Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json)
Hash identifier: BImJXZr8DcB7OcV3KfmvDgcXap4VYL6TzoNrtOdLnXw=
Subject key identifier: B2:B8:26:07:7E:0A:35:08:E8:B0:E9:2D:69:F8:4D:49:2B:8A:89:55
Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53
Certificate serial: 019D985069E59B951B5DDCEA99E39C88CB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
Manifest number: 0FA5
Signing time: Thu 16 Apr 2026 22:01:39 +0000
Manifest this update: Thu 16 Apr 2026 22:01:39 +0000
Manifest next update: Fri 17 Apr 2026 22:01:39 +0000
Files and hashes: 1: 8pNTjqniMFk_l88aCl3q4gxjvCw.roa (hash: NhOt3V4pCHJS3ioRSgsTAxEcfjN40UAKQmrhzy1cBHI=)
2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: dUtRhCBfBp5HoTTJYHydvbgR62vkYSowNGqe16ZWvVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:69:e5:9b:95:1b:5d:dc:ea:99:e3:9c:88:cb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53
Validity
Not Before: Apr 16 22:01:39 2026 GMT
Not After : Apr 17 22:01:39 2026 GMT
Subject: CN=b2b826077e0a3508e8b0e92d69f84d492b8a8955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:56:3e:5c:52:ae:30:0a:f9:a6:fb:bb:a3:
66:09:63:c5:10:1a:9a:fd:d4:09:3d:e7:cc:6c:5d:
30:1a:60:aa:85:4a:4b:0b:ae:0e:2c:68:cf:3c:03:
a7:69:79:71:e4:1d:37:22:d2:a9:4c:cb:b5:78:84:
7d:4e:ee:92:43:e9:5c:6b:83:20:79:7e:e1:1d:ad:
73:36:39:96:bc:57:c0:5d:5f:b2:b2:80:f6:03:43:
7f:4d:9d:5b:46:01:cb:3e:0a:7a:93:e9:95:d0:f6:
4e:ba:d3:75:de:17:70:ce:f5:c2:11:4a:2e:4c:6d:
99:a1:b7:75:75:c1:3c:27:f1:04:8f:46:05:9b:f9:
52:42:89:2d:c6:49:30:b0:b5:32:22:38:e5:eb:18:
04:21:3f:7c:eb:ac:0f:45:3d:8c:14:30:a7:8b:c0:
95:22:88:48:fe:ab:72:3b:16:3c:7b:be:9d:66:18:
d9:16:98:9d:fe:84:ab:5e:83:42:b1:34:c5:c5:83:
1e:41:ff:c1:2c:76:6e:d0:da:e0:e9:36:97:4c:30:
f7:cc:07:c1:5e:a0:6b:1f:f8:f8:d4:70:35:40:f8:
37:fb:58:79:1d:cb:2e:a9:6a:28:f8:a3:ea:42:96:
3e:01:ae:86:1f:53:02:da:c2:4f:af:e9:75:46:a3:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:26:07:7E:0A:35:08:E8:B0:E9:2D:69:F8:4D:49:2B:8A:89:55
X509v3 Authority Key Identifier:
keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dc:ba:19:39:ea:a5:2b:e5:25:79:c9:83:b3:69:0a:e0:97:
5f:e8:c5:62:f4:0e:a5:2b:01:95:0c:41:dc:3c:e3:b6:17:be:
a8:67:4a:ab:31:cc:af:e7:e4:21:3a:2d:7f:7d:2f:bc:77:c1:
0b:53:7b:9e:52:d0:b3:0d:0d:70:91:17:00:3a:71:90:2d:08:
b4:c2:a4:ee:3e:fe:a0:ff:23:0b:1f:ca:7b:b1:46:f5:81:6f:
64:ff:66:77:6b:d3:8a:07:09:ee:64:1a:87:7e:68:c5:ca:a2:
31:5a:14:4e:0f:0a:6a:6c:65:fe:60:e5:9b:0a:f5:d0:53:9e:
40:33:2d:7e:be:06:92:36:33:3c:18:6d:01:80:cd:20:ca:1e:
e9:b0:b5:e3:eb:07:d2:2e:55:11:50:1e:c6:c9:8d:fd:3c:3f:
00:c3:35:3a:6a:ba:5d:43:26:fc:3d:22:52:23:ce:90:00:96:
de:28:78:fd:0a:4d:b4:5b:27:fd:e7:4f:81:cd:b0:48:a7:7f:
ad:ec:85:cf:0c:3e:18:6e:f0:1f:31:1a:9e:13:88:4c:87:e5:
60:51:b8:20:9f:5a:c0:d4:47:49:7c:e8:9b:73:f1:88:84:38:
ec:e1:35:8a:c6:ae:c3:df:45:81:e8:02:52:f0:25:2e:32:8a:
86:d9:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:12:47 2026 by rpki-client