Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: xgevv3cKjMPGx4T+klp9cJadEwmWVuZa38Drb6INYww=
Subject key identifier: BA:C9:C0:D0:15:45:88:A7:83:B2:59:38:DE:18:E2:BC:71:17:A0:2A
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 01A08A8C157150DBD325D235CB92FED7124E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0A3A
Signing time: Thu 10 Sep 2026 09:00:30 +0000
Manifest this update: Thu 10 Sep 2026 09:00:30 +0000
Manifest next update: Fri 11 Sep 2026 09:00:30 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: +oI+f8H0UxHMscv9x8LnVx3RSlZzBrHdIEdH8F23hQw=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:15:71:50:db:d3:25:d2:35:cb:92:fe:d7:12:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Sep 10 09:00:30 2026 GMT
Not After : Sep 11 09:00:30 2026 GMT
Subject: CN=bac9c0d0154588a783b25938de18e2bc7117a02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:64:9f:e7:a9:2b:41:3b:19:35:0e:b9:70:
95:09:05:8c:bb:14:4d:8b:73:18:43:80:0d:bb:18:
83:46:86:db:d6:7d:98:42:df:e3:e3:b1:0e:28:74:
b4:38:1c:6b:4e:cb:f7:06:1f:bc:d9:5a:a1:5f:e2:
72:08:ba:b1:0b:e4:a7:4f:5d:c0:ae:aa:07:12:32:
3f:d9:64:2c:df:3a:d4:21:04:62:3f:67:b7:7f:66:
fa:4c:6b:49:f8:0b:ec:90:6e:69:de:94:d5:e1:95:
d5:fa:74:3a:95:5b:32:19:f8:89:95:c0:2c:99:f4:
3d:b8:cf:9e:df:4d:d0:49:c8:3c:d8:1c:77:36:d8:
35:cb:4a:1d:52:85:3e:bf:a3:f9:91:8e:da:75:b3:
e5:45:d8:05:78:13:c8:da:7a:66:d5:9b:7d:18:53:
df:2d:65:5b:54:11:75:73:0c:b7:00:9f:0c:f0:81:
78:dc:25:b0:97:92:ae:78:ce:bd:a5:52:2d:f0:05:
07:b5:31:8d:d7:a7:34:51:cb:1b:76:b5:22:27:31:
f3:34:a5:89:44:d9:53:54:27:1e:2e:f2:e6:f8:5a:
ff:55:ec:34:cf:73:03:86:58:e4:d4:0f:81:4a:94:
df:4f:89:83:0b:af:e0:a5:5d:d5:98:8a:bd:7e:2c:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:C0:D0:15:45:88:A7:83:B2:59:38:DE:18:E2:BC:71:17:A0:2A
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:74:c4:0a:02:eb:e9:48:89:61:92:b2:0b:cc:bb:56:71:77:
0a:2f:ba:d6:57:87:7d:8d:c3:47:bc:73:e0:da:cb:4e:33:41:
93:ba:d5:2f:4f:4f:ea:52:47:e0:d5:b3:a1:3e:e9:2e:54:0d:
00:46:88:3b:44:ce:f6:a1:ea:ab:57:d3:39:1c:1e:b6:4e:01:
3c:b8:13:17:be:4f:6a:47:14:83:d2:91:f0:29:7b:2f:84:95:
aa:aa:47:3d:6b:3e:6a:24:1e:fd:6f:40:20:16:ed:ca:fd:85:
b6:4c:63:79:cf:44:98:57:92:07:d3:18:0e:23:17:2a:f2:a1:
fa:3b:4d:61:8c:a1:8e:71:fc:db:28:73:e6:d0:0d:46:54:d1:
d4:c1:dc:2b:d9:82:23:fd:8d:1d:7c:5f:f4:2d:aa:5f:5f:2b:
94:ed:42:87:e6:f6:33:32:41:7c:6e:6a:f9:57:2f:dd:5c:f6:
a2:68:81:b8:17:40:bf:11:f3:7f:3e:f8:11:6b:0d:1a:fc:e4:
cf:f5:e4:07:85:af:c4:f1:dc:8a:69:33:1f:29:b7:41:8e:c3:
79:29:33:a1:c9:79:84:da:53:72:99:71:9d:48:4b:0d:6d:69:
78:76:bb:57:7c:7c:34:79:ae:2a:17:0b:dd:bb:23:f1:20:d2:
cb:ed:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:20 2026 by rpki-client