Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: Q/IFqETQZDKRHFuWkzmIMH9WVT9rSP75XYL6hxnbFDI=
Subject key identifier: F1:56:8B:F8:6C:09:33:63:C4:4F:C3:6A:3A:4D:C6:2F:4A:9A:C2:9B
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019D34BEF1816C3E2CFC1C113F5C16A523D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1540
Signing time: Sat 28 Mar 2026 14:00:22 +0000
Manifest this update: Sat 28 Mar 2026 14:00:22 +0000
Manifest next update: Sun 29 Mar 2026 14:00:22 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: LVYbLy+ZaHAH4vBb0WhaRma+miu/6ArKM9/OMYWr0ag=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:be:f1:81:6c:3e:2c:fc:1c:11:3f:5c:16:a5:23:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Mar 28 14:00:22 2026 GMT
Not After : Mar 29 14:00:22 2026 GMT
Subject: CN=f1568bf86c093363c44fc36a3a4dc62f4a9ac29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:20:e3:8c:de:f8:ff:40:8d:be:49:9b:7d:c5:
9d:f4:60:95:57:70:12:bd:54:c3:cd:f8:a5:0e:ed:
fe:0b:32:81:a5:db:97:5a:c9:b7:a3:c6:21:14:22:
61:07:48:0c:0b:1e:67:7d:7d:23:35:8a:1e:1e:a5:
02:1f:d6:89:16:14:6d:2c:bc:98:dd:88:d9:35:97:
1a:a1:bf:57:cf:d3:5c:e2:32:1f:7f:9e:33:eb:1c:
5d:9e:33:cf:bb:44:52:ef:4c:dc:94:7d:97:c3:9e:
8e:ef:82:42:d2:c6:6d:64:23:67:05:c0:c6:43:1f:
20:99:00:67:bc:d3:4f:76:35:56:ad:ee:a5:9b:3c:
9b:bb:72:b6:35:74:45:af:19:b9:e8:aa:79:2b:02:
2f:55:3a:29:1d:89:d5:ca:aa:48:95:c8:d5:0c:7b:
d6:8b:00:96:43:94:d8:37:7c:a7:f8:4d:de:ef:61:
d3:22:38:b7:a7:10:88:dc:06:79:56:eb:bb:4e:ae:
49:b5:ae:28:7f:7d:56:9d:d9:6e:12:23:a0:bd:c7:
07:07:9d:a6:3c:cf:0b:bb:83:d9:2a:d6:25:7c:f4:
4d:68:fe:a3:d0:7e:b7:72:27:69:2c:1e:df:3f:52:
08:13:20:92:8e:06:72:fc:e6:f9:b7:10:3c:13:30:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:8B:F8:6C:09:33:63:C4:4F:C3:6A:3A:4D:C6:2F:4A:9A:C2:9B
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:a2:ef:2a:71:00:3a:cb:38:91:9d:b6:3c:5d:66:d2:5c:
46:c0:02:b4:27:ed:40:2e:6b:c0:13:ff:cc:eb:ce:68:9d:ea:
04:1d:ed:ba:f3:ed:bd:df:be:d5:75:0a:4c:a8:1d:5c:5a:45:
e9:48:cd:f2:56:a9:a7:28:c4:e1:d0:89:fe:d9:28:be:5b:09:
17:e1:cd:e6:40:a7:57:f9:b3:78:63:fc:81:42:55:98:9a:61:
0c:e5:c8:85:e2:1b:6e:6c:df:e3:7b:32:a9:b3:32:0e:d0:15:
ea:17:4d:5b:4b:fb:c1:9d:e7:ea:61:c4:80:f5:9c:14:df:97:
43:b1:d2:d0:0b:73:c8:23:26:a8:5f:e3:9b:44:58:b6:74:ad:
cf:ac:86:d2:09:7b:e3:9c:77:90:3c:54:5d:77:50:9b:ed:31:
bb:8d:27:7a:2f:9a:f2:1c:fc:f6:b8:37:75:d3:3a:09:47:0a:
f5:96:d9:91:1c:19:af:4d:47:ad:ba:65:90:45:b1:97:f5:4c:
06:bd:c6:ed:27:cb:55:0e:eb:9f:6a:99:82:08:3c:3e:43:c9:
c3:43:ac:aa:c8:a6:81:75:a9:ec:be:e7:9f:43:bd:10:a2:5d:
72:cf:09:c1:6c:59:4f:f7:38:3a:21:b9:00:1e:d5:85:91:21:
85:da:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 16:47:48 2026 by rpki-client