Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier: RyWWzVn7J7/RE1EaLusVbA2vyeoAtn5csIzYCXA4AM4=
Subject key identifier: 56:E0:29:04:13:85:F6:2A:89:FE:1E:18:C9:FF:83:0B:34:6B:DF:E6
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial: 019D27DF85363F4B86F25E8CC92182660191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number: 0AF1
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: UgAFUbh81YK3NtGjkHbqpHFnJlR7twByvSRSWAOWNFc=)
2: fiaiVWP5lLqsNUQ9XOSyBsEQy8E.roa (hash: v0PmtJ3pzpVot2Wloq98GRl87XDpPUF7bbjfx1/ffng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:85:36:3f:4b:86:f2:5e:8c:c9:21:82:66:01:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=56e029041385f62a89fe1e18c9ff830b346bdfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:bc:e9:90:47:f3:33:ed:b1:02:77:2f:6a:
66:54:1d:6b:e9:92:96:ee:89:92:e4:be:6e:7b:03:
26:58:de:a0:8a:35:04:08:21:bc:82:19:22:20:23:
4a:47:aa:21:aa:c7:2a:88:28:b8:89:71:02:62:3f:
b7:21:28:3f:4b:1e:ac:79:7a:52:ac:3e:d1:82:6b:
e1:cd:fa:e3:97:58:31:6c:7f:c1:41:92:99:b4:79:
78:31:09:a6:80:0d:f6:ca:28:fc:af:85:2e:57:49:
0a:c8:b0:92:b7:36:46:ba:8e:a5:7b:4a:c4:1f:96:
1c:fe:27:3c:82:aa:c4:35:80:57:e7:8a:e2:05:bd:
b3:db:05:08:98:9c:6e:0d:f8:d6:05:54:a0:44:2f:
18:b6:d8:46:35:24:b5:8d:48:47:18:f2:9a:c0:cd:
6e:14:0f:63:ef:2e:c6:de:dd:7b:a6:26:63:67:86:
5f:52:1d:70:6d:a0:4e:77:4d:a0:bb:b1:8e:bb:5f:
d8:eb:75:b7:1f:c8:43:36:d8:8a:c5:e6:90:b3:42:
90:d8:c9:0e:e9:d8:12:52:28:ec:9b:c5:96:dd:82:
f9:e5:20:f1:b2:f3:65:28:f5:c3:12:8c:ad:65:8c:
a1:0b:35:da:a8:68:ff:ef:03:76:e2:8d:a5:1a:3a:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:29:04:13:85:F6:2A:89:FE:1E:18:C9:FF:83:0B:34:6B:DF:E6
X509v3 Authority Key Identifier:
keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9f:0c:5b:6f:84:83:64:27:1d:06:5e:33:cb:92:32:8f:e7:
49:1d:54:99:72:67:4d:b6:ab:5b:89:9b:54:b2:cf:c6:3e:76:
f3:1d:bb:8e:49:61:42:b0:7c:07:a2:59:2a:c6:fc:4f:39:b9:
a8:86:1f:bf:e6:47:7b:f5:c0:29:68:d2:8f:c8:e9:30:52:54:
83:0b:82:3c:88:9f:17:3b:fb:a0:17:46:a9:ad:08:d0:8e:e7:
d6:90:45:56:3f:5d:b8:97:09:88:c6:5a:f0:ef:24:59:42:4e:
6d:f2:2b:b1:4f:cf:2f:1e:de:e0:7c:1f:6b:90:b3:ac:d7:55:
ee:a9:75:4f:8f:0b:49:d0:2e:eb:3f:da:c4:4a:70:ec:f2:7a:
ef:96:46:ea:e8:3d:46:c3:3a:7f:66:71:74:e2:4b:98:32:2d:
e8:5d:93:e5:8b:89:1d:7c:5f:56:85:b9:6f:cb:45:96:46:0b:
77:4e:57:1e:0b:a3:16:9a:83:d3:c8:29:37:f5:27:60:d2:99:
db:37:9a:e5:d8:64:0c:0b:77:b4:c7:9b:0b:5e:26:4a:b0:af:
0b:f7:e0:fa:0a:f4:4f:2f:1f:a8:17:8a:f5:8d:5a:67:ef:59:
f6:24:59:1f:06:cf:9d:40:17:0d:93:20:74:ce:dd:d4:02:c6:
e3:72:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:51 2026 by rpki-client