Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: iBEhBQXVXMOb8NWwKLGHDDDgeH56n1hx2P2Ol4Lv8xY=
Subject key identifier: CE:61:83:9D:43:1D:76:42:A1:1D:11:04:B8:BC:C6:86:12:DF:32:5B
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019F1979FDE151FDC3346BA1514268BA66E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1546
Signing time: Tue 30 Jun 2026 17:00:52 +0000
Manifest this update: Tue 30 Jun 2026 17:00:52 +0000
Manifest next update: Wed 01 Jul 2026 17:00:52 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: 9UZIznFsU//CyRS4uhoDfGgXWIX0A/2/YKfwUjBAnqo=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:79:fd:e1:51:fd:c3:34:6b:a1:51:42:68:ba:66:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jun 30 17:00:52 2026 GMT
Not After : Jul 1 17:00:52 2026 GMT
Subject: CN=ce61839d431d7642a11d1104b8bcc68612df325b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:33:97:4f:62:5e:6f:af:09:ff:65:c9:bd:
6e:aa:28:15:0a:c8:25:ed:2a:52:59:88:13:7e:30:
13:ba:37:6a:d9:d5:f8:15:f3:1f:8b:a6:3f:09:01:
33:b8:ff:b4:39:f2:3d:35:fe:27:be:f4:fc:33:69:
b8:64:6c:a2:14:99:32:ff:50:f7:9b:c8:84:b6:49:
28:87:02:ac:db:8a:c1:ef:19:d9:de:b3:1b:79:d8:
ff:4b:de:52:9a:02:44:0c:82:cf:bf:aa:69:28:fa:
38:3b:e3:6e:15:34:eb:88:2c:af:2a:cc:c3:c3:0e:
c2:e7:68:03:44:fd:61:e1:3c:68:fc:76:47:b2:27:
5a:e4:a0:4b:61:fe:a5:7f:12:b3:76:ab:c1:54:f1:
e2:61:c7:49:ed:48:51:53:8b:e0:49:37:2c:0f:26:
de:58:f2:f2:ed:c4:8c:6f:87:2d:46:23:e6:a6:0a:
7b:7e:8d:74:3d:1c:32:b2:13:73:c0:0f:9a:95:fa:
02:b7:c6:5d:f6:c8:5f:8f:87:3c:c4:e3:be:c8:94:
97:e0:c1:94:f5:5b:fc:12:32:00:42:33:23:f3:6c:
18:e6:cf:64:14:91:14:8f:21:84:62:09:e6:20:44:
1a:1b:94:56:f4:32:f2:0f:27:ad:26:db:71:29:83:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:61:83:9D:43:1D:76:42:A1:1D:11:04:B8:BC:C6:86:12:DF:32:5B
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:b8:36:08:89:d7:1a:d5:87:51:d7:87:99:a0:39:2b:b5:
32:fe:98:a8:eb:f8:e3:03:b4:31:14:64:6f:80:11:4a:ce:be:
d7:c3:3e:c8:dc:5f:15:4d:55:da:6f:7d:60:d9:f0:51:7f:27:
b9:a3:01:f1:c3:66:21:08:af:b7:5a:d3:4f:52:ff:11:c0:dc:
58:b5:43:7f:0f:86:47:c3:22:51:12:f8:f6:5b:8a:09:a3:f9:
7f:69:a5:17:c1:27:e2:2e:73:9c:a0:3a:8f:95:3e:4a:d6:70:
ee:4d:ae:9c:e9:53:34:dc:1c:05:55:b7:1d:6f:f8:ef:73:65:
13:1f:de:ae:99:5d:32:48:37:83:24:7c:3a:3f:f2:86:2c:21:
a2:2f:f0:14:63:be:f8:de:cd:66:d2:1b:fb:e2:d7:6b:e2:ed:
17:5f:14:99:eb:86:41:17:31:e6:7a:4f:bc:b8:b7:59:19:62:
0b:6e:93:e9:00:6c:27:95:88:3e:9f:12:8e:b5:dc:67:ab:ec:
cb:cc:0a:fb:f9:cd:ef:67:77:c1:e6:80:6d:bb:ea:08:cf:40:
d8:c2:7e:c6:25:19:47:7b:8f:7d:1b:84:e1:cd:d6:42:27:0e:
38:49:cd:cb:c3:ac:fc:76:37:3b:a6:4d:b4:c3:b7:f8:84:ee:
1b:d8:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:10 2026 by rpki-client