Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: LfpSxhGchNwHP1Kd3Wvy3JT99NK8JUR8kr2zNZbHxtI=
Subject key identifier: 86:D2:75:C6:33:C4:BB:36:8C:93:1B:9F:B6:20:C3:7B:B9:20:8F:0D
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019D389C1CC73860F54D87393E6C68B5E150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 144D
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: EVgwX6baS9cIyBVOPO8fEmKrfjC06Izv9iDprb7P+NU=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1c:c7:38:60:f5:4d:87:39:3e:6c:68:b5:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=86d275c633c4bb368c931b9fb620c37bb9208f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:cb:6d:ca:54:2c:29:b9:1e:e6:06:cd:e6:
fc:dc:d6:6d:60:b9:5a:ed:f6:45:77:a3:16:f9:60:
79:8f:52:c5:53:2b:8f:83:64:f1:c5:5f:8f:f0:57:
8c:e1:bd:88:58:84:8b:b4:fd:24:85:6e:26:59:f4:
f0:57:7b:5f:ab:5f:91:62:51:aa:ca:46:24:48:44:
24:0e:7d:a0:79:b4:c5:b9:28:13:f7:41:d7:85:ed:
59:df:f6:69:ca:e9:12:a5:70:a7:c1:63:ed:ed:f9:
55:2e:28:4c:36:c7:22:b9:de:32:df:ce:bd:b2:80:
9a:52:ad:50:4b:75:8d:82:d7:db:db:6d:ff:be:f2:
c1:7b:24:b6:45:20:c0:5e:21:d3:f2:f8:f8:60:c4:
df:ce:cf:64:b0:0f:82:eb:bd:aa:72:41:0b:c2:52:
07:69:67:56:e4:c1:e5:68:a4:4d:a7:22:47:f6:f9:
ce:09:c0:ee:c2:32:3d:26:3d:8d:7c:82:00:24:6c:
19:28:76:12:69:4b:8e:3f:49:eb:54:52:bf:54:8b:
77:d5:62:78:11:16:68:4a:66:ad:66:89:1e:6f:9b:
b5:fe:94:cd:39:ae:d7:6a:8e:58:44:d3:8c:d0:99:
38:64:9f:40:6e:6c:db:0f:2a:fb:03:5f:1e:35:13:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:75:C6:33:C4:BB:36:8C:93:1B:9F:B6:20:C3:7B:B9:20:8F:0D
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:3a:1b:93:79:87:df:e4:54:1c:72:26:21:8c:fe:37:a4:
24:3e:9d:bb:7a:89:ef:eb:00:72:fb:82:f3:81:e7:6b:80:82:
a0:b9:42:33:83:cb:87:e7:50:63:e4:fb:c9:db:67:43:5a:4c:
97:6a:b0:eb:70:e0:e1:f1:50:ef:b9:5f:58:0e:3b:f1:34:91:
9b:0e:0a:a0:46:b9:7a:ea:0f:9d:02:b0:2b:20:b1:94:76:55:
d9:41:72:fa:7f:22:24:2c:59:6a:69:6e:27:8a:da:5f:68:8c:
bc:e5:f4:7d:50:00:91:18:b2:48:7c:67:7c:25:b2:be:97:71:
9d:1a:f0:78:6d:7b:10:65:e2:99:f0:eb:90:c7:f8:e9:7c:98:
5e:86:6b:1d:67:6b:92:41:48:9c:d1:4a:f3:be:f8:bf:3f:24:
a0:90:0f:f5:92:0c:d0:d2:85:1b:dd:07:b6:4a:26:c2:77:27:
f8:1f:f4:00:95:7d:9b:a0:1b:18:fc:8f:13:46:22:36:48:ed:
4b:6a:76:d7:ab:e0:49:9f:86:85:cd:8c:9a:e5:90:4c:f7:71:
f7:6f:4f:98:10:c3:0b:ad:61:36:77:a0:ec:ba:25:79:a9:32:
2a:47:27:d6:cc:85:f6:5e:6a:33:4c:9b:a7:a4:9e:91:4d:9d:
11:23:c2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:04 2026 by rpki-client