Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier: CXyqYaSrEzFLwg0wrtniHNkVxykkq+zvPM0p+i9Shh4=
Subject key identifier: A2:2E:4F:A0:5C:15:EE:9B:CD:05:4F:3C:59:36:F1:1D:9C:AD:F6:BB
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019D2929297A59968435D20A65CF47F8D3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number: 153A
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: dfkfeY+EtTJDZ7k9+eaZUvxWGEfmo+yNTxzCR6Svh68=)
2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:29:7a:59:96:84:35:d2:0a:65:cf:47:f8:d3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=a22e4fa05c15ee9bcd054f3c5936f11d9cadf6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:2d:be:01:af:78:a5:58:22:3f:16:83:e2:
d6:7b:f8:9c:df:a7:c0:b2:b7:32:c6:21:1d:67:b8:
b0:af:ce:94:08:2b:65:39:93:22:b5:e7:92:ad:23:
40:19:89:41:6a:b0:8a:de:3e:a2:dd:59:ec:42:4c:
b3:3a:17:0e:8f:aa:80:e0:84:2b:e4:a7:32:7d:9e:
95:57:15:67:68:27:09:87:3f:7e:4f:09:04:24:05:
90:d5:73:e4:6f:be:1a:eb:ca:20:24:c4:1c:20:f2:
53:43:c5:da:dd:03:bc:08:a5:5f:a3:52:23:3f:0b:
c6:8e:37:fb:a4:21:8a:89:a4:c0:d0:a0:d7:61:e4:
ae:4a:bc:69:e6:86:7c:60:05:e3:be:d5:ab:29:ca:
29:89:2c:c0:f6:ed:aa:85:7d:61:57:5e:49:0b:e8:
48:e7:49:95:cf:73:21:19:b2:aa:cf:9f:03:d6:12:
b1:26:d6:f8:94:7f:c4:eb:45:7b:00:6e:68:17:1c:
d1:c2:9b:b5:ee:a4:cd:57:c6:7e:e2:56:7e:4e:7b:
18:21:a3:ee:d1:27:d8:5c:cd:35:9f:63:3b:74:dc:
09:02:d8:dc:e9:19:a1:57:f5:c2:50:40:83:ae:f6:
b3:8b:16:ad:a1:50:c7:7e:ce:09:a8:36:a4:c1:27:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:4F:A0:5C:15:EE:9B:CD:05:4F:3C:59:36:F1:1D:9C:AD:F6:BB
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:45:a0:dc:53:80:b4:fa:86:6f:ab:c1:fd:32:ce:29:5f:35:
76:12:72:2a:f4:4a:c7:99:cf:30:17:bc:e0:0d:a3:1a:50:7e:
0e:07:03:97:28:6b:5e:dd:44:2e:5b:59:70:a4:2b:54:b0:15:
60:1d:f8:28:57:19:0e:38:e6:a8:0d:ba:ba:d4:5e:51:34:2e:
c1:67:0a:81:dd:63:6b:ac:7c:99:3f:4f:7d:37:a8:5b:47:2c:
73:71:95:cf:66:ac:f8:66:27:37:bc:f7:35:55:31:e5:6e:e0:
4c:06:eb:e3:37:10:a7:08:38:5b:65:03:c9:a0:6b:4d:02:91:
c8:2a:3d:09:a1:3f:8f:b6:0f:47:36:ad:78:6e:2a:bc:52:66:
47:2e:f0:17:6e:39:e3:1b:a1:23:26:7f:06:eb:b4:20:f1:d1:
c0:31:1b:92:ee:a8:0c:b2:10:5a:85:a6:0c:d4:70:65:5a:26:
83:d3:c1:9f:1b:cb:81:ba:10:2b:d9:de:35:8d:5c:13:f0:72:
9b:09:34:7f:b3:85:f0:f7:e4:6b:55:61:c1:6d:6c:bc:40:6e:
d2:e9:aa:b4:ef:0c:b7:21:e3:07:1e:a1:0f:0b:36:00:04:a6:
44:48:dc:c5:50:8c:b9:b2:79:c3:2b:a1:29:28:8c:c9:0d:dd:
cd:8e:47:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKSl6WZaENdIKZc9H+NP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj
ZTA4MmIwHhcNMjYwMzI2MDgwMDU2WhcNMjYwMzI3MDgwMDU2WjAzMTEwLwYDVQQD
EyhhMjJlNGZhMDVjMTVlZTliY2QwNTRmM2M1OTM2ZjExZDljYWRmNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mQtvgGveKVYIj8Wg+LWe/ic36fA
srcyxiEdZ7iwr86UCCtlOZMiteeSrSNAGYlBarCK3j6i3VnsQkyzOhcOj6qA4IQr
5KcyfZ6VVxVnaCcJhz9+TwkEJAWQ1XPkb74a68ogJMQcIPJTQ8Xa3QO8CKVfo1Ij
PwvGjjf7pCGKiaTA0KDXYeSuSrxp5oZ8YAXjvtWrKcopiSzA9u2qhX1hV15JC+hI
50mVz3MhGbKqz58D1hKxJtb4lH/E60V7AG5oFxzRwpu17qTNV8Z+4lZ+TnsYIaPu
0SfYXM01n2M7dNwJAtjc6RmhV/XCUECDrvazixatoVDHfs4JqDakwSd8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIuT6BcFe6bzQVPPFk28R2crfa7MB8GA1UdIwQY
MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt
MWQ3YjIyOWQ0ZTNiLzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi
LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkWg3FOA
tPqGb6vB/TLOKV81dhJyKvRKx5nPMBe84A2jGlB+DgcDlyhrXt1ELltZcKQrVLAV
YB34KFcZDjjmqA26utReUTQuwWcKgd1ja6x8mT9PfTeoW0csc3GVz2as+GYnN7z3
NVUx5W7gTAbr4zcQpwg4W2UDyaBrTQKRyCo9CaE/j7YPRzateG4qvFJmRy7wF245
4xuhIyZ/Buu0IPHRwDEbku6oDLIQWoWmDNRwZVomg9PBnxvLgboQK9neNY1cE/By
mwk0f7OF8Pfka1VhwW1svEBu0umqtO8MtyHjBx6hDws2AASmREjcxVCMubJ5wyuh
KSiMyQ3dzY5HmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:54 2026 by rpki-client