Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: 6/PWq+YhUDR27XytNK7o5AYiQE2iYlTW8OZNDlkCFcc=
Subject key identifier: BD:88:BD:AB:3B:E0:F9:B9:76:89:92:76:E2:0D:5F:08:2D:B1:D9:0D
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 01A03D160F05B20993BF84F3CA1568EB92B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 16D2
Signing time: Wed 26 Aug 2026 08:00:50 +0000
Manifest this update: Wed 26 Aug 2026 08:00:50 +0000
Manifest next update: Thu 27 Aug 2026 08:00:50 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: HFCVKYH7pWMAwYeK+0zZUlapfjmo3CnmPsYgtTB10UU=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:16:0f:05:b2:09:93:bf:84:f3:ca:15:68:eb:92:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Aug 26 08:00:50 2026 GMT
Not After : Aug 27 08:00:50 2026 GMT
Subject: CN=bd88bdab3be0f9b976899276e20d5f082db1d90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:ee:98:9c:07:38:2c:a9:af:79:58:0b:28:
74:38:35:55:0d:fc:53:84:8f:2b:bd:23:80:29:c6:
6d:f1:53:e2:24:96:bb:a2:31:4e:58:d0:27:d0:28:
1e:fe:89:12:8f:ce:25:f1:57:51:9e:5d:a2:27:07:
08:92:5b:8b:07:a2:8e:5f:da:a8:06:9a:7e:79:db:
c5:ac:c0:e7:49:71:f6:6a:c1:b3:41:28:6b:d2:0b:
26:ec:6b:d5:a2:a3:50:13:32:c4:18:2c:b7:02:d6:
ae:1f:0b:34:95:fa:57:9e:5a:09:d5:05:37:4c:5d:
14:f3:b5:d7:1b:ff:3f:d1:93:a8:28:0e:f6:3a:5c:
0e:10:b8:94:25:9e:a1:5a:4a:24:f1:ba:00:03:8d:
ec:88:7b:76:97:d2:9c:32:35:66:84:d9:45:9f:22:
fe:d2:0e:96:a9:c3:98:9b:a3:e8:55:cd:33:b5:12:
14:f3:fc:c3:a2:9a:f5:4e:a5:06:4d:1a:a2:9c:15:
c9:ff:cd:05:ff:a1:25:fe:59:aa:18:d7:36:39:ac:
1c:00:9d:12:52:9c:b1:01:68:50:35:ac:4f:1d:90:
bf:d7:71:b6:47:9b:1f:d4:0c:12:e0:a7:35:90:40:
98:c4:f4:d3:fa:b0:92:5e:3c:51:f9:f1:21:e6:36:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:BD:AB:3B:E0:F9:B9:76:89:92:76:E2:0D:5F:08:2D:B1:D9:0D
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:86:6f:e5:5d:f0:a8:55:5b:12:f7:11:ae:91:42:a8:15:5a:
5c:10:97:de:66:6e:26:cd:48:34:ce:a8:db:e4:de:99:3a:6d:
45:b1:69:0c:dd:d1:7a:54:d0:ff:e4:2f:98:e0:5c:a0:ae:c8:
52:c9:ea:bd:51:6c:df:ad:97:39:a1:38:f3:7b:01:9b:6a:be:
28:21:28:aa:65:37:40:c4:50:86:66:de:91:df:19:a6:11:a3:
9b:a9:93:0f:a7:63:24:39:47:d3:2b:b2:0f:49:7e:4a:62:61:
67:35:cf:8b:80:fe:6d:99:eb:8a:66:55:a1:03:ab:38:c4:82:
a4:99:40:5d:83:b0:96:fb:f5:ec:c3:28:ea:ef:c4:e7:7b:f8:
29:00:82:b2:0e:a5:8c:45:1a:0c:7e:9c:15:58:b5:3b:83:0b:
ec:f7:fd:a5:ca:62:09:51:9d:9a:48:58:62:11:bf:bd:a2:60:
77:1b:b4:44:80:14:e8:6b:43:0a:b1:ab:ab:ed:25:f5:99:a0:
57:46:0b:ce:53:df:c2:f5:cb:cc:18:8c:f3:15:19:f0:8d:d6:
81:f9:a4:74:30:c1:b0:de:0c:f0:db:c3:3e:1a:87:8d:5f:4a:
2d:c3:29:10:6a:5e:62:e2:87:3c:72:32:36:67:05:30:23:44:
96:5e:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:06:52 2026 by rpki-client