Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: qyMRQA1WHgsQMsE76j2xwYEX744AO39Dnybt8h6VqsM=
Subject key identifier: 08:1E:A0:00:1D:2D:91:CF:A3:A5:2C:04:1E:5A:FB:EA:94:72:FC:AD
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019D37C0C8FF41882CA9E2F971FB0DEDEA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0D5E
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: 2Z9nIKoGGhaTbzsGllK5Jxy4uvEfD2xQP1sPGX+EU98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c8:ff:41:88:2c:a9:e2:f9:71:fb:0d:ed:ea:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=081ea0001d2d91cfa3a52c041e5afbea9472fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:b0:ad:45:fb:d8:f9:af:b1:a9:c7:fb:05:
13:8d:7b:0b:54:46:3d:91:04:74:2e:a4:60:09:57:
87:8a:24:f8:da:e8:f7:89:ea:14:e0:f5:53:30:8c:
82:97:31:59:4d:3d:54:b5:ca:ea:b7:50:47:70:cd:
2d:d0:d5:5b:a8:9a:b4:88:f0:1c:ae:d0:8c:8b:2d:
98:18:b9:55:5e:2c:bd:06:81:76:5e:07:c8:a7:76:
a6:47:d9:47:8d:1e:45:e8:f8:4b:b1:8e:c2:b3:3f:
11:84:b4:9c:73:04:b9:b2:e4:45:e6:31:a6:88:61:
9b:1a:7c:56:9a:18:91:cf:ae:12:6b:b7:7f:f0:8f:
7a:3c:06:a4:f1:3c:63:0e:69:aa:45:ea:f1:94:f7:
2c:32:2a:3f:85:0e:6d:4c:19:0c:27:28:f6:24:fb:
d0:dc:7b:a8:64:62:45:fa:48:9a:e1:83:ef:88:c8:
74:cd:ff:2e:59:f0:a8:bf:a1:de:e7:f2:0d:b1:19:
81:27:9a:6c:2a:8b:6b:b5:27:2d:13:1b:c1:b5:60:
7b:68:b7:b7:48:b0:88:c7:8a:86:84:55:28:e9:b7:
9c:2d:35:bb:e7:db:2a:50:4d:fd:52:df:3c:a5:aa:
43:3f:3b:7e:69:5d:8c:91:24:61:47:ab:9b:55:e9:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:A0:00:1D:2D:91:CF:A3:A5:2C:04:1E:5A:FB:EA:94:72:FC:AD
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2e:e3:18:c3:c8:c4:6c:1d:c3:54:5c:c9:00:58:80:37:b2:
47:32:4f:2f:99:f3:2e:4d:1b:16:4b:a1:3d:8d:e2:a3:87:58:
a4:3e:d8:04:bf:f4:82:c7:bc:c0:48:60:5d:65:34:c2:26:a2:
1f:85:6c:8e:a7:97:1a:31:37:98:79:70:8c:88:ce:d2:3e:f9:
fc:db:dc:4e:72:2e:b4:64:8c:0d:0e:70:22:17:0d:7f:e5:fe:
8c:cd:3e:49:a0:8f:5c:34:19:0b:da:6e:a0:73:96:27:77:b6:
e9:c3:b0:44:43:a5:e3:ef:40:78:d9:75:35:58:90:6d:5c:8b:
18:6c:d0:49:da:cf:cb:99:85:f3:97:97:8a:f5:20:b1:92:e3:
20:f2:f3:ec:1a:b8:14:30:bf:bd:54:45:66:67:24:88:72:64:
78:7e:d0:de:71:a9:93:e7:4d:3e:cf:3d:c4:f8:78:0a:75:29:
0b:0a:81:e4:7a:7d:2d:55:5f:1f:68:33:18:9f:de:94:bd:f3:
d4:a8:c3:63:28:ef:e7:48:00:ee:fa:69:ad:3d:5a:88:29:b7:
1c:f7:9d:74:eb:2f:e3:77:1d:a0:88:a1:07:21:0b:19:44:f9:
e6:a5:91:c1:0e:35:0c:93:af:3f:da:6e:c6:a5:5c:da:c8:a8:
f4:21:01:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:46 2026 by rpki-client