Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: 33CYzzhM/PVuC5Ty7XsanQtLyqk2cjb5M6n9MDHLXg4=
Subject key identifier: 81:79:33:70:CF:55:39:74:9D:C8:F0:AB:9E:43:5F:CE:72:AB:FA:13
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019CE5C87BDCF9A22F41AA8D94994E95AF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0857
Signing time: Fri 13 Mar 2026 06:00:47 +0000
Manifest this update: Fri 13 Mar 2026 06:00:47 +0000
Manifest next update: Sat 14 Mar 2026 06:00:47 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: dnwbZxgtmVF/rzqUhk53ifBERNC+jIwu/1flcLA5sK4=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:7b:dc:f9:a2:2f:41:aa:8d:94:99:4e:95:af:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Mar 13 06:00:47 2026 GMT
Not After : Mar 14 06:00:47 2026 GMT
Subject: CN=81793370cf5539749dc8f0ab9e435fce72abfa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:b4:72:05:4b:f8:ed:34:6d:5d:81:84:4e:
9d:47:7f:c6:32:40:15:01:62:f2:c6:d2:fc:c2:18:
38:d9:5a:4e:32:5b:c4:4c:86:97:d4:f2:6c:93:5c:
ab:8a:dc:9b:48:c1:19:cf:b0:81:20:11:2f:a6:ee:
be:66:55:56:a4:eb:c6:fa:d2:19:3d:bb:8f:5b:3d:
aa:a8:eb:68:02:1a:69:4f:20:4c:1b:6d:a6:8b:02:
1c:e7:28:4a:b6:81:9d:89:e3:a4:ce:b8:dc:2b:b8:
33:88:65:c1:64:e9:5a:b2:67:77:bb:fe:29:51:80:
95:18:05:ce:76:5a:21:d2:a2:59:49:bd:cf:9d:d5:
e4:ec:63:16:52:41:23:3f:64:42:2f:0f:22:1f:39:
57:ed:8b:9b:99:88:98:6f:ab:c7:66:05:eb:22:5e:
2c:b6:3c:6d:02:ad:b3:68:90:40:5b:ff:9b:c1:37:
f5:54:40:26:90:c1:04:13:69:ec:68:c3:1b:dd:57:
6a:3e:e8:91:54:7d:ce:79:cd:45:1e:bf:eb:53:db:
d9:ae:63:fd:e2:6b:83:c5:93:fb:19:ae:a5:12:39:
60:90:fe:4d:b0:a9:39:b2:57:d9:05:03:54:29:37:
3d:85:c8:04:4a:55:13:7d:a1:eb:b9:7d:ce:94:9f:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:33:70:CF:55:39:74:9D:C8:F0:AB:9E:43:5F:CE:72:AB:FA:13
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:b9:43:1f:5e:08:49:76:e8:e5:ab:7c:f9:0c:ea:ed:a6:
e5:04:12:e9:03:3f:e0:7c:ac:51:d7:5f:2a:b8:a3:42:56:66:
75:7a:3b:0d:29:a7:9c:09:84:b4:24:b7:1d:e7:3d:f8:e6:ee:
25:02:f0:59:f4:c9:63:4c:64:2f:0c:bf:8f:2d:d8:3f:82:a0:
62:8e:62:20:7d:2a:01:c7:d1:f7:ea:5e:2a:bf:8f:15:4c:07:
da:6d:42:b5:6a:1f:16:10:0d:27:e4:38:14:02:ad:c6:f2:36:
2a:e6:e1:5b:1d:72:0f:26:4a:51:8b:22:4b:a7:bc:a8:03:0b:
a1:48:ff:14:e2:16:e6:b0:1f:27:7f:cc:74:ec:4a:d5:50:f4:
36:96:ad:3b:18:d4:65:b6:06:c7:f4:e1:30:3d:33:30:77:04:
07:f9:3e:eb:5f:f0:45:03:aa:23:10:ef:2a:be:81:9b:9f:58:
c8:0e:b1:76:63:71:f8:c3:84:22:8c:b8:fe:62:ae:37:a7:f2:
71:16:bc:c6:dc:3a:42:5b:80:36:79:85:63:fa:77:2b:8c:ca:
db:2d:c5:a4:e5:dd:fa:8d:b0:e2:ef:03:a9:15:93:0a:be:59:
dc:94:11:c5:0d:8a:32:68:d9:94:76:83:c4:6a:b0:6e:1d:e7:
0f:a9:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:30 2026 by rpki-client