Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: olRfrQdDpQezRyqfkE6fUYDt4xxK9sLrWGZUQrDOJDU=
Subject key identifier: 67:CD:08:44:DB:3C:ED:D9:29:A8:CB:46:AE:65:52:32:10:F9:34:B9
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 01A18B65A469D5BB7E96C93713DDFE26CD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0ABF
Signing time: Fri 30 Oct 2026 06:00:56 +0000
Manifest this update: Fri 30 Oct 2026 06:00:56 +0000
Manifest next update: Sat 31 Oct 2026 06:00:56 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: PuePuODpiEI6i0QgQp3PONlNxOQdChtl/+QUM5cs2Rg=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:65:a4:69:d5:bb:7e:96:c9:37:13:dd:fe:26:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Oct 30 06:00:56 2026 GMT
Not After : Oct 31 06:00:56 2026 GMT
Subject: CN=67cd0844db3cedd929a8cb46ae65523210f934b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:ec:9a:ac:49:6f:c7:1f:d4:3c:b5:a9:cc:
53:76:7f:c2:ea:ee:79:8b:ae:98:58:de:e8:b6:82:
4a:dc:ad:8e:9c:f2:36:64:34:ab:b8:06:17:57:d3:
cb:b8:5f:a1:71:f9:b2:d1:bd:e0:00:32:16:6a:00:
4d:d1:5d:99:1c:b2:0c:a4:bc:9d:aa:32:bf:14:0a:
a9:b3:4c:83:84:44:5d:57:97:ff:f4:6a:38:e4:85:
f5:3f:69:62:35:5f:25:a3:43:b5:d0:99:df:e6:77:
55:95:b6:c5:74:93:79:ec:16:cd:92:4b:bd:32:0e:
3e:d8:fc:55:15:5e:73:6d:ad:cb:ac:ae:29:8c:76:
bb:fa:d2:78:b9:dd:c7:4e:ad:64:9e:9e:54:a3:82:
2f:55:85:92:7f:35:3d:d3:32:43:6f:ba:f3:f2:45:
3c:a5:25:2c:1a:40:6c:6f:5b:1b:5d:73:25:cd:61:
74:32:14:dd:69:30:80:49:b4:2c:61:2b:36:03:63:
32:2f:14:c4:e4:a7:37:68:0b:9e:46:59:c5:03:21:
7a:07:14:c3:5a:1d:6d:10:fb:e3:73:ab:d5:43:cc:
42:1b:4d:2a:e5:99:4a:19:eb:8c:b1:9a:2b:30:38:
63:a6:6e:f2:b5:64:b5:11:f4:74:2b:e5:51:9a:f8:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:08:44:DB:3C:ED:D9:29:A8:CB:46:AE:65:52:32:10:F9:34:B9
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cc:14:d9:24:21:da:3f:dd:d5:8d:c7:09:40:2b:39:76:2d:
af:fe:ce:46:e9:db:6d:63:21:70:7b:84:dc:e9:59:c5:7b:58:
92:04:09:34:cb:db:13:ff:dc:26:9e:75:71:6e:4f:d8:80:a7:
42:86:4e:5a:05:ab:77:dc:64:40:e7:d2:74:11:4b:14:0b:bd:
e6:a3:c0:2c:59:65:02:17:6d:00:f7:05:f7:62:1a:89:78:3d:
f2:6e:b0:a7:5b:41:06:96:b6:1a:fe:4d:57:82:05:3a:9d:bb:
56:f2:cc:14:38:7c:35:cb:d7:da:3a:be:3a:20:3b:e5:70:68:
1b:80:63:a4:e0:1f:39:22:26:31:b7:92:a5:18:dd:03:af:86:
f9:47:bc:88:66:ca:8b:ad:f9:99:b9:98:f8:e2:e7:03:5c:c6:
94:c2:be:aa:96:aa:ee:82:a9:0f:79:a2:4b:04:88:c6:e7:30:
83:bb:58:3c:2d:77:24:88:43:99:45:60:ce:a5:ce:e2:85:4b:
b0:9f:04:dd:7d:b2:02:79:1f:7d:c4:e0:dd:ad:6d:ff:31:af:
7d:71:e2:33:2d:9f:da:ae:aa:2f:f9:33:2b:86:f1:91:da:21:
43:1d:fa:97:17:04:59:39:3f:c2:b3:5d:4f:34:b7:4b:fc:db:
cb:35:f2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGLZaRp1bt+lsk3E93+Js0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy
NWEyNWEwHhcNMjYxMDMwMDYwMDU2WhcNMjYxMDMxMDYwMDU2WjAzMTEwLwYDVQQD
Eyg2N2NkMDg0NGRiM2NlZGQ5MjlhOGNiNDZhZTY1NTIzMjEwZjkzNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve3smqxJb8cf1Dy1qcxTdn/C6u55
i66YWN7otoJK3K2OnPI2ZDSruAYXV9PLuF+hcfmy0b3gADIWagBN0V2ZHLIMpLyd
qjK/FAqps0yDhERdV5f/9Go45IX1P2liNV8lo0O10Jnf5ndVlbbFdJN57BbNkku9
Mg4+2PxVFV5zba3LrK4pjHa7+tJ4ud3HTq1knp5Uo4IvVYWSfzU90zJDb7rz8kU8
pSUsGkBsb1sbXXMlzWF0MhTdaTCASbQsYSs2A2MyLxTE5Kc3aAueRlnFAyF6BxTD
Wh1tEPvjc6vVQ8xCG00q5ZlKGeuMsZorMDhjpm7ytWS1EfR0K+VRmvjlrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfNCETbPO3ZKajLRq5lUjIQ+TS5MB8GA1UdIwQY
MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt
NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw
LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocwU2SQh
2j/d1Y3HCUArOXYtr/7ORunbbWMhcHuE3OlZxXtYkgQJNMvbE//cJp51cW5P2ICn
QoZOWgWrd9xkQOfSdBFLFAu95qPALFllAhdtAPcF92IaiXg98m6wp1tBBpa2Gv5N
V4IFOp27VvLMFDh8NcvX2jq+OiA75XBoG4BjpOAfOSImMbeSpRjdA6+G+Ue8iGbK
i635mbmY+OLnA1zGlMK+qpaq7oKpD3miSwSIxucwg7tYPC13JIhDmUVgzqXO4oVL
sJ8E3X2yAnkffcTg3a1t/zGvfXHiMy2f2q6qL/kzK4bxkdohQx36lxcEWTk/wrNd
TzS3S/zbyzXyDg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:35 2026 by rpki-client