Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier: ew4QWIsbGEVQrGiOt1MOmGlQkkUdj3Qkm43kwq/TZcE=
Subject key identifier: 20:FE:E1:76:D7:94:6A:9A:A4:AC:8A:E5:66:52:3A:06:92:6F:87:22
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 01A16F126F80E0E7C14CE85CA3CF7E949D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number: 0D5F
Signing time: Sat 24 Oct 2026 18:00:41 +0000
Manifest this update: Sat 24 Oct 2026 18:00:41 +0000
Manifest next update: Sun 25 Oct 2026 18:00:41 +0000
Files and hashes: 1: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (hash: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=)
2: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: uuiEDugw931FUgfp4M9YeP0aRAMAncJQ3bv0Abdcmwo=)
3: yzlJwvPmp_FWuAYFJVX7D34LL5o.roa (hash: oyzk/Lk1+iN0NJFMafNwk7yqhxfs0bRUTnktsAxu4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 15:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:12:6f:80:e0:e7:c1:4c:e8:5c:a3:cf:7e:94:9d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Oct 24 18:00:41 2026 GMT
Not After : Oct 25 18:00:41 2026 GMT
Subject: CN=20fee176d7946a9aa4ac8ae566523a06926f8722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:c5:9f:bb:26:9c:52:6c:9a:6a:26:31:85:
70:92:f1:e0:04:09:60:78:a5:b7:66:31:16:1a:dd:
c0:e2:d9:f6:26:e7:40:94:1f:f7:b9:b4:03:e3:6c:
dd:25:17:6c:da:8f:30:e6:90:fd:23:37:1f:66:75:
f9:41:75:f5:2c:7a:60:cf:02:09:58:05:3a:73:34:
5b:df:f1:ef:57:ce:e9:5c:a1:37:d1:b2:35:ba:67:
2a:8c:58:02:fa:ba:d1:7b:9d:d0:26:ec:51:cc:64:
c6:8c:56:8e:15:d0:b1:96:90:44:b0:77:62:42:6c:
c5:fb:48:4c:1c:f2:d9:16:36:da:e2:ee:b6:7a:b5:
7b:01:bf:4e:9c:cd:21:87:7e:13:bc:eb:4e:73:e9:
0b:49:28:9a:4c:52:ca:46:47:8b:e5:ce:80:15:72:
28:20:88:75:d9:ef:e6:61:d4:bd:f4:3a:17:be:5b:
40:82:44:31:ab:bf:47:34:77:b4:c4:c0:ff:49:d5:
90:bd:93:ff:bc:a9:f4:0c:cb:f7:c4:02:f4:08:b6:
bb:9d:f9:09:12:1c:84:41:71:a5:d8:05:43:79:6b:
e7:bc:5d:cf:69:00:ec:f3:67:38:b6:9e:4d:74:24:
38:e2:61:ff:ab:09:2f:54:04:9b:f9:65:86:17:e4:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FE:E1:76:D7:94:6A:9A:A4:AC:8A:E5:66:52:3A:06:92:6F:87:22
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1c:ee:6c:bf:17:83:fd:71:2b:15:71:c8:7b:9f:96:b9:66:
71:63:72:cf:30:25:a5:23:e9:9e:f0:9e:28:a0:b3:6a:32:0c:
d7:d5:92:aa:02:dc:d9:4d:83:e3:e2:8b:01:bd:cc:17:b2:d9:
75:60:59:a3:90:c6:2b:a6:ea:3c:5b:ca:08:f2:be:66:cd:bd:
d6:d8:26:d6:8c:77:75:63:91:4f:ed:cb:1c:51:de:2e:13:a8:
31:71:a6:1a:26:62:78:95:1a:cd:24:31:35:80:8f:05:90:85:
a2:fe:1a:f3:c4:71:ea:92:e0:9d:a0:e6:69:4a:84:ae:f0:bf:
3d:2a:91:13:49:25:f1:75:13:1f:f7:d2:eb:97:0e:a0:1e:f6:
e6:1d:2f:24:cd:01:b5:98:12:da:6e:27:7f:60:73:30:bc:25:
c9:d8:45:fb:03:ce:3d:14:02:36:31:f0:a8:00:3e:d5:ec:c3:
88:f9:4a:71:62:6b:cd:be:51:39:4a:9c:ba:e8:23:db:8c:19:
63:16:22:7d:13:4b:01:f4:4a:e6:ee:0f:01:f1:6c:98:ef:e2:
1c:d9:a8:78:ef:42:74:7d:b3:7f:78:86:60:43:93:5b:7b:c2:
14:97:0a:14:74:5a:a7:6e:b1:fb:7d:b3:87:28:9d:20:20:31:
a7:e5:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:18:49 2026 by rpki-client