Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File: raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier: R0NCQzAa9ca8+HduEAlnqi3QxDav19kLLsEk+OHeu8A=
Subject key identifier: 90:A6:8F:D8:0C:9A:38:D6:0F:F8:84:A9:12:D3:FB:1C:3C:58:AB:4B
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer: /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial: 019D2703E0844C96A8B8BFFEDDA47E498AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number: 11C5
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: rFQ04GqSU9DTULqn8_NPkqKbWSc.roa (hash: 8XgwklO153GBrJc2s4PKkyGugWT/fq0MyA5r4Aq8lKY=)
2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: 4Vkvh2TW6WgACFrkWMh+9cdtFX4YTmG8MGX/LVMglbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e0:84:4c:96:a8:b8:bf:fe:dd:a4:7e:49:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=90a68fd80c9a38d60ff884a912d3fb1c3c58ab4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:9e:c6:f8:d2:75:50:f2:24:f8:b2:7f:c4:
0e:7e:c6:8d:4b:a0:22:0c:fd:ef:0a:c1:74:41:6c:
78:e4:51:5b:ab:d8:74:f0:ac:fc:d1:14:6f:6d:05:
b6:43:54:aa:9e:27:fb:55:28:84:e2:89:8a:c3:8d:
8c:47:55:21:35:ee:13:13:fd:ff:8c:98:10:06:91:
1f:79:f1:0e:8e:6c:e1:59:19:76:90:f6:81:d2:c6:
26:6f:1d:d5:a6:29:0d:89:3e:f4:da:f4:b3:80:b3:
2d:b1:e7:b1:12:2e:a5:4b:c4:6f:1b:1a:4c:f7:dc:
a8:f5:4c:af:89:da:9d:37:be:51:3b:d6:13:24:0c:
af:e0:55:54:46:9a:d6:56:c5:1c:8c:b8:c0:b4:12:
75:34:11:3a:53:12:fc:9f:98:57:b1:d2:ac:2a:b0:
78:05:cc:5c:75:38:33:9e:67:03:1b:63:0a:36:76:
0f:36:86:e4:67:b4:49:7c:a7:3d:79:04:c3:c5:d3:
0a:89:8e:1c:64:0f:65:a1:d3:c0:b5:b3:54:6e:55:
5e:e8:3e:99:d0:03:c1:4b:a4:07:c0:f2:68:f0:de:
4a:b5:57:ae:0a:69:ee:49:6f:ac:8a:42:d1:0d:05:
78:30:89:2e:21:3b:d8:b4:82:d7:19:92:a0:41:26:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:8F:D8:0C:9A:38:D6:0F:F8:84:A9:12:D3:FB:1C:3C:58:AB:4B
X509v3 Authority Key Identifier:
keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:3a:85:b9:51:28:3c:6e:eb:c8:72:6d:6d:82:b3:00:c7:
2d:b4:2b:cc:2b:6a:9e:7c:73:d0:f6:bb:13:5a:a3:d9:b7:f0:
03:eb:1f:01:c2:46:a2:ed:69:ed:a2:d8:49:c2:f8:e3:7e:2b:
c4:fe:40:21:bf:27:e2:96:f8:8d:c0:0a:c5:a3:8a:a4:99:f4:
19:11:02:81:02:aa:2b:c8:65:96:f1:d5:21:e5:75:18:94:cb:
35:55:e7:78:e6:25:8f:13:b0:49:00:b5:fb:4d:d7:1e:f5:2d:
ab:31:59:ba:c0:08:56:a6:9d:18:f3:f3:36:01:e7:3d:5e:9b:
e0:1c:35:7b:f4:1d:45:d8:b4:77:32:f6:bc:a6:a3:84:d4:00:
39:94:88:26:07:95:22:9b:84:25:e1:b5:70:4e:6f:48:e9:96:
69:c6:b7:bf:da:66:e8:40:c3:c0:50:e9:7e:62:df:5d:09:c5:
e3:b1:e9:5f:5a:3d:ab:41:c6:b8:f8:f1:4b:a3:07:1a:a9:b4:
eb:6c:63:78:72:78:9c:df:f2:cd:6e:1e:11:23:62:c0:6f:5c:
af:7d:dd:33:d9:88:fc:1a:c8:62:05:41:07:ed:99:6e:43:7f:
09:a9:5d:8f:cd:43:01:f2:ec:0e:5f:a4:de:c3:07:0f:0f:53:
c1:a4:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:37 2026 by rpki-client