Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: cs8Zv8XxlDKgvhWKOUYie1Z7UjZPRH4UYPsRCvaeUKU=
Subject key identifier: AE:C6:1D:E7:6B:F2:1E:FE:B7:25:33:15:70:1D:0E:09:44:38:40:60
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 01A0D983A284556D05EE15572E0ABF5C1DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 1723
Signing time: Fri 25 Sep 2026 17:01:17 +0000
Manifest this update: Fri 25 Sep 2026 17:01:17 +0000
Manifest next update: Sat 26 Sep 2026 17:01:17 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: B48weoFYdk/ZWRUEFDEXq3xeUEqbK3s/gigIlTSPTAo=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:a2:84:55:6d:05:ee:15:57:2e:0a:bf:5c:1d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Sep 25 17:01:17 2026 GMT
Not After : Sep 26 17:01:17 2026 GMT
Subject: CN=aec61de76bf21efeb7253315701d0e0944384060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:82:60:21:44:91:fc:ce:17:ee:6d:39:99:
ac:c8:34:aa:24:c6:8c:42:7f:36:d1:b7:6c:4e:35:
62:53:5c:e3:e6:21:28:f0:19:eb:f7:be:6b:fb:2d:
78:8d:b4:d3:87:7a:62:09:2e:72:fe:e9:b8:bd:b5:
59:8d:d4:74:ed:29:59:56:c4:c9:bb:7a:02:26:f1:
bb:cd:71:9a:54:04:a8:8a:70:41:7c:9e:0f:74:cc:
17:af:62:50:60:7d:a1:92:25:6c:4c:1f:95:53:79:
da:32:43:29:de:18:eb:9f:a5:f8:d8:8a:8c:73:c1:
30:9d:cb:17:8e:eb:10:ca:95:27:f3:05:a5:75:86:
dc:61:49:e8:95:e9:83:58:38:1d:4d:f1:2b:65:84:
55:40:61:c1:57:17:9a:72:4b:a0:4c:4e:1e:69:4d:
bf:9e:e6:a3:30:86:b9:e6:9d:0a:7d:dd:19:68:05:
00:9f:4d:cc:bd:d7:30:c2:d0:46:5b:72:22:87:8c:
44:a0:a8:88:9c:e7:bd:b4:1c:51:e3:ff:05:46:b5:
48:f7:e9:a7:88:b6:62:c6:a4:4d:ca:92:78:a8:f0:
b1:63:27:5c:bb:fc:2d:27:a5:fa:6a:5f:02:45:5c:
6f:14:20:cb:88:d3:57:fd:93:1d:52:2c:5f:8d:5f:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:1D:E7:6B:F2:1E:FE:B7:25:33:15:70:1D:0E:09:44:38:40:60
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:ed:fe:03:b5:2c:9c:35:a6:88:e6:c7:a7:35:62:c2:2c:
75:ac:55:35:2b:27:ff:79:8d:c3:d8:08:1c:98:86:a0:ea:35:
b8:4f:8a:56:9c:bd:74:96:6a:d2:59:56:4a:24:ea:bc:74:d5:
45:b0:12:7b:ad:18:a1:fa:a8:4f:8a:a5:d3:29:4f:69:c0:c4:
89:0e:63:98:43:71:fd:10:e7:e0:4b:4b:3b:e7:ac:99:be:d9:
ca:4a:da:42:9f:30:d1:c0:2f:22:66:c3:73:b5:58:9c:04:18:
32:1d:7f:69:fc:c8:41:86:d0:4d:76:77:1b:c7:84:96:8d:c7:
8a:4d:80:59:34:ba:86:7e:cc:d0:34:cc:75:d1:bf:3f:53:c8:
32:6f:0c:d5:b4:95:84:bb:9a:c1:a1:ff:f8:49:95:fc:5a:a2:
7a:16:3d:3d:ae:e9:b9:ab:e3:df:ee:a7:81:04:4e:f9:4e:48:
75:e1:3e:c2:57:1e:09:90:f1:46:97:ed:64:c4:1e:89:46:7c:
97:2b:d1:a6:ec:37:99:3a:6b:8c:78:ea:7b:ab:17:e4:b8:41:
be:36:d3:4a:a7:d1:5d:88:37:5c:7b:39:11:cd:34:57:8e:c6:
33:cb:8d:b6:88:85:ba:79:ee:95:09:ce:15:7f:eb:ea:03:3a:
17:5b:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:42 2026 by rpki-client