Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier: oWAqdUC2k/emJkVGqUOLiBRVLpmUs6n/AX/L7cjpq4M=
Subject key identifier: 03:9A:7A:7E:CE:A0:32:56:62:8F:56:9B:AB:C7:04:CA:6A:08:83:3E
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial: 01A1630E9088594BF6F97990C688051CD430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number: 1AB9
Signing time: Thu 22 Oct 2026 10:01:01 +0000
Manifest this update: Thu 22 Oct 2026 10:01:01 +0000
Manifest next update: Fri 23 Oct 2026 10:01:01 +0000
Files and hashes: 1: 1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa (hash: Xb0xuBfRe7FwO8H+eAMIQNLLlYRIEueyRhLbYCR1L9E=)
2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: oKF5jwxOj/OmhL8nooDRAtdC5l4zf/n3LQw4ls210N8=)
3: WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa (hash: W4V4VKeFsQZDXA2GLDkXPjJ+JE3asR1EB7QgnFmVGmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:0e:90:88:59:4b:f6:f9:79:90:c6:88:05:1c:d4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Validity
Not Before: Oct 22 10:01:01 2026 GMT
Not After : Oct 23 10:01:01 2026 GMT
Subject: CN=039a7a7ecea03256628f569babc704ca6a08833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:82:b9:63:48:e9:11:14:6b:83:ba:a1:d4:
1b:1c:cf:94:c1:b5:01:fb:e3:4a:d1:07:f1:e3:e5:
2f:dc:73:c1:26:60:70:77:57:6e:4e:c8:44:f4:37:
03:bf:31:ea:21:e1:9c:af:7e:e1:65:39:12:81:3a:
dc:4f:bd:dc:3b:12:bf:23:8e:51:3d:a9:53:7f:c6:
4d:db:69:cb:69:bd:a7:81:05:3f:9d:cc:a0:59:39:
63:b1:62:61:5d:d6:3f:7c:ae:c3:9c:57:af:22:df:
27:37:d9:1d:bf:9d:40:da:ec:9c:28:c7:e3:3a:fd:
99:a0:d7:c3:2f:6c:e3:6e:23:da:7a:ed:30:1b:18:
50:92:ec:30:35:d3:4c:a6:3d:c0:ea:e9:61:09:43:
79:17:be:e2:1b:41:ab:43:cb:ae:ca:b8:d5:7e:71:
f8:a4:e7:7d:71:51:48:66:61:28:b3:5e:b9:6c:f1:
ac:76:c5:23:97:5c:14:7d:6c:45:bd:b0:ec:30:20:
a8:fe:72:73:dd:a1:e6:1c:ad:32:0b:95:ae:a4:03:
f3:c0:26:f8:41:50:73:a6:13:5c:24:dd:37:49:b4:
e3:bd:75:d4:df:e4:ba:07:66:44:3e:78:2b:58:95:
2a:60:e2:d7:f6:d4:1f:46:7a:2b:6c:31:00:77:d0:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:7A:7E:CE:A0:32:56:62:8F:56:9B:AB:C7:04:CA:6A:08:83:3E
X509v3 Authority Key Identifier:
keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a3:97:bf:42:91:9d:d6:c0:fd:cb:40:ca:9c:fc:b1:24:41:
a4:5e:ba:dc:68:6a:d4:7c:02:7b:b5:fc:0f:56:ff:60:2d:1f:
d7:03:6f:a3:f0:b1:c9:1a:9e:c8:54:f4:cc:81:9f:4b:d5:a8:
f1:b8:c2:0a:c2:73:71:05:fc:fc:53:2d:42:0d:1f:82:e6:06:
84:08:c8:45:6e:86:14:23:cd:67:39:34:0c:72:d6:36:63:fd:
bf:c1:06:b3:86:42:f2:69:fd:fb:55:57:a6:ae:a4:55:3f:d1:
3d:b5:4b:68:a1:d6:46:e4:ac:f1:98:a7:82:17:ae:ec:62:a4:
f1:20:ad:8e:f5:d7:c4:6b:42:05:d4:ec:48:95:e7:59:3e:6d:
d5:76:27:6f:0f:4d:b5:5c:95:41:c3:4d:5d:ca:90:92:fc:5e:
dc:c8:e5:ba:52:c6:0b:16:e1:cd:a7:43:68:8e:1b:4e:09:d9:
78:d6:00:48:8e:6a:b2:c0:1b:1b:4e:c0:81:ba:ec:5f:c5:25:
fc:80:43:65:92:a3:8f:ac:eb:38:98:3b:ac:48:b9:1d:4c:19:
5f:6f:88:c8:f9:c9:43:96:ca:7d:85:e8:6f:ef:73:03:54:da:
0f:60:71:15:ef:d7:a8:a6:31:56:22:9c:be:a7:57:b4:0a:b0:
6d:f6:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:20:37 2026 by rpki-client