea:30:ad:9a:fb:19:c5:6b:d4:20:a5:87:eb:3a:73:
95:97:d5:19:ed:47:39:7b:ba:e5:f3:73:7b:71:2f:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:73:9F:1A:5E:1D:03:FB:92:EE:27:9E:F1:E9:70:3C:3D:A3:A7:76
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:54:67:52:85:e7:ea:4e:51:f2:58:17:85:a9:b5:1f:f6:56:
f1:b2:56:1f:f7:03:bd:7b:05:cf:95:4e:f1:81:52:68:0b:b0:
09:cc:bd:0f:72:3b:03:f3:4d:81:20:dc:9f:c5:f1:e9:12:78:
bf:ab:d4:db:60:15:67:1f:db:da:60:e4:d0:fe:f5:5b:88:8f:
81:3c:24:7f:e6:02:f3:af:43:b8:aa:bf:cc:53:74:78:9f:36:
6a:f0:5e:37:bd:b4:5d:33:ed:19:f0:da:e2:61:8d:17:f3:a1:
3c:6b:c7:57:6d:75:a3:56:41:de:c0:f8:48:a6:eb:cb:b5:c3:
f6:da:b9:81:14:09:35:75:36:6a:25:49:e1:ae:77:2b:53:a0:
6e:db:ba:fc:44:4d:92:5b:58:00:69:02:2b:9b:b0:22:7d:b5:
d3:8f:c6:26:5d:10:60:b8:b8:c6:5c:cb:aa:bd:a7:3a:2a:4d:
04:bc:2d:2a:59:88:a3:f3:4b:4e:e9:85:aa:89:83:83:bc:26:
62:46:1f:73:98:63:c2:3a:f7:3f:41:39:69:80:c9:a1:2b:71:
d4:7e:27:c2:46:3a:e9:06:7e:8b:b5:58:aa:99:36:d5:03:24:
e6:55:16:15:a8:ad:ad:58:53:25:7d:a7:05:dc:87:df:e3:fe:
28:75:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:59 2026 by rpki-client