Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: up3HBJKddMji2T1oLCISUEkqcuLTSEmo8dttxyQTk0s=
Subject key identifier: 76:00:CD:B1:C7:D7:23:10:1B:C7:3A:62:B9:47:B6:41:D0:88:51:D2
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019E20232E03BDF62DF337567F962F915D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 1246
Signing time: Wed 13 May 2026 07:00:36 +0000
Manifest this update: Wed 13 May 2026 07:00:36 +0000
Manifest next update: Thu 14 May 2026 07:00:36 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: HFmPTBwejPPuGRmvXcX2rDfeZ+45+2Mh8HWndvZ2Iaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:2e:03:bd:f6:2d:f3:37:56:7f:96:2f:91:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: May 13 07:00:36 2026 GMT
Not After : May 14 07:00:36 2026 GMT
Subject: CN=7600cdb1c7d723101bc73a62b947b641d08851d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:af:81:43:7c:8e:26:7f:2b:84:88:11:a5:
b2:fc:9a:06:c4:b6:e8:67:80:40:fd:cd:2e:6f:a3:
a3:fd:5b:19:cd:f7:4a:80:43:14:87:68:7d:9e:d4:
27:94:41:27:64:75:5e:28:35:89:9f:8e:5d:d6:cc:
d6:2e:99:79:06:d1:34:a6:e9:0c:92:12:4f:c4:6d:
ca:d9:a4:9e:ac:bb:e2:6f:b3:2c:77:01:77:11:35:
69:0f:25:2a:ff:68:5b:ec:4f:1e:c6:51:07:c9:57:
84:ac:1d:9c:34:a3:11:71:b2:32:dd:0e:f7:bd:0b:
52:a8:f6:da:13:d7:7b:54:7c:55:6f:5c:41:69:a2:
0a:04:b7:aa:08:2a:0c:44:66:2b:a7:0c:33:7f:0a:
10:ab:c7:3a:93:28:9d:a7:92:ad:b3:75:d8:39:dd:
d2:2e:11:77:fc:df:91:13:9a:5e:d9:7b:d7:55:b4:
96:46:a2:0c:08:d6:c0:b1:74:05:ac:2d:49:9b:0d:
6e:8b:cb:d6:80:d4:2b:ca:28:ff:7e:b6:09:67:49:
88:85:a5:74:84:1f:c3:b6:86:ad:9d:bc:23:d5:8e:
50:9b:cf:2f:6d:99:22:69:80:0c:de:35:34:0c:c4:
e0:90:84:f0:4f:a7:21:7c:a4:2d:59:ae:7d:ce:f0:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:00:CD:B1:C7:D7:23:10:1B:C7:3A:62:B9:47:B6:41:D0:88:51:D2
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:2b:33:55:78:73:99:cd:9c:22:f9:ce:22:a4:04:12:92:
e4:28:db:20:97:5d:40:61:c4:03:b3:e5:99:ad:f0:9e:da:b0:
99:5a:b2:d1:32:76:d0:18:22:db:fb:b3:f0:fb:a3:1a:1e:e4:
a1:0a:de:31:a8:c8:7a:33:aa:bb:00:8d:81:ca:d0:33:57:2f:
d0:55:59:48:0a:5d:06:52:cb:41:7e:0c:68:f7:0d:d1:de:ec:
99:88:30:13:45:54:55:d8:73:3f:16:2d:fa:14:b3:7e:cf:a8:
d3:ed:bd:dc:db:2c:25:90:dd:0f:29:2a:6f:6a:35:24:27:5e:
28:e9:18:cd:88:8f:0a:ac:fd:34:cc:85:a2:11:fa:ba:62:24:
1d:13:fa:cf:35:cd:3c:14:3c:25:45:98:75:3c:49:62:c1:be:
6e:be:05:e0:90:76:88:ab:4f:a3:d3:90:fa:ee:4a:b6:c9:d7:
31:5d:72:a5:86:7d:61:e5:fe:90:02:d6:41:70:00:90:51:d9:
c1:60:15:29:23:45:3c:ef:5b:f6:c3:08:f1:60:69:74:f4:6b:
78:2d:95:72:e9:2d:f5:5e:41:0b:0e:b2:94:42:93:5c:32:6b:
04:39:3d:d1:5f:c5:e3:c9:09:fd:e7:7c:52:12:f5:55:cd:8a:
46:cb:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:43 2026 by rpki-client