Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: LwFQLeMf4IQA7bZl1pI4aTiAN9jpINOlj9upgvm8SdA=
Subject key identifier: E6:27:FE:51:04:97:3B:42:43:E9:D3:BB:86:F0:C9:56:D4:DB:B8:58
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 01A0DC8479E77D35E831103EE6ED1FD7F2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0F41
Signing time: Sat 26 Sep 2026 07:01:04 +0000
Manifest this update: Sat 26 Sep 2026 07:01:04 +0000
Manifest next update: Sun 27 Sep 2026 07:01:04 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: EWhwck9NPAdOZrzk8I7D9tg/1kC/KnrBAVLCXC6Wx14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:79:e7:7d:35:e8:31:10:3e:e6:ed:1f:d7:f2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Sep 26 07:01:04 2026 GMT
Not After : Sep 27 07:01:04 2026 GMT
Subject: CN=e627fe5104973b4243e9d3bb86f0c956d4dbb858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:2c:92:96:a0:3f:84:08:a1:af:76:57:82:
12:c7:ad:0f:00:86:d5:9c:fa:be:f8:17:3d:f6:e4:
ef:10:a6:f6:3b:d2:7a:2e:be:bd:56:6c:5a:6a:55:
db:1c:67:aa:38:83:64:25:5d:2c:98:ed:d8:a0:92:
0d:95:d3:41:0c:50:39:86:1a:4a:74:66:7d:32:87:
84:02:52:7c:49:31:e5:ad:ac:0b:10:fb:89:9f:1a:
1a:86:81:0d:5d:5b:25:70:14:ca:e3:a3:39:2d:19:
67:d7:36:a7:22:df:96:44:6d:36:4a:41:3a:98:29:
b2:0b:21:81:ca:bd:bc:a0:e9:26:22:9b:0e:05:49:
49:99:5b:b7:58:55:c5:09:69:09:b8:ce:97:66:9a:
1e:33:cf:84:26:d9:c4:57:45:bd:64:2b:91:51:ae:
09:04:10:64:5c:77:8a:84:86:ce:b6:bc:b2:dc:e2:
45:9a:51:b5:50:5f:66:1b:57:7e:f1:7b:fd:79:a0:
78:f1:f8:1b:bc:94:83:96:bf:5d:77:43:85:9c:90:
6f:c0:43:e5:ab:b4:33:d5:d6:0d:31:ae:da:c3:7f:
b0:a3:c8:b6:90:f0:6e:9e:ba:d7:55:a7:a3:47:35:
18:78:fc:a2:dd:3e:14:10:40:9d:cb:56:8d:42:49:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:FE:51:04:97:3B:42:43:E9:D3:BB:86:F0:C9:56:D4:DB:B8:58
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:80:e1:65:c9:6a:14:e2:73:5f:6a:f1:23:b4:68:e7:09:
80:20:45:ca:ca:bf:cf:5c:79:1a:24:37:69:df:51:0a:6e:f9:
5e:fa:39:12:d6:26:94:fb:f8:6b:d7:9b:34:54:80:91:e5:9b:
5b:56:26:3b:35:1b:21:44:80:6f:e5:91:96:6c:ce:44:14:63:
64:98:55:c6:f3:1d:53:75:f6:85:ea:94:3d:6f:c6:84:8e:27:
0e:d6:b0:6d:be:df:6f:c2:77:98:98:e2:b5:fb:aa:6c:da:6f:
eb:bc:35:f8:83:6d:6c:14:df:f0:55:9a:5c:de:d8:92:cc:34:
57:52:5d:35:7f:7d:64:49:d0:f0:f9:b2:a1:94:8d:d8:05:25:
b5:21:05:f0:d4:b7:60:76:80:b6:47:1d:6d:a5:fe:bd:e9:50:
be:c2:e1:26:34:6b:dd:da:6f:eb:db:43:75:c4:b4:d0:c4:16:
fa:fd:a6:65:e8:b4:28:54:6e:ab:64:c3:e8:01:04:f9:ec:5f:
bf:f8:ad:4e:93:14:cd:8d:42:96:d1:45:cc:3e:11:0a:d4:34:
d9:2d:72:a5:8d:7b:8b:6e:c3:77:30:e0:67:a2:73:c3:8e:0e:
6d:4e:7c:e6:69:f7:79:9d:81:b2:86:9e:a0:c1:c0:21:26:17:
43:2b:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:09:15 2026 by rpki-client