Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: pLoL8ED+Kg2N7eBNiMSvSEqOJmcD7epJTK/5PM/aN9w=
Subject key identifier: 60:7E:74:43:21:F4:B8:51:AD:8A:1E:87:EE:0C:EA:57:6E:64:5E:56
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 01A13DEF0BF6BA63D2245C6BCD29354DB3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1662
Signing time: Thu 15 Oct 2026 05:00:38 +0000
Manifest this update: Thu 15 Oct 2026 05:00:38 +0000
Manifest next update: Fri 16 Oct 2026 05:00:38 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: mMQr0vkV5FX4fSAzP0WSEzkgt6v2ZKRkZbB/lfOI0WM=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:0b:f6:ba:63:d2:24:5c:6b:cd:29:35:4d:b3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Oct 15 05:00:38 2026 GMT
Not After : Oct 16 05:00:38 2026 GMT
Subject: CN=607e744321f4b851ad8a1e87ee0cea576e645e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:b6:68:8a:f4:58:ed:69:f2:e4:db:f5:3f:
b9:89:ff:57:9c:ed:59:55:88:b0:d0:98:a8:00:2b:
4b:1c:3b:66:71:28:9a:8a:5a:7b:e6:54:92:85:fb:
43:73:48:d5:27:eb:a6:f4:6c:26:0d:63:a4:5a:10:
e1:c2:2f:e9:cb:6c:f9:46:01:6b:99:c6:47:1a:e3:
2e:db:46:e1:e2:0a:41:4b:3c:35:d6:a7:d8:70:cc:
df:d3:5d:f9:c8:27:bc:2f:e7:85:4c:67:8b:0a:1c:
63:66:a5:c4:9b:6f:8d:99:50:8c:7a:f0:55:f2:82:
a4:7d:b9:83:69:ff:f9:c3:08:01:db:4f:6a:97:60:
e7:bf:b1:0a:ae:27:1f:8d:70:37:4d:95:5c:cb:0f:
66:71:58:1c:d7:77:61:c5:b3:3a:d7:91:75:b8:8c:
bf:5a:49:67:1b:b3:b8:cc:70:4a:72:47:5b:01:06:
3e:f6:33:c3:ec:9a:93:f0:b9:c8:14:7a:59:36:2d:
4b:7b:09:33:35:75:59:d1:d2:4b:39:17:9a:25:2e:
c9:d2:a3:f0:8f:c4:d4:f2:40:8d:9b:9e:fb:73:aa:
de:09:04:23:96:db:62:eb:00:9e:1a:89:c3:10:d2:
d5:ce:fd:df:01:6b:30:40:17:bf:d9:db:58:43:bd:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:74:43:21:F4:B8:51:AD:8A:1E:87:EE:0C:EA:57:6E:64:5E:56
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b3:a3:a2:58:bc:4f:99:7e:3d:c6:16:27:0e:0f:81:8b:44:
b0:08:48:77:82:2c:35:55:97:4e:eb:97:25:42:4e:41:00:40:
c4:79:58:c0:a5:1c:ae:6a:a6:c2:f5:dd:3e:fd:dd:70:c0:00:
05:ca:67:52:41:06:c8:5d:f9:c8:59:7a:fd:1b:01:9c:32:59:
dc:a5:76:5c:d4:23:e5:5c:c1:a1:0a:c1:12:7e:07:68:5b:94:
68:4e:9f:ee:3b:57:0e:0c:02:d8:d1:c9:0d:16:63:c3:31:f9:
fc:2a:97:07:23:81:c3:b2:0e:9d:82:45:b9:09:b5:0e:ef:20:
e6:7c:50:55:6c:86:2d:29:c8:c7:c0:18:c1:78:e6:61:55:91:
10:8e:05:ad:01:8a:99:7f:83:42:0b:7c:06:12:b5:a7:6d:49:
de:f2:4a:3f:be:8c:68:96:d4:0a:0e:b6:4a:f7:23:f9:74:8b:
d2:46:c8:27:41:74:fe:8a:d3:05:0e:41:0f:d7:7e:6a:6f:7c:
95:16:52:83:07:88:ed:4b:e2:b4:1c:b5:2f:51:5e:1d:cf:c8:
25:ce:21:a1:82:77:14:9d:93:d0:a3:78:6f:f6:d8:0b:fd:a3:
7a:f1:30:69:e3:fb:c4:46:50:09:4b:4d:7a:1d:32:00:0a:df:
a7:e3:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:28:48 2026 by rpki-client