Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: tlPY0jIJKZXE/fFuxQX7vgDD8jYCpdAFOz3ddmldXDQ=
Subject key identifier: 78:BD:22:2F:8D:5B:6E:7A:6B:EA:1F:DF:E6:DE:D9:B4:0E:A9:E2:74
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 01A0E107409A45483A5DC6BA91B5BDC44B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 13B3
Signing time: Sun 27 Sep 2026 04:02:23 +0000
Manifest this update: Sun 27 Sep 2026 04:02:23 +0000
Manifest next update: Mon 28 Sep 2026 04:02:23 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: +n9kJSIvCC9c77VwmKSisi+V3Y9M1XnCqVuX6YBxUVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:40:9a:45:48:3a:5d:c6:ba:91:b5:bd:c4:4b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Sep 27 04:02:23 2026 GMT
Not After : Sep 28 04:02:23 2026 GMT
Subject: CN=78bd222f8d5b6e7a6bea1fdfe6ded9b40ea9e274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:9d:12:b6:2d:30:cc:aa:c8:16:1d:5f:68:
90:71:9e:b0:3c:2e:7e:b9:93:19:64:bb:b8:cb:af:
d4:fd:21:72:11:1b:4d:e4:1e:53:f0:d5:8c:30:a2:
47:4a:7d:5e:c6:d9:69:4a:01:4a:9c:4a:c8:f5:da:
07:e6:fa:42:b6:12:dd:3e:29:9a:a6:69:b7:e3:8a:
ad:33:34:2f:a5:bb:76:0b:d9:31:06:2c:f6:fa:d0:
ac:b8:56:6d:20:17:0c:10:c9:08:06:f0:2d:6c:84:
62:c5:1f:6f:9b:c3:1a:9a:23:c8:a5:8e:c5:08:b5:
71:2e:3c:65:96:d3:b7:b3:65:96:e7:64:62:27:d8:
d2:b6:de:74:f1:2e:bc:1e:4d:14:48:eb:a4:0f:de:
c3:9f:53:c3:92:e7:f5:88:e4:16:95:20:ba:26:8e:
0f:fb:80:ff:5d:e8:e2:77:11:ef:aa:20:4b:c5:6e:
90:fb:43:f9:93:4b:65:e5:c7:c6:40:bf:3b:6c:80:
8b:9a:e5:4c:fe:29:af:ec:9c:e7:c9:d5:94:89:05:
f1:a0:09:cd:02:15:52:25:f8:bc:25:75:9e:bd:25:
d7:24:79:e9:84:57:a7:32:c3:cd:0d:d1:5d:0b:ff:
51:22:e7:45:85:b2:bf:f1:1f:66:47:91:f1:6b:9e:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BD:22:2F:8D:5B:6E:7A:6B:EA:1F:DF:E6:DE:D9:B4:0E:A9:E2:74
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4b:c2:10:ce:af:e3:4f:ed:61:1c:55:45:6c:48:a1:cf:be:
3f:1f:00:3c:6d:23:7f:2e:da:72:6d:46:3b:dc:20:28:77:dd:
54:d9:82:e9:56:c6:b8:b2:4a:28:48:f0:cd:47:e7:e4:28:f4:
9e:02:db:b8:b9:fa:30:29:83:88:9b:1c:d0:b7:6f:9f:56:fa:
69:25:77:ee:7d:c0:25:01:4e:8a:4a:8f:2e:a1:ee:1b:65:55:
cf:83:80:01:9c:ee:28:97:99:c7:db:e8:e8:69:d9:e9:92:ee:
a4:d2:e7:04:f6:33:c9:d3:c7:fc:77:65:ed:b8:48:05:7d:4f:
29:1d:36:da:4b:07:39:a9:13:3a:cc:0a:49:48:7d:d2:eb:81:
ab:80:d8:07:c1:72:35:db:c6:30:d6:8a:be:06:14:15:d9:0e:
62:3f:bd:99:b9:15:69:e2:96:2f:02:c7:6c:b3:5b:6f:49:e2:
22:5c:a1:15:bb:44:09:5c:1d:bf:a3:7a:fa:5a:1a:fb:c4:40:
2d:25:63:1c:9c:dd:c7:6f:4f:08:35:e8:4c:d0:c9:6e:9f:b1:
42:30:9b:51:77:dc:17:64:2f:eb:ac:74:a4:9d:7e:78:7c:2a:
24:7b:89:d9:e7:11:c2:c7:52:34:27:89:d8:3f:84:35:19:ac:
91:8a:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:54:51 2026 by rpki-client