Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: jVGYwehioH9CoTQcaxh6+tRF9UQ60MeMIhEoUKVMQ7U=
Subject key identifier: 0B:58:D1:FE:2F:AF:F1:E3:A8:14:1D:DD:5D:1E:DC:A6:5C:71:46:ED
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 01A175B9D921402DDE75B19EDE17F5E63717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 1400
Signing time: Mon 26 Oct 2026 01:01:16 +0000
Manifest this update: Mon 26 Oct 2026 01:01:16 +0000
Manifest next update: Tue 27 Oct 2026 01:01:16 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: kh4kS6qW2mR4958FX2Rx8pdamo6vS3oCOZ2IQ3YUl+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:d9:21:40:2d:de:75:b1:9e:de:17:f5:e6:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Oct 26 01:01:16 2026 GMT
Not After : Oct 27 01:01:16 2026 GMT
Subject: CN=0b58d1fe2faff1e3a8141ddd5d1edca65c7146ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:6d:e5:d4:43:1d:ed:c8:53:da:b3:d7:d5:
0c:a8:57:de:30:df:64:bc:4a:8a:c1:28:9d:b1:d6:
75:1d:2b:8f:22:1e:de:eb:14:5d:a2:b2:ca:32:38:
de:8f:6e:4d:a8:ae:7a:dc:5f:77:f2:1c:4b:ba:49:
31:1c:04:10:b5:a9:68:c5:bb:bd:78:03:3d:f1:68:
f1:7c:01:2d:d7:a5:cf:70:c7:82:b4:74:41:98:6b:
e8:18:7f:1b:4b:e7:ac:eb:05:c2:ce:d7:60:ce:67:
1d:3b:39:5f:cd:33:81:de:c3:3e:7c:90:79:cb:7e:
ff:00:8c:cc:e2:17:22:f0:73:ec:30:2e:df:da:38:
bd:e6:7a:77:d5:70:c3:46:51:b9:96:33:f9:b5:63:
ca:97:81:2f:d3:49:26:47:77:f3:be:8b:13:cc:a4:
b2:53:98:63:57:da:a5:46:63:ec:cc:6c:81:95:07:
0d:d3:1d:c1:00:68:1f:d4:63:9c:30:6d:06:6f:0b:
d7:27:de:ee:37:da:e4:e7:ad:7d:ba:47:f2:ef:52:
5e:3f:85:3a:6a:89:b0:b1:1d:9e:a0:d8:c1:f3:01:
92:fc:79:63:a4:4d:b8:0d:11:31:d7:4d:56:df:f3:
0f:ea:07:fc:7e:38:5e:17:d9:f2:40:b1:71:db:40:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:D1:FE:2F:AF:F1:E3:A8:14:1D:DD:5D:1E:DC:A6:5C:71:46:ED
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0e:a9:0f:76:ae:e4:41:98:af:c6:d6:09:1d:f5:70:7d:f3:
e5:d7:50:bc:53:71:58:54:d0:8f:05:86:5a:88:c4:52:9b:c6:
a8:62:02:68:d1:d6:8d:41:d4:dd:e0:c4:31:f7:cd:f3:35:2e:
9b:a8:29:08:31:c2:93:6f:6a:be:84:1c:99:83:a0:9e:5f:f9:
58:d7:3c:98:76:24:7e:16:ea:91:af:74:69:45:1d:a6:d3:5e:
e3:97:bf:98:74:e5:62:36:2e:c1:f3:cb:3c:0c:de:95:08:18:
3b:d9:08:40:0f:4a:9e:21:33:ab:d2:d6:14:92:0e:96:3c:bd:
9f:4f:dd:c3:8c:1f:51:e9:2d:d6:43:81:77:1d:20:0d:d7:7c:
ed:97:49:43:2b:a5:c4:3b:bd:c9:df:ee:a3:d9:f4:60:0a:44:
19:b7:63:73:45:6a:5d:0e:78:8d:f9:5b:cd:16:ec:97:61:8b:
0c:ed:7f:71:20:a0:f6:6a:8f:25:0c:5b:75:c1:bf:76:57:15:
ec:5c:b3:55:24:4a:a7:a8:b9:9b:a6:25:dd:0d:3c:91:56:79:
88:d8:3a:89:dc:ad:ea:b0:23:48:42:10:52:97:3a:8c:ab:19:
77:45:c3:58:ac:6f:1d:64:1f:39:79:9b:00:61:56:0d:55:e3:
3f:c7:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:58:55 2026 by rpki-client