Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: L0fRymO5xav7avQlStxsexLxsWFxldTaCufOUpn3QH8=
Subject key identifier: 39:EA:57:AD:7A:44:1A:FB:8A:3C:FA:10:C5:CD:2A:C6:D0:C2:A2:86
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019D394102BAD64F264057A7CD6CA9775CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 1288
Signing time: Sun 29 Mar 2026 11:00:54 +0000
Manifest this update: Sun 29 Mar 2026 11:00:54 +0000
Manifest next update: Mon 30 Mar 2026 11:00:54 +0000
Files and hashes: 1: 6i6ktqVxfMyBeyrlkS73upvx9Ho.roa (hash: BlC62l60c6T9hNk8muoKRRCAtq61HWPcoGQIb8d33sU=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: YnCbrbkzvQZFt++qFR4zKQCvHUlYImWydXyyGluCGXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:02:ba:d6:4f:26:40:57:a7:cd:6c:a9:77:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Mar 29 11:00:54 2026 GMT
Not After : Mar 30 11:00:54 2026 GMT
Subject: CN=39ea57ad7a441afb8a3cfa10c5cd2ac6d0c2a286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:d2:4b:f1:a2:d7:8a:0b:52:ba:e9:f0:ef:
dc:4c:e1:70:6d:3a:f8:b7:fe:3c:61:62:d1:cc:fa:
f9:51:dc:93:20:40:54:8d:f2:54:6e:3b:90:c1:fb:
89:ab:53:15:02:1a:5e:93:dd:87:39:2b:03:e2:69:
fe:83:95:0d:a6:13:24:8d:59:5a:e3:f9:32:f2:9d:
53:07:ed:65:73:c1:7e:5e:19:b0:80:0e:de:ea:51:
b3:0d:dd:c3:01:f9:9c:ea:14:28:6f:50:35:85:fb:
56:59:07:e2:f9:69:20:ff:ef:63:d8:de:8f:1d:4e:
5d:44:94:38:11:3c:7c:ae:b9:f1:56:da:e0:85:a8:
00:8d:7f:9b:75:45:e3:b5:5c:72:55:88:04:81:26:
18:1e:e9:1b:bb:0f:71:70:a1:e2:a8:9f:73:64:a3:
23:b4:41:9b:09:2b:71:56:c6:ca:90:88:a8:78:84:
c5:a7:a8:cf:67:5a:ec:93:2c:85:b1:bc:1b:4c:93:
15:bb:ed:c0:be:ad:13:a3:b1:3d:97:15:f6:2d:db:
54:8d:2b:94:34:32:df:da:94:d2:1a:fb:cb:62:9c:
0f:bd:c0:2a:5d:09:2e:b3:1a:58:de:0c:21:79:87:
79:5b:2c:86:02:2b:f5:88:73:ec:88:91:b7:56:a8:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EA:57:AD:7A:44:1A:FB:8A:3C:FA:10:C5:CD:2A:C6:D0:C2:A2:86
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:ae:51:c3:d1:90:51:45:36:d1:04:35:68:ec:7a:b0:dc:
bd:50:48:8c:9b:84:44:27:99:d5:64:26:cf:30:19:ca:70:86:
2b:f7:4a:4e:82:50:21:32:d0:a9:57:42:f2:1f:b3:f7:e4:25:
e0:1b:5d:f5:85:7e:48:d7:14:44:73:29:86:b1:63:a5:4d:60:
1f:f9:db:3b:2b:ea:aa:16:ba:30:b2:fa:5a:ee:88:17:1f:b3:
69:e6:64:0b:da:57:f2:eb:c9:b0:c4:be:f9:1c:21:f0:a9:0b:
23:1d:cb:0d:f4:3c:9f:de:12:0b:4a:a8:b2:ac:76:5d:da:23:
30:c5:af:56:ff:9a:53:97:0a:d3:e8:2a:b0:70:2c:ce:5b:95:
31:48:b7:fa:f7:d9:3c:23:f3:62:be:79:71:26:49:c7:49:57:
c0:11:d1:94:9d:e8:67:9e:8a:f0:52:8a:f6:ce:13:ff:9f:19:
9e:fb:de:96:45:71:90:cb:57:e6:3f:1c:56:ef:b0:82:d5:04:
32:59:53:81:e0:09:ca:88:70:1c:88:df:e4:2b:bc:a4:b0:e6:
26:8c:51:d5:72:d1:2a:ad:07:f4:19:23:db:a4:27:d8:cb:29:
a2:9b:d4:ec:ab:d5:4b:bc:f9:30:0c:33:06:6d:e7:f9:6b:90:
b1:0a:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:48 2026 by rpki-client