Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: mB2RTqnhX2vO1pK3q0YcGfkHmcIDaueHOJfL3YtDdYQ=
Subject key identifier: 9D:A1:3B:72:8A:9A:9B:6A:85:A5:30:BD:CC:06:DF:6D:AF:B1:1C:88
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019EC44A1A87B269AFD2079377C1ABB5B3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 129B
Signing time: Sun 14 Jun 2026 04:00:51 +0000
Manifest this update: Sun 14 Jun 2026 04:00:51 +0000
Manifest next update: Mon 15 Jun 2026 04:00:51 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: sf0Bqfbp+qp8VZEgtiDOAU5ctXSwcW79/VhUutL74RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:1a:87:b2:69:af:d2:07:93:77:c1:ab:b5:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Jun 14 04:00:51 2026 GMT
Not After : Jun 15 04:00:51 2026 GMT
Subject: CN=9da13b728a9a9b6a85a530bdcc06df6dafb11c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:86:ec:35:57:b4:19:f9:28:10:af:3e:70:
b6:75:87:4f:30:8c:07:e0:d1:67:a1:ec:1a:50:40:
c7:66:39:a5:f4:6d:f9:ee:25:87:75:ce:5f:a7:01:
47:ed:12:d6:64:2d:0f:a6:32:c0:30:5b:20:1b:de:
2c:ee:bc:22:50:df:c7:89:4c:73:42:45:02:9f:d8:
03:a6:b1:83:e4:60:bc:2d:f5:1f:58:ff:5d:77:b8:
6a:59:df:00:90:b4:4a:ec:3c:b7:e7:ba:21:e7:38:
4f:62:44:fe:a5:4d:d1:0a:13:52:e7:66:92:ed:4c:
e7:7d:44:3a:4a:3a:44:81:53:b1:f3:1d:0e:81:25:
b4:f0:17:73:11:21:95:6c:2b:98:93:7e:50:3a:cd:
6b:25:6d:93:6a:ca:29:1d:29:44:f5:56:f4:35:9f:
d0:46:cd:f8:d3:25:81:c0:02:a2:35:7f:7f:24:7f:
ab:60:70:92:b1:03:c9:e2:2e:83:14:45:62:8a:93:
b3:ea:ff:e1:90:f3:b5:c8:41:e4:73:f8:ba:d7:98:
bd:fa:ce:9b:fb:f0:ee:b5:c4:43:cd:76:ee:7c:56:
76:2f:27:f6:88:83:6d:c3:aa:a5:e9:48:7b:fe:39:
41:46:9f:87:b3:c4:fd:86:77:d8:dc:d6:fb:30:bf:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:3B:72:8A:9A:9B:6A:85:A5:30:BD:CC:06:DF:6D:AF:B1:1C:88
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:07:d6:92:c7:4c:be:83:b4:75:93:3a:0c:ed:42:1e:24:db:
09:2c:ad:5d:f8:3d:f8:f9:a7:9d:17:7d:b0:df:e2:27:c2:a4:
04:f1:f6:ef:e3:24:55:f7:34:36:2e:35:9a:ea:b6:43:74:92:
3b:2d:54:8c:3f:6e:0e:c3:a4:3e:2d:72:db:76:12:2b:33:1b:
b4:f8:4d:a5:7c:99:08:1b:08:12:ea:01:aa:15:60:f1:d3:dc:
a5:0b:ab:d8:b6:81:74:87:34:c6:28:52:fa:54:ce:98:ac:ee:
41:8d:54:c0:eb:75:2d:44:9a:18:b3:ad:e5:2e:3b:6b:d2:7e:
a1:4a:6e:af:10:b2:93:ef:80:d5:86:88:0b:7a:91:38:0c:30:
87:31:25:89:3a:1d:cd:8d:b7:8c:9c:f4:d0:5f:8a:b0:ca:71:
3c:54:b6:72:d1:c3:10:b7:da:4d:18:c5:34:64:0a:38:ed:c0:
2c:dc:af:9b:9e:55:5a:9e:78:c3:a8:fc:6f:7b:16:ac:c7:7f:
20:f5:6c:ad:a5:c2:53:96:be:bd:aa:eb:05:57:dc:e9:10:09:
78:0a:29:fb:0a:ee:b8:58:9c:6f:5e:9e:5d:af:19:87:25:af:
df:7c:c2:cc:c4:e6:b5:75:a4:d3:04:90:a9:45:e5:0f:97:2e:
30:0d:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:01 2026 by rpki-client