Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: aAf4a9P/g+Ap8F4/NPDvxymTCEhhYXVeFxCkhcJKthI=
Subject key identifier: E6:8A:FD:00:9C:DB:A9:9C:6B:D5:2C:CF:E1:7E:8F:C8:19:AC:BE:C2
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019F93247CB2911BC0357EE41C6C5A975FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 167A
Signing time: Fri 24 Jul 2026 08:01:09 +0000
Manifest this update: Fri 24 Jul 2026 08:01:09 +0000
Manifest next update: Sat 25 Jul 2026 08:01:09 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: 1Ym4IuoaDD4G+BOq/eHl96dkPjxlOjJTWzHJ4qZGQWs=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:7c:b2:91:1b:c0:35:7e:e4:1c:6c:5a:97:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jul 24 08:01:09 2026 GMT
Not After : Jul 25 08:01:09 2026 GMT
Subject: CN=e68afd009cdba99c6bd52ccfe17e8fc819acbec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:a2:8a:e2:6e:00:5f:e6:b9:7b:46:c2:49:
97:dc:d9:cf:33:81:48:43:f5:d9:52:a8:93:94:8d:
76:84:8b:ed:10:f5:9c:b3:82:e4:77:d1:b4:ef:fd:
1d:66:bf:2a:ff:30:72:39:e8:11:ea:f0:82:77:25:
ac:bf:ce:4e:ec:da:1f:3b:25:5a:2f:0d:ed:5b:82:
33:dd:c1:ad:bd:d4:bc:23:40:b8:92:bf:55:b7:1e:
6b:b8:61:63:29:f5:98:6f:f0:54:fb:50:47:b3:a5:
85:f4:13:14:d1:b8:c7:d3:d3:8f:ea:cc:17:f8:1d:
7b:90:f5:77:75:05:ba:d0:07:b4:6d:83:e8:cc:52:
f6:3b:b2:1c:5a:7a:a3:a4:b4:39:e4:64:b1:4c:41:
e0:69:ee:8b:74:a1:d3:08:9c:7a:cf:26:ec:02:14:
48:f8:1b:fc:d0:d6:85:8b:92:2b:9c:d4:27:ad:6d:
8c:39:39:cf:a2:ed:c6:74:af:54:49:07:f4:1c:42:
c0:62:82:84:7d:df:a8:f8:d3:7b:f2:9b:4e:f5:11:
5a:66:89:af:e0:90:6d:04:ac:52:2e:88:ad:29:bd:
36:5a:f9:87:02:d5:24:b8:75:40:84:c9:58:0d:be:
1f:48:5e:9b:32:8f:8d:99:83:94:56:8a:25:1e:d9:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:FD:00:9C:DB:A9:9C:6B:D5:2C:CF:E1:7E:8F:C8:19:AC:BE:C2
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:86:9c:93:a5:9a:ce:88:67:fc:f0:b6:f0:90:84:df:fc:
77:f0:c7:a3:f2:79:0d:01:33:6f:d2:b8:4c:85:ea:e5:fd:16:
bb:26:ee:0c:d9:78:d6:44:dd:7c:09:69:3f:62:17:c3:33:a1:
49:f4:3d:e0:f2:9a:51:7a:71:94:2c:ba:af:ad:78:e6:a8:86:
7c:1d:a8:b1:60:c3:b4:42:f6:89:18:e4:29:1b:a5:2a:e8:fe:
88:15:1b:80:ed:4d:2e:1f:fc:c9:1e:64:61:f9:ec:d3:5e:94:
e7:ab:47:d5:28:a2:4c:2c:47:08:33:eb:fa:0c:e7:a5:66:5f:
95:e5:68:3f:f0:af:58:f4:46:eb:ef:ec:18:09:3a:33:4b:8a:
3f:e0:17:58:35:85:5e:ff:1b:b9:7f:5e:e8:74:ec:d0:41:38:
8c:48:c2:23:9e:48:0f:45:51:e0:b4:27:16:57:94:f9:ca:6f:
52:1f:e4:26:d3:2e:53:af:15:7c:52:9a:eb:f8:75:6f:b2:5b:
3d:a0:56:a3:e4:c9:c7:0d:b7:62:ee:7c:50:42:e0:11:30:dc:
12:24:6d:a6:53:6e:e1:b9:4d:ab:f9:6e:9a:87:ec:91:a9:af:
5b:51:27:4c:6d:dc:6d:1b:6e:df:37:27:d5:09:71:3e:41:1c:
e0:69:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:17 2026 by rpki-client