Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: bRDY6j5ruRT4Mgfb1PwalffVnBcH4e1BsjAxYY0ieNw=
Subject key identifier: F2:9D:4A:AC:E3:D3:14:FD:42:C7:95:AF:8E:6A:4B:26:E3:9E:09:15
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 019D2B4EA715FCA2126767318671D65135D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 087B
Signing time: Thu 26 Mar 2026 18:01:07 +0000
Manifest this update: Thu 26 Mar 2026 18:01:07 +0000
Manifest next update: Fri 27 Mar 2026 18:01:07 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: XvgdJB5/eXTmW69QPg9r/2MI0Qx1eXf2Qr3BGwDrSqQ=)
2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:a7:15:fc:a2:12:67:67:31:86:71:d6:51:35:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Mar 26 18:01:07 2026 GMT
Not After : Mar 27 18:01:07 2026 GMT
Subject: CN=f29d4aace3d314fd42c795af8e6a4b26e39e0915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:84:c3:b7:00:d5:79:fd:86:6d:be:b0:aa:
7e:86:8e:e9:df:8e:15:9d:8a:b9:f1:32:db:bf:90:
5c:df:ff:90:bb:4c:9a:88:91:6b:64:2c:80:a2:9f:
bb:d7:ec:d7:a9:94:35:71:b9:29:0e:94:0e:9e:99:
3e:46:d3:7b:57:9a:3a:09:30:f7:b8:9d:fc:b6:ac:
6d:98:92:53:cd:f8:0c:85:b6:9f:fd:99:6f:55:a5:
91:a6:98:b0:84:18:1a:29:1d:cf:f5:79:46:1a:c4:
0c:7c:04:1c:b9:f3:79:0e:10:5d:6f:4e:8d:a2:d1:
25:a0:09:53:e0:ce:56:5d:f6:c5:76:d4:57:a9:5f:
9c:59:e2:b7:94:2b:94:51:db:c4:4d:d7:cc:59:cc:
51:7f:24:3a:5a:4d:2b:12:52:e8:f6:5e:99:ad:95:
27:34:cd:14:20:76:9b:97:af:7a:2b:6a:dd:3a:85:
30:b4:c0:c1:63:1f:87:5d:a6:cc:8d:ce:b4:83:c4:
0f:23:06:64:c6:82:8e:60:3f:bf:b2:79:15:a7:96:
59:9e:07:d9:e3:b4:65:05:2b:99:28:5c:55:07:8f:
e2:51:9c:92:7a:ef:9e:59:eb:4d:b3:4b:73:4a:bf:
be:70:fc:7b:c4:d2:ce:5e:36:2a:69:5a:27:ab:47:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:4A:AC:E3:D3:14:FD:42:C7:95:AF:8E:6A:4B:26:E3:9E:09:15
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:b9:8b:26:85:a0:9c:af:c5:9b:f5:a6:23:ac:1f:80:9c:
4f:98:a8:1b:65:25:0d:51:46:eb:25:bf:58:48:c8:ea:c1:63:
7d:65:bd:77:5a:00:f6:0f:5f:1a:dc:4c:95:22:d7:c7:86:e0:
8c:c6:7b:d4:51:4b:51:64:28:6a:a7:64:e8:33:79:2a:f9:be:
05:c9:33:e8:35:09:e7:a9:20:cf:ca:ac:b2:ec:29:4e:dc:d7:
00:3e:54:10:33:a1:03:80:ba:c4:05:bb:78:a7:f2:74:fb:9f:
31:52:45:95:ba:4c:01:b8:99:35:e9:31:f7:2c:07:40:0d:04:
c0:17:91:24:81:52:16:92:e7:62:54:8f:13:ce:ca:db:68:1a:
75:7e:ae:af:a3:5c:fd:39:41:07:1c:87:de:16:1b:b0:f8:ec:
74:9f:e3:3a:37:e9:2d:b0:fb:ac:a2:84:ba:bb:b9:31:cc:21:
0c:11:55:3c:02:10:32:74:40:39:dc:54:81:ff:93:17:30:d7:
52:0a:98:ea:5e:26:21:4f:2e:a6:6b:f8:cd:58:31:d6:7f:e5:
16:22:96:ef:4f:f3:a4:db:4d:37:43:d3:58:36:b1:4f:7a:37:
2a:7b:17:ed:22:5d:48:cd:e2:45:d0:f8:20:1e:a6:87:68:f9:
e5:0c:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:38 2026 by rpki-client