Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: 1LqotdAqWK7PeAId0M957KMZLWiI16MxbA7LkQ3e1Pk=
Subject key identifier: E4:13:EF:0B:AE:17:55:E9:E2:76:C0:4F:31:39:5E:01:1D:9E:52:27
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019F4BB0553CE09E4B40D9C81DC0E254FA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1655
Signing time: Fri 10 Jul 2026 11:01:15 +0000
Manifest this update: Fri 10 Jul 2026 11:01:15 +0000
Manifest next update: Sat 11 Jul 2026 11:01:15 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 46duhGwteZBM0FRgd2/KirSzE0Y0VJWPU7nPzDvK3q4=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:b0:55:3c:e0:9e:4b:40:d9:c8:1d:c0:e2:54:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jul 10 11:01:15 2026 GMT
Not After : Jul 11 11:01:15 2026 GMT
Subject: CN=e413ef0bae1755e9e276c04f31395e011d9e5227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:26:34:02:bb:9b:57:49:4a:07:bb:13:1d:
d5:f7:c2:09:d4:74:bb:68:98:04:18:cc:00:b5:31:
bf:b9:45:b7:19:f3:8e:d2:0e:19:28:70:04:cc:7b:
5f:03:e7:77:ef:e2:01:52:76:3f:9c:dc:ea:c0:2b:
39:ad:c7:fc:a3:e8:ea:37:f7:53:68:6a:80:9b:27:
68:cb:a6:89:d1:1e:bf:ef:75:57:f0:52:d5:d9:8a:
2c:ad:5b:28:98:e4:5a:5c:7c:df:9a:fc:00:6b:eb:
5b:26:b1:a3:d0:63:3c:aa:e0:21:3a:64:2e:03:00:
56:77:27:c0:2b:0e:96:55:a2:47:61:3c:69:8b:95:
e8:82:c4:87:fd:d7:1b:df:f8:a1:0b:92:22:54:6e:
ab:c8:76:92:d1:b1:d6:a5:b0:24:32:d2:1f:69:a3:
8e:68:3d:19:db:22:c0:ee:08:1f:02:79:3c:8b:08:
2b:93:0e:38:d0:26:a5:a2:df:dd:0a:02:2f:f3:00:
29:7f:2f:75:e7:79:68:db:10:19:ef:41:d7:a9:d4:
f8:3d:49:d5:d0:7b:0c:58:db:33:45:07:1a:3a:00:
f8:4d:9b:fb:de:08:d1:0b:9a:20:3a:f1:93:7e:23:
c9:6a:ab:70:ad:26:23:21:80:e9:d3:29:69:ec:59:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:EF:0B:AE:17:55:E9:E2:76:C0:4F:31:39:5E:01:1D:9E:52:27
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3a:cb:f7:38:fe:13:51:1c:57:38:fc:25:49:06:bf:75:c8:
ae:9e:5b:09:be:77:83:24:29:c5:e2:3d:03:90:4a:a5:8e:01:
d0:e2:35:45:0b:9e:68:ab:f7:e7:f7:96:7b:c7:4f:19:87:08:
84:fb:15:fe:43:56:7e:68:fe:e4:66:5f:ab:14:c4:47:04:08:
0f:e4:da:a2:9b:7b:67:4c:59:a4:c2:40:d8:2f:0e:23:db:ba:
60:51:54:7e:92:58:56:c3:e6:a2:7e:4d:f2:f4:2e:28:8a:9b:
8c:a3:b6:fb:f8:f6:71:fc:4a:91:5a:09:bc:88:c4:49:d1:1d:
82:81:97:6b:70:07:9f:bb:eb:58:e7:49:4e:86:c3:56:af:34:
c8:99:8a:7c:2c:97:14:29:fd:f9:63:99:b6:58:49:0e:79:46:
a4:e0:79:a2:c5:34:29:c8:13:03:13:d3:67:e4:4d:26:4f:63:
8e:80:db:45:44:63:15:48:62:7b:5c:65:34:80:c4:f8:43:62:
2c:0e:1d:8f:ee:3c:17:c3:94:b3:fb:69:02:64:b0:da:9e:20:
f3:14:0f:78:5f:a3:24:2f:c2:d9:8b:39:47:44:8f:2d:39:e5:
37:21:aa:ac:c8:2e:08:f0:81:fb:03:ac:b1:24:c8:1d:75:35:
4a:b2:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:37:19 2026 by rpki-client