Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json)
Hash identifier: sDISuSMtqsxl2rjYvzh2KONhCk8Mre5xYj/rWAfeoYc=
Subject key identifier: 3B:AA:84:A1:55:93:6C:78:75:AF:CF:5F:F5:8C:4C:21:1E:5D:24:25
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 019F951269AD22A52CF4CEEDF0292C858251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
Manifest number: 1586
Signing time: Fri 24 Jul 2026 17:00:39 +0000
Manifest this update: Fri 24 Jul 2026 17:00:39 +0000
Manifest next update: Sat 25 Jul 2026 17:00:39 +0000
Files and hashes: 1: 1-TOqja5CNG10npojmlqoemD6Os0.roa (hash: NzAe/aZpQrXH9VRHkCugQ65YQj6AyQhV0L0bPPbOctg=)
2: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: 4lmyYObuAi+kyym9w5L44l+0dtZwiegcN5vcUF72JI8=)
3: sFMQrF6QNVHq4Ise78Z4aJzu90U.roa (hash: hsp4rWL8Fn/VxDJDiPlkniOpWXQLUa/9oJsISt8B6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:69:ad:22:a5:2c:f4:ce:ed:f0:29:2c:85:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jul 24 17:00:39 2026 GMT
Not After : Jul 25 17:00:39 2026 GMT
Subject: CN=3baa84a155936c7875afcf5ff58c4c211e5d2425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:b5:37:8f:f8:f9:7b:0a:f8:2b:e6:4a:88:
d0:f2:85:b0:64:fc:4d:a8:0d:ae:11:fe:4c:e7:0a:
ce:68:9b:fa:48:66:55:02:2b:3c:b8:8b:a8:d7:a0:
94:bd:79:b4:8f:4b:f6:16:28:57:61:9e:ba:23:80:
39:73:f2:6c:68:b5:08:d1:45:f4:69:41:74:2e:66:
09:b4:13:75:11:25:99:13:ca:ca:46:05:ce:62:c0:
2b:d8:c5:10:9a:4d:8d:e4:72:56:34:87:ab:35:75:
06:0d:f7:c6:e7:3d:e1:b5:62:87:34:5d:85:cf:2a:
cf:65:21:57:04:35:72:c3:b4:ca:04:53:8c:fa:10:
29:57:f8:1b:2c:4d:b7:53:c3:54:30:9b:5a:53:08:
c2:3a:06:c1:24:9d:c0:11:3d:81:e2:8d:0e:bc:4d:
3a:59:43:12:7b:5d:22:d4:42:85:22:cf:9f:90:d7:
7e:9c:e3:50:ff:e7:b6:4b:1f:3a:f9:58:29:16:70:
d5:cd:70:b6:61:fb:a9:b5:6d:cb:e0:2c:66:ec:49:
15:1a:45:30:7c:57:2f:05:1a:1f:ee:65:cc:01:3c:
d7:33:dd:72:44:7b:92:d2:97:62:e1:cc:6d:02:6c:
0f:0b:2b:71:81:6e:13:09:dd:5d:48:ce:f4:5a:0e:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:84:A1:55:93:6C:78:75:AF:CF:5F:F5:8C:4C:21:1E:5D:24:25
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:34:24:49:04:ba:69:d4:c2:c6:ac:79:dd:27:4e:14:5f:1f:
e1:f7:6a:98:fd:14:da:46:e4:af:ef:1e:6b:78:b7:41:44:75:
94:10:20:43:ae:c3:67:81:65:ed:f8:e7:fb:42:d7:a7:f8:17:
e4:22:cf:27:d3:5a:67:76:5e:6e:d2:e9:37:f6:20:c1:83:b7:
c5:58:90:1c:36:41:2d:f7:9b:73:b2:27:5d:35:60:06:4d:97:
d6:7b:a9:d8:b3:93:e9:2c:91:88:b0:33:fd:9b:5b:3d:b3:21:
08:90:d0:e6:48:4c:c5:c7:91:e1:35:be:89:83:08:1b:45:9c:
09:ad:a6:4c:77:1e:6e:da:92:f2:83:c0:5f:ce:80:7a:72:7c:
20:af:15:ca:4d:39:fb:54:73:1f:3d:35:09:65:26:d7:fc:1f:
b8:94:53:fd:21:4d:ee:42:44:be:b8:98:83:fa:5f:cb:b7:26:
b5:09:07:fa:e1:d0:32:1b:e9:5e:94:0c:2a:e6:59:cd:93:b4:
21:af:db:64:ea:03:f2:20:fc:ba:36:ca:5d:a9:64:39:a6:af:
a5:f8:30:d2:e4:95:78:0e:b3:1f:c9:6a:aa:71:df:ee:f3:d9:
8e:1e:a5:95:24:9a:39:31:46:e3:3a:3b:cf:13:6e:57:32:c4:
e1:5b:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:04 2026 by rpki-client