Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: UfeYOuvP05OOwn0dvYCcgKnJsyoduDQBKAdnTx83qKI=
Subject key identifier: A3:89:7A:D2:2F:2D:CE:03:6D:24:E5:AB:F2:20:99:A0:64:54:81:9C
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 01A1DC4B73BDCF92A1378661CFE739E4BA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 17A9
Signing time: Sat 14 Nov 2026 23:01:34 +0000
Manifest this update: Sat 14 Nov 2026 23:01:34 +0000
Manifest next update: Sun 15 Nov 2026 23:01:34 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: Io1t8W8IYgFbDcIOOnENoyNJh+DG70q/Z3jDaaG6y0M=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:73:bd:cf:92:a1:37:86:61:cf:e7:39:e4:ba:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Nov 14 23:01:34 2026 GMT
Not After : Nov 15 23:01:34 2026 GMT
Subject: CN=a3897ad22f2dce036d24e5abf22099a06454819c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:14:2a:2f:6a:85:a1:9f:c6:96:b5:8d:94:
24:b7:1d:96:5e:92:33:c1:87:8c:93:2b:56:19:c5:
7c:5b:9b:1e:8e:58:fd:36:60:5c:5e:16:0d:49:f9:
2d:b7:d0:25:7f:d6:40:df:30:61:ba:df:e6:40:2c:
5d:88:4d:27:1a:6f:02:28:74:36:b8:37:2e:17:92:
ba:2e:6d:f0:d5:81:8b:be:a5:47:c9:bc:12:c9:29:
c5:86:55:80:d6:93:d9:94:d1:7f:6b:89:0f:33:3e:
ae:fc:3a:83:e1:9b:72:3a:1b:9b:2e:b2:86:f4:72:
24:84:05:38:cb:a0:5f:8e:b4:9e:18:ad:c0:58:3c:
fc:0c:11:24:33:91:1f:8e:2e:38:99:b0:51:40:b5:
b0:11:a3:7f:03:30:1f:d7:4e:85:03:02:3a:97:15:
7c:0c:94:20:78:a1:ab:0f:fb:a0:49:0e:6e:bd:51:
a5:5e:07:b6:37:28:eb:8d:e5:a3:b9:8b:95:8a:a2:
3d:97:7c:80:a9:09:7b:84:09:0f:77:c2:3f:ab:1f:
6c:4c:ea:26:31:ef:5e:0f:56:e1:4e:f0:a0:10:b4:
6f:44:e5:7c:95:ca:a8:4e:72:ba:bc:9d:57:b9:2a:
d6:cf:05:8d:4e:2a:08:25:ad:a7:1d:56:f2:ea:78:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:7A:D2:2F:2D:CE:03:6D:24:E5:AB:F2:20:99:A0:64:54:81:9C
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b5:61:38:11:1c:da:ad:af:ec:86:82:e6:55:53:38:6b:61:
b6:e3:88:9d:db:85:49:f7:dc:57:cf:78:10:fd:1f:28:46:b4:
c8:68:a5:68:1d:c5:20:70:ce:df:8f:f2:f5:b9:40:aa:ab:a0:
6a:86:c2:8e:f4:a4:85:57:9a:e4:1a:9c:fa:6d:1a:31:12:07:
59:fa:53:89:7a:1a:b5:d5:2b:64:ec:c1:cc:87:f5:73:a2:a5:
65:01:20:80:dc:73:8c:cf:42:eb:63:95:af:38:25:ab:6a:ec:
a9:b3:29:9e:e4:1c:27:ef:42:b6:ad:87:c2:83:41:a2:b2:ed:
7f:4d:63:90:a6:90:fc:ff:62:98:fc:4a:a4:ea:e9:b1:7d:50:
4c:a1:71:49:d0:ae:61:bd:aa:c3:11:bd:97:0d:31:fb:32:f7:
f7:42:9c:d6:5f:59:7b:7d:a3:c9:81:42:01:12:31:cd:71:00:
01:25:21:f8:77:c6:88:ba:c6:8a:4c:13:b5:db:a0:10:cd:d0:
5a:66:74:4b:b6:2d:a5:e4:92:74:12:f4:67:9d:4c:2e:cb:0e:
09:b1:06:bc:0e:f8:69:36:ee:65:a2:9d:4c:a8:d8:ec:e9:12:
46:1f:63:10:f9:20:51:05:49:fc:fe:5d:83:da:65:4e:43:b3:
06:fe:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:53 2026 by rpki-client