Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: p+76LYG02Lt6JgSy/7aUSUTsmaZk64SmhwAQENs2HJw=
Subject key identifier: 97:91:23:16:94:52:9A:F8:9D:28:4B:68:68:48:A0:D9:2D:D5:AC:07
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019D98F46F5FF819F79E6AECBA69AC44014E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 1200
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: TjrcJElKVwHnnlxojuhLKpwunw02RWmwvVS+bRbQfIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6f:5f:f8:19:f7:9e:6a:ec:ba:69:ac:44:01:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=9791231694529af89d284b686848a0d92dd5ac07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:61:6e:bc:0d:26:98:a8:a5:68:c5:f1:be:
ff:ed:bb:0b:63:74:19:7e:bc:5e:61:8a:85:21:89:
2e:23:e8:9e:87:cf:35:8d:b8:21:c6:ab:06:87:32:
75:32:6c:c0:f1:af:64:0b:b3:64:0e:cb:a3:78:d7:
71:ba:b1:f4:8a:2b:4a:cd:fd:da:a7:ef:15:fd:d4:
5d:9c:1a:4d:7c:1a:57:5a:48:10:85:49:b3:b5:21:
2c:a4:41:3a:b8:06:1c:57:6f:39:db:36:37:f0:f1:
a6:d4:d1:1d:f9:8b:ed:fa:89:7e:a6:22:4d:55:04:
be:78:c7:3b:81:83:08:f1:91:6e:d2:00:bf:84:c0:
6c:36:da:7b:65:02:31:fd:72:ea:ce:c7:ef:7d:75:
f1:af:fc:7b:b2:05:8e:80:8a:c8:b9:76:15:80:6b:
04:18:1d:4b:91:2e:d4:84:f0:eb:3b:96:ff:e7:89:
55:7b:2f:15:ac:c3:51:7f:d0:77:a5:35:71:ae:7b:
66:4d:eb:fc:6a:c2:f8:74:22:6f:40:73:41:cf:dd:
fe:6f:13:2d:ec:69:6e:5f:6b:37:fb:f2:dc:f2:fc:
8b:7b:3c:67:f6:42:85:c8:bb:95:c0:e8:f3:05:a7:
d6:92:8c:17:a5:e4:cc:72:b7:19:91:ca:13:1f:16:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:23:16:94:52:9A:F8:9D:28:4B:68:68:48:A0:D9:2D:D5:AC:07
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:46:dc:90:fd:0e:f9:38:75:0d:af:3a:9e:29:cd:16:16:a9:
e3:2a:9a:5e:9d:20:67:59:6b:bb:0c:f0:2c:a6:8c:b0:8f:2f:
fc:8e:14:12:ae:83:a9:e2:55:63:25:0a:ed:5c:f1:4f:3a:c5:
82:86:28:4a:72:d7:b2:7c:68:92:34:f9:e4:87:2a:2b:d1:93:
84:61:67:17:b7:7f:1c:8c:a6:3a:37:49:96:15:4e:08:ef:35:
4d:f9:29:65:08:2d:28:60:41:76:e2:9c:63:bd:2f:3d:e3:51:
30:eb:bd:ff:b2:5e:36:6f:48:d2:69:0a:6a:9d:41:1c:30:b1:
5b:cc:60:3c:61:d9:85:3c:cb:4b:5d:b9:04:52:b6:9f:f2:6f:
af:7d:2e:34:cd:08:8b:41:90:aa:7f:e7:14:ba:31:9f:56:df:
6e:8d:d2:7e:1e:78:23:d5:f4:07:00:86:39:45:c8:be:32:25:
f6:2a:95:65:1b:70:ce:20:20:d4:c4:a1:ef:86:a1:30:a8:8e:
c9:5a:01:88:92:4f:8d:cc:07:b6:8d:d8:88:38:4a:ae:08:ac:
5a:12:17:07:1f:dc:af:0d:77:12:fe:2c:c2:0f:08:10:65:74:
45:fb:08:14:65:3c:2e:d6:0e:e9:95:b1:7c:94:31:e4:b1:bd:
50:bc:4a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9G9f+Bn3nmrsummsRAFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTVkNTJiM2NhODc0NTQ1NzViNjViNzIwZWVmODFhMjYy
YTVmM2EwHhcNMjYwNDE3MDEwMDQ5WhcNMjYwNDE4MDEwMDQ5WjAzMTEwLwYDVQQD
Eyg5NzkxMjMxNjk0NTI5YWY4OWQyODRiNjg2ODQ4YTBkOTJkZDVhYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKthbrwNJpiopWjF8b7/7bsLY3QZ
frxeYYqFIYkuI+ieh881jbghxqsGhzJ1MmzA8a9kC7NkDsujeNdxurH0iitKzf3a
p+8V/dRdnBpNfBpXWkgQhUmztSEspEE6uAYcV2852zY38PGm1NEd+Yvt+ol+piJN
VQS+eMc7gYMI8ZFu0gC/hMBsNtp7ZQIx/XLqzsfvfXXxr/x7sgWOgIrIuXYVgGsE
GB1LkS7UhPDrO5b/54lVey8VrMNRf9B3pTVxrntmTev8asL4dCJvQHNBz93+bxMt
7GluX2s3+/Lc8vyLezxn9kKFyLuVwOjzBafWkowXpeTMcrcZkcoTHxYqmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeRIxaUUpr4nShLaGhIoNkt1awHMB8GA1UdIwQY
MBaAFK2l1Ss8qHRUV1tltyDu+BomKl86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMt
ZDE4YWI0ZjdmNWRmLzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81ZDg0NTMtMDM4MC00NzVlLTllZGMtZDE4YWI0ZjdmNWRm
LzEvcmFYVkt6eW9kRlJYVzJXM0lPNzRHaVlxWHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkbckP0O
+Th1Da86ninNFhap4yqaXp0gZ1lruwzwLKaMsI8v/I4UEq6DqeJVYyUK7VzxTzrF
goYoSnLXsnxokjT55IcqK9GThGFnF7d/HIymOjdJlhVOCO81TfkpZQgtKGBBduKc
Y70vPeNRMOu9/7JeNm9I0mkKap1BHDCxW8xgPGHZhTzLS125BFK2n/Jvr30uNM0I
i0GQqn/nFLoxn1bfbo3Sfh54I9X0BwCGOUXIvjIl9iqVZRtwziAg1MSh74ahMKiO
yVoBiJJPjcwHto3YiDhKrgisWhIXBx/crw13Ev4swg8IEGV0RfsIFGU8LtYO6ZWx
fJQx5LG9ULxKhw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:36 2026 by rpki-client