Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: jxNBtwIdjjAlQaZDrSIhc1nH4vmQfHKtWO1iHfbyJVw=
Subject key identifier: 75:A5:72:D2:9B:F7:BA:08:FE:9F:B4:D7:48:E4:A1:D7:F7:57:ED:A3
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 01A17996398449FE261CE5D47A1CD61CAA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 1402
Signing time: Mon 26 Oct 2026 19:00:50 +0000
Manifest this update: Mon 26 Oct 2026 19:00:50 +0000
Manifest next update: Tue 27 Oct 2026 19:00:50 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: 39ekKePYPhnr3q0uwM7Mr9xFM6ehkEFh9iSFD2WoyGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:39:84:49:fe:26:1c:e5:d4:7a:1c:d6:1c:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Oct 26 19:00:50 2026 GMT
Not After : Oct 27 19:00:50 2026 GMT
Subject: CN=75a572d29bf7ba08fe9fb4d748e4a1d7f757eda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:70:3d:61:95:1d:35:6b:d6:03:fd:82:13:
35:55:04:a5:14:34:05:56:0e:24:1c:10:4b:63:43:
ac:29:c8:7a:4e:b1:bc:cf:eb:78:ae:60:ab:2d:c9:
e9:ca:2b:f9:cc:5c:2a:a5:6a:5e:aa:22:11:ca:78:
0e:a5:c7:e2:bb:8a:bf:9f:52:ac:1b:8b:5b:f2:06:
da:9f:ae:c7:1c:a5:ec:a2:96:e4:9d:c0:4d:2f:d3:
70:ce:17:a1:a2:d6:30:eb:1e:17:23:55:22:6e:fa:
8a:1e:12:0b:af:10:8a:df:d6:56:3a:08:6e:0e:4e:
14:39:1d:ab:50:b9:8b:75:7e:1b:29:93:b0:96:6a:
a3:45:7f:7c:57:0d:21:c9:e7:d6:7c:56:6e:47:2e:
93:54:ce:1b:2b:7b:bd:fd:94:7b:35:0a:bb:c8:af:
a2:35:8e:e9:da:62:87:8b:43:20:23:e9:9b:db:90:
47:ff:bb:ba:1e:01:5d:44:ff:37:2c:9d:e0:92:76:
18:69:bb:c4:cc:f6:5c:ab:d0:eb:4d:b5:8d:b6:6d:
31:98:32:ae:ba:5d:a1:c2:4f:fb:30:dc:ff:e8:ca:
97:f6:20:7b:56:50:79:e9:30:b7:fe:05:9d:a6:49:
e6:be:05:37:04:44:a3:02:8d:cc:ce:00:bc:5e:13:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A5:72:D2:9B:F7:BA:08:FE:9F:B4:D7:48:E4:A1:D7:F7:57:ED:A3
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fb:87:d8:c6:9b:a1:73:e5:42:c4:60:14:f0:bb:33:ac:f2:
58:0c:9b:44:6a:a0:dc:61:2a:c4:a4:4b:00:db:14:dc:7b:18:
37:61:a7:85:09:e3:f4:01:ae:23:8b:35:f3:6c:01:bb:8b:6e:
5e:ed:84:da:30:b4:99:64:4d:d7:f0:7f:60:a2:26:65:88:4e:
d4:6d:f1:7d:99:9e:ac:02:b6:2f:f9:53:25:1d:04:eb:0e:68:
dc:8f:e1:9e:fa:d3:89:d3:cb:4d:87:6a:5e:1b:7c:44:64:a4:
19:e1:eb:d6:03:83:3e:b2:78:28:4d:d6:48:54:36:e0:3f:e5:
9c:65:13:ed:76:bd:69:74:13:fa:05:f6:ef:72:60:4e:2d:ab:
ec:69:bc:da:d7:0c:e8:8d:db:5e:05:b3:67:4a:2e:cc:c1:0d:
f2:c6:08:e9:4f:c8:ce:c3:c2:3b:20:ca:0b:d1:87:aa:63:35:
46:c6:32:90:c7:b0:d2:b1:5a:5a:df:48:61:43:04:1e:d6:db:
80:ad:6e:ad:e2:b0:d5:03:11:ef:25:fd:55:2b:74:a8:b7:05:
57:2a:b9:c2:34:a3:a8:f8:cf:f0:c5:5f:39:ad:d3:ff:2b:47:
6c:90:46:2a:07:0f:91:cf:2c:b7:23:31:db:75:3a:4d:73:11:
9f:4b:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:16 2026 by rpki-client