Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: TwbHt13S/roSk4wguqpjRqJidCBAVReQD7LaDTU33vY=
Subject key identifier: 39:63:AA:71:F2:3C:A3:11:AD:94:FF:3D:E1:07:40:75:32:41:02:4E
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019D2960CDDD9E05C67861F5D207C87A00F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 087A
Signing time: Thu 26 Mar 2026 09:01:43 +0000
Manifest this update: Thu 26 Mar 2026 09:01:43 +0000
Manifest next update: Fri 27 Mar 2026 09:01:43 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: SscZlmIQJ3XVDoZLtOPYmklLQ40sBzwRjzrY+XoY0Ws=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:cd:dd:9e:05:c6:78:61:f5:d2:07:c8:7a:00:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Mar 26 09:01:43 2026 GMT
Not After : Mar 27 09:01:43 2026 GMT
Subject: CN=3963aa71f23ca311ad94ff3de10740753241024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:e5:f5:87:9a:95:16:1e:89:0f:63:af:aa:
eb:e7:63:88:b0:f4:0e:16:9f:55:73:0c:53:36:c5:
0f:74:d1:d2:a4:0c:50:85:4e:10:07:b5:39:31:ee:
bb:16:74:84:be:b3:4a:57:31:c3:52:ca:a9:e6:4c:
c9:6e:f1:5a:90:5c:8e:79:a8:d6:22:5f:92:09:01:
d6:53:22:c1:b6:a8:f6:5e:3f:6d:90:c5:76:59:e1:
e3:7f:43:ff:b2:3f:ff:c6:6e:5f:31:c2:f7:88:55:
60:07:9c:8a:12:2e:cb:53:c6:27:b9:e0:5c:e6:87:
46:dd:b2:60:02:2a:a4:ca:ed:57:1a:92:dc:26:c9:
d9:19:e1:37:e8:15:6d:cd:aa:a5:66:33:44:3e:10:
64:32:48:7f:ff:d2:62:bc:95:c7:f3:4e:71:6f:ce:
96:ce:54:69:a6:da:ee:ed:8f:b6:b6:21:36:66:8f:
08:b5:4a:cf:a8:68:2e:d2:8f:6f:a5:d5:0f:a7:fa:
ae:52:fa:7a:eb:f0:83:7b:3e:22:23:6c:bb:67:55:
d6:f0:db:b9:7c:08:86:4f:d1:1a:79:b9:c0:2a:63:
81:fb:3f:79:23:a5:3f:ce:3f:62:2f:5d:b8:2c:6a:
6b:fe:83:19:3e:d7:18:b4:56:f8:d2:21:64:48:7f:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:AA:71:F2:3C:A3:11:AD:94:FF:3D:E1:07:40:75:32:41:02:4E
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:a8:c1:4c:5c:42:2c:b8:82:8b:9b:e9:18:de:11:af:ff:
ba:1d:43:1d:8b:a3:6b:5f:86:c7:65:4c:04:e2:b5:9d:41:09:
20:22:9b:da:56:ce:8b:be:b0:98:e1:d5:8d:5a:54:a8:2d:d2:
eb:5e:76:2d:2e:8e:16:38:de:a9:92:9c:b4:e1:95:f9:7a:4f:
d8:24:6c:13:a5:c9:54:e9:bb:50:20:24:2c:1a:49:b4:d8:1c:
ad:62:54:8e:bf:3b:47:c6:68:fc:46:d5:b6:a8:70:f1:44:f4:
52:fe:8a:83:b6:6c:f7:43:01:44:e6:25:a1:58:b3:f9:2e:dc:
06:f1:64:4b:aa:44:aa:1d:22:3d:b1:d8:19:9e:ce:62:b4:a2:
be:77:3d:c3:06:8f:1f:cc:0e:8a:42:e7:64:b0:e1:fb:57:24:
db:d6:d4:a1:61:3d:f1:29:b2:34:df:64:73:94:ff:57:9d:a9:
d1:1c:df:8f:f4:17:11:4e:5f:98:99:d7:4f:89:84:1b:6e:b8:
84:dc:2b:e4:b3:ad:ca:06:07:c8:18:d4:d4:96:2b:22:76:fc:
14:8a:a7:36:3d:76:56:5b:b2:0c:63:3c:f7:96:68:df:f9:77:
09:a6:e7:e1:7b:aa:a4:05:29:25:69:09:69:f6:17:1d:65:bf:
21:80:14:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:57 2026 by rpki-client