Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: yKxjAmhPUimtf32q9FiCXESyrUhFLl2WGyqtiIPtytA=
Subject key identifier: 02:5E:4B:56:FD:86:65:3A:D3:9A:B5:83:81:93:2D:3E:5E:03:4D:92
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019D984FA2135D0EC1FAEE403A772CABCBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0D90
Signing time: Thu 16 Apr 2026 22:00:48 +0000
Manifest this update: Thu 16 Apr 2026 22:00:48 +0000
Manifest next update: Fri 17 Apr 2026 22:00:48 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: lUVzskBMbvOfTtinzg07x6OGC84puqNBYRIJ87GGddY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a2:13:5d:0e:c1:fa:ee:40:3a:77:2c:ab:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Apr 16 22:00:48 2026 GMT
Not After : Apr 17 22:00:48 2026 GMT
Subject: CN=025e4b56fd86653ad39ab58381932d3e5e034d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:46:9b:d8:ec:ad:8b:01:c1:4e:1b:18:af:
b3:8c:cd:52:08:d1:d0:09:40:dd:7e:0e:13:79:ec:
08:98:2a:41:2d:e3:6f:e7:b3:16:74:ab:bd:bb:a0:
80:4a:41:11:e1:68:59:da:88:7b:1e:3b:91:32:f4:
a4:b2:74:a4:b3:8d:ad:68:b4:8f:75:15:73:14:35:
a6:fe:f8:2b:5e:ae:84:8e:11:a8:de:05:c3:49:7a:
9b:45:70:81:fd:f8:92:86:0f:49:3e:96:90:61:29:
68:ef:33:a2:6d:f1:41:cd:ba:21:a1:b9:a5:5c:7a:
93:a7:43:46:42:6c:96:11:8e:65:b6:94:e2:7c:0b:
8a:21:3f:54:b3:09:87:81:15:98:fb:9b:fa:5e:19:
e9:48:02:87:86:c4:ba:24:9b:c5:4d:dc:03:09:e5:
1a:87:2b:45:80:ce:1f:37:f4:5f:05:f8:7b:44:29:
84:f9:e0:e4:51:57:03:0f:bc:2f:60:29:da:76:72:
5c:d3:34:e1:9e:e1:36:35:f5:77:c7:39:f6:18:de:
e2:f1:7e:de:71:cd:e5:78:df:77:b3:cb:0a:bf:81:
3d:8d:d3:84:ac:a5:e5:44:71:50:d6:00:23:07:0d:
ee:63:d4:9c:56:41:c5:bf:c5:27:33:e7:1c:17:a4:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5E:4B:56:FD:86:65:3A:D3:9A:B5:83:81:93:2D:3E:5E:03:4D:92
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:78:42:c4:39:0c:08:6c:45:94:93:2c:bd:6c:9c:ce:dd:
d6:c3:6a:23:ec:e2:94:2f:45:cd:fd:99:24:86:ec:da:af:94:
73:66:49:b9:c3:1b:02:a2:67:3c:d3:1c:97:ea:de:bc:d8:f6:
fe:6b:9b:b8:59:6e:8e:b8:36:7a:da:0d:c7:27:4b:4f:e1:f3:
5a:bf:77:77:9b:f4:85:87:79:b3:4a:41:b5:eb:a1:fc:65:c6:
07:0f:52:d3:17:59:c4:3c:12:81:93:01:2f:81:04:70:da:a0:
17:64:47:64:6b:b7:ff:94:d9:00:95:f9:a6:8e:ae:1a:59:c9:
3d:2e:e7:b7:06:08:1e:50:5c:93:a9:db:3f:5e:82:d2:8e:e0:
fa:c4:c1:6b:be:66:4a:f6:23:b9:da:01:2c:42:d6:a3:1c:83:
00:7f:1e:58:24:08:58:e6:1f:7a:58:35:02:b8:f9:39:88:32:
66:e3:6f:2f:48:4b:e1:8c:13:9a:4b:0b:9d:47:49:0f:ee:0a:
eb:6d:68:20:06:7b:57:51:fd:68:2b:8a:47:9d:9b:8e:10:f7:
f7:4f:8d:54:58:a7:d5:35:05:97:8b:9c:e5:43:1d:c7:72:d1:
d8:91:56:c9:ff:51:16:73:b9:15:83:1f:13:a9:e6:8f:19:bc:
85:53:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:35 2026 by rpki-client