Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: i/rXJfTlku1MB4cp9cX0om3+I34uteZoOJUZ6YirooE=
Subject key identifier: FE:BE:E0:7B:13:01:11:D5:F3:CF:C6:31:1E:9C:FF:90:2D:2E:E5:91
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019F916CFFD69F465B49F4D9EAA7F1F0E790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 09B9
Signing time: Fri 24 Jul 2026 00:01:07 +0000
Manifest this update: Fri 24 Jul 2026 00:01:07 +0000
Manifest next update: Sat 25 Jul 2026 00:01:07 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: W3wl+Gwp0RLeTQzFK5m6H86HhrTlqjPzoJ1wFQnjM2k=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:ff:d6:9f:46:5b:49:f4:d9:ea:a7:f1:f0:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Jul 24 00:01:07 2026 GMT
Not After : Jul 25 00:01:07 2026 GMT
Subject: CN=febee07b130111d5f3cfc6311e9cff902d2ee591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:1e:cf:7e:9c:be:7a:aa:fd:71:22:0d:e9:
69:5c:63:c7:65:5e:f1:09:c9:15:e6:16:cf:ec:22:
c1:ff:d2:1b:fa:fb:61:d3:94:7c:0d:c7:af:66:cd:
18:2f:d3:1e:d6:e0:8c:04:17:c4:73:c1:56:8f:55:
f4:74:b0:52:62:75:97:1f:2f:92:61:24:3d:f8:dc:
de:22:f0:fe:d4:8f:85:d6:39:5c:ea:61:06:ed:cc:
9e:7a:cb:36:50:44:84:59:ca:c7:31:c1:7c:3e:d9:
03:fa:2d:62:cc:f0:8d:63:3a:5e:9c:bd:69:07:54:
57:62:a2:0c:ae:36:b2:f3:8c:a2:13:04:49:58:b9:
90:4a:42:77:29:c4:dd:51:82:83:37:58:b4:49:d8:
ba:31:0f:4e:d6:cc:5e:32:d5:02:64:31:56:1f:93:
48:7b:bf:4b:2e:cb:40:63:35:7f:a4:df:e1:23:9b:
71:ea:1e:9a:55:36:4f:95:c4:2a:2c:01:22:1f:f9:
fa:63:0c:02:ff:a8:90:43:a8:c1:04:02:22:fb:de:
dd:53:16:3d:0f:9a:12:71:16:d8:13:ff:e5:c7:0b:
f8:34:30:07:79:d0:d5:be:0c:3c:a9:10:76:e4:39:
83:c1:16:c2:e8:99:ca:86:75:19:c5:e2:bb:d0:04:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BE:E0:7B:13:01:11:D5:F3:CF:C6:31:1E:9C:FF:90:2D:2E:E5:91
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:19:39:cd:85:72:21:77:a4:a6:45:6a:b6:eb:bd:ea:89:70:
42:2e:29:f3:56:61:80:29:df:b1:9f:10:f5:34:36:32:23:06:
90:56:fd:4f:b1:5f:66:52:e8:ec:e9:fa:a3:cf:95:da:1e:75:
94:10:23:ab:09:58:89:e6:1e:f9:b4:87:f9:33:d9:d9:35:9b:
ec:30:db:fe:0a:62:23:12:9e:ca:c5:f0:01:10:7e:61:1f:86:
31:89:57:62:88:dd:68:0f:bb:2a:4f:87:07:6b:58:d7:b0:91:
9a:62:74:37:ac:9e:07:f8:a9:71:83:c7:4b:4e:ba:8a:02:0b:
30:ab:5b:b1:47:15:6f:ca:a6:4b:2a:f3:72:ef:b7:b5:39:1a:
b3:db:26:0e:bf:9d:5a:f2:d8:b0:78:da:e6:b4:8d:36:02:ff:
ac:b2:b1:7a:72:1a:00:88:2e:5e:db:6e:fe:c9:6f:e5:4c:6f:
d1:95:dd:26:27:ee:23:76:2f:f1:5c:a0:a4:a8:53:e0:56:4f:
f9:72:6e:ed:12:98:63:6e:76:04:36:5f:6e:1c:6d:96:a9:8a:
e1:ce:62:33:37:8d:f9:4e:6f:1d:58:68:8a:d1:81:80:19:86:
80:14:40:d3:09:20:ff:e9:35:fc:6d:39:be:6c:12:35:29:2f:
af:93:a6:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbP/Wn0ZbSfTZ6qfx8OeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy
NWEyNWEwHhcNMjYwNzI0MDAwMTA3WhcNMjYwNzI1MDAwMTA3WjAzMTEwLwYDVQQD
EyhmZWJlZTA3YjEzMDExMWQ1ZjNjZmM2MzExZTljZmY5MDJkMmVlNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEoez36cvnqq/XEiDelpXGPHZV7x
CckV5hbP7CLB/9Ib+vth05R8DcevZs0YL9Me1uCMBBfEc8FWj1X0dLBSYnWXHy+S
YSQ9+NzeIvD+1I+F1jlc6mEG7cyeess2UESEWcrHMcF8PtkD+i1izPCNYzpenL1p
B1RXYqIMrjay84yiEwRJWLmQSkJ3KcTdUYKDN1i0Sdi6MQ9O1sxeMtUCZDFWH5NI
e79LLstAYzV/pN/hI5tx6h6aVTZPlcQqLAEiH/n6YwwC/6iQQ6jBBAIi+97dUxY9
D5oScRbYE//lxwv4NDAHedDVvgw8qRB25DmDwRbC6JnKhnUZxeK70AQbowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6+4HsTARHV88/GMR6c/5AtLuWRMB8GA1UdIwQY
MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt
NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw
LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxk5zYVy
IXekpkVqtuu96olwQi4p81ZhgCnfsZ8Q9TQ2MiMGkFb9T7FfZlLo7On6o8+V2h51
lBAjqwlYieYe+bSH+TPZ2TWb7DDb/gpiIxKeysXwARB+YR+GMYlXYojdaA+7Kk+H
B2tY17CRmmJ0N6yeB/ipcYPHS066igILMKtbsUcVb8qmSyrzcu+3tTkas9smDr+d
WvLYsHja5rSNNgL/rLKxenIaAIguXttu/slv5Uxv0ZXdJifuI3Yv8VygpKhT4FZP
+XJu7RKYY252BDZfbhxtlqmK4c5iMzeN+U5vHVhoitGBgBmGgBRA0wkg/+k1/G05
vmwSNSkvr5Om/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:49 2026 by rpki-client