Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: I/KdWdzSWcPBQM1zS0F21a5UlvaUF5DW9sP88TZx8hM=
Subject key identifier: C5:2F:32:77:4C:35:31:D9:99:C8:89:23:4B:49:02:ED:8B:C0:A8:70
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 01A0DD971EA1DE4FE4391D0AC0D887BBB958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0A65
Signing time: Sat 26 Sep 2026 12:01:03 +0000
Manifest this update: Sat 26 Sep 2026 12:01:03 +0000
Manifest next update: Sun 27 Sep 2026 12:01:03 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: BtWCnTkndJx1RoPt+JcmBKqERt1E1BgPH3s+i2rnb2I=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:1e:a1:de:4f:e4:39:1d:0a:c0:d8:87:bb:b9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Sep 26 12:01:03 2026 GMT
Not After : Sep 27 12:01:03 2026 GMT
Subject: CN=c52f32774c3531d999c889234b4902ed8bc0a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:6b:e6:1d:aa:9d:4f:d3:3c:de:d6:34:b5:
51:c7:3a:97:2c:27:c1:63:be:bd:47:45:c5:ba:0c:
43:9a:08:85:ce:26:6f:d7:06:4e:c1:64:fe:e7:7b:
ae:38:2c:61:2f:5e:bc:d4:d3:9a:36:b6:1e:49:9c:
ed:a3:6e:0e:84:f8:26:d7:41:d0:48:ba:28:18:7a:
0e:32:5e:43:ee:6b:c8:33:05:bf:fc:92:7a:2c:23:
d7:f0:96:9e:d3:24:bb:f5:a3:3e:47:99:b3:f8:cc:
29:1a:89:4b:57:96:28:a7:5d:3c:5e:e9:64:49:9f:
97:2a:71:76:df:29:20:43:97:0f:b0:fc:54:96:67:
54:09:1f:dc:27:0b:d6:92:44:67:fc:28:0a:67:e1:
9e:30:33:06:0b:99:7f:37:5b:82:86:01:a1:9a:5b:
2b:67:d9:4e:da:c9:f3:e0:27:75:0b:14:4d:d3:75:
42:b4:5a:a6:84:aa:14:2c:33:1a:06:8a:b9:11:b5:
65:fa:62:f4:95:78:f7:a3:d5:ab:89:df:18:1a:59:
36:bc:0f:a6:27:4f:a8:97:29:71:5e:0b:ea:38:d3:
e6:0a:c9:5d:ba:af:07:23:fa:f6:1e:4d:28:94:25:
e5:9d:e0:b3:cb:d1:3d:18:30:92:eb:0b:b7:d1:30:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:32:77:4C:35:31:D9:99:C8:89:23:4B:49:02:ED:8B:C0:A8:70
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:68:a8:e0:d5:4b:ce:3e:35:7a:f2:56:51:93:7a:48:dd:f7:
79:f6:22:bf:96:f6:ca:4e:f7:36:db:93:bf:ab:08:58:42:5e:
ae:5d:e0:bb:af:6d:ec:ff:af:ab:7e:5f:9e:92:81:a6:d0:cc:
13:f7:7a:bd:26:33:42:65:ac:e3:7d:84:66:77:9b:a4:0d:c7:
1a:a7:de:50:3e:58:1e:4b:23:72:95:40:72:e0:01:8b:e9:ee:
b9:d7:e9:c3:12:8f:41:d1:a8:ce:70:cd:28:5b:26:52:d3:2e:
7c:a8:b5:e1:6c:80:2a:6b:00:53:9e:6e:4d:ad:79:a1:1c:c1:
d1:99:bf:d9:5b:f5:1e:31:19:29:30:ff:56:ca:0a:d2:8d:59:
a8:82:a4:7a:ce:7b:b8:c2:cf:b5:47:85:cb:0a:8b:b9:04:7e:
1a:6d:47:0f:c9:df:ce:c7:48:16:18:87:eb:cf:e2:31:55:da:
10:55:79:47:59:d1:61:e1:50:7a:2b:58:1a:df:7f:83:e2:db:
79:f4:e0:94:d3:33:1b:e1:e8:1e:7c:6c:a3:65:db:65:aa:cf:
0f:bd:77:be:c7:b0:2b:96:dc:91:28:07:66:21:0d:e4:af:01:
61:9e:69:33:ee:4a:24:75:fb:7c:65:cd:a7:20:64:76:5f:ab:
c6:ad:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:25 2026 by rpki-client